Deploy

Stand up the lab and prove both trust paths. The Walkthrough is the main runbook — four staged applies, verify after each, then tear down.

• Architecture — public/private subnets, ALB paths, optional nginx export, hosts.
• Trust distribution — Linux CA install via S3 and SSM.
• Walkthrough — staged Terraform, prove scripts, destroy.

Private CA bills monthly while the CA exists — charged from creation until deletion. Billing starts at stage 3. Tear down in the same session. Detail: Cost.

---

Table of contents

• Architecture
• Trust distribution
• Walkthrough