• AWS account with a dedicated IAM user (documind-deployer, AdministratorAccess for this sandbox account)
• Domain you control, able to change nameservers
• terraform >= 1.6, kubectl, helm >= 3.16, docker, aws CLI, pnpm (via corepack)
• GitHub repos created: documind-infra, documind-gitops, documind-backend, documind-frontend, documind-agent

aws configure --profile documind
aws sts get-caller-identity --profile documind