Skip to main content
Synthetiq BYOI provisioning is declarative: you describe the desired state in a config file (_infra/synthetiq.yaml), generate a plan showing exactly what will change, and provision to apply it.

​
What you need

  • Two issued ACM certificates for the domain. See Certificates.
  • A domain you control — every app gets a subdomain under it (e.g. my-app.apps.yourcompany.com). See DNS for the records you’ll create.
  • The Synthetiq CLI — installed from the private npm registry. See Installation.
  • A Synthetiq service account for provisioning from CI (local runs use your own login). See Service Account.
  • An AWS account with appropriate permissions — a dedicated sub-account is recommended; see Networking and Permissions.
  • A git repository for the Synthetiq infrastructure configuration.
  • The right Synthetiq org permissions on your account — see below.

​
Required Synthetiq permissions

Which org scopes you need depends on how you provision: Check what your current role grants:
The Scopes: list shows your effective org scopes. If any are missing, ask an organization Admin to grant them via a role (Admins have all scopes).

​
Finding your organization id

Several steps need your organization id — the CI workflow’s organization-id input and the OIDC token exchange. Get it from either:
  • Console — Settings → Account, the Organization ID row (with a copy button).
  • CLI — synthetiq whoami prints Org ID:.

​
The lifecycle at a glance

For production, steps 2 and 3 run from CI — see CI Integration. For the full order of operations, follow a walkthrough: Local Machine or CI.