<p>Rather than provisioning resources on-behalf of a user which would require them exposing their credentials to you in some way, I would implement this using the various marketplaces:</p>

<ul>
<li><strong>Azure</strong>: <a href="https://docs.microsoft.com/en-gb/azure/marketplace/marketplace-virtual-machines" rel="nofollow noreferrer">Virtual Machine Offer Publishing</a></li>
<li><strong>AWS</strong>: <a href="https://aws.amazon.com/blogs/apn/how-to-list-your-product-in-aws-marketplace/" rel="nofollow noreferrer">How to List Your Product in AWS</a></li>
<li><strong>GCP</strong>: <a href="https://cloud.google.com/marketplace/sell/#form" rel="nofollow noreferrer">Sell on GCP</a></li>
</ul>

<p>This has a couple of advantages:</p>

<ol>
<li>It's fully automated, you are never exposed to their subscriptions thus you don't need to prove that you no longer have access - you never had it in the first place.</li>
<li>Everything is created within the customer's Subscription (Azure), Account (AWS) or Project (GCP) thus they bear all of the costs, you then get money from the cloud provider based upon how you price yourself in the marketplace.</li>
<li>You can generally create more than just a VM, i.e. you could create a PaaS Database for persistence.</li>
</ol>

CC BY-SA 4.0
2019-10-17T08:14:49.613Z
Thanks. Is there a way to "pass on" AWS credits to users or bear the billing on behalf of users, for my VM on AWS for example, i.e. pay for new users who don't have an AWS subscription?
Shadow12348
CC BY-SA 4.0
2019-10-17T09:14:18.470Z
Not sure I fully understand, but if you are serving clients who do not have an AWS account you could operate as a Cloud Solution Provider (CSP) which gives you tools to manage AWS accounts on clients behalf.
Richard Slater
CC BY-SA 4.0
2019-10-16T12:28:25.283Z
2019-10-16T12:28:25.283Z
Richard Slater
<p>I'd like to build a service where I run a custom setup script on behalf of a user on an <code>t2.micro</code> equivalent instance but be able to probably relinquish access to the server. Any advice on the tech stack and flows that I could use to accomplish this?</p>

<p>Let's assume I have unlimited access to AWS resources to create as many instances as I like. The service is targeted at users unfamiliar with how even <code>ssh</code> works and we are basically setting up a custom software service automatically that runs on their dedicated service. But we need to prove that there is no way we can gain access to this user's server again.</p>

<p>Any help about creative ways to accomplish this?</p>

<docker><amazon-web-services><terraform>
Provisioning a server on behalf of a user on GCP/AWS/Azure and probably relinquish access
Shadow12348
# Provisioning a server on behalf of a user on GCP/AWS/Azure and probably relinquish access

(Asked by: username_0 on 2019-10-15)

I'd like to build a service where I run a custom setup script on behalf of a user on an `t2.micro` equivalent instance but be able to probably relinquish access to the server. Any advice on the tech stack and flows that I could use to accomplish this?

Let's assume I have unlimited access to AWS resources to create as many instances as I like. The service is targeted at users unfamiliar with how even `ssh` works and we are basically setting up a custom software service automatically that runs on their dedicated service. But we need to prove that there is no way we can gain access to this user's server again.

Any help about creative ways to accomplish this?

**Tags:** docker, amazon-web-services, terraform


---

## 1 answers

### Answer by username_1 on 2019-10-16. Score: 2 | Accepted answer

Rather than provisioning resources on-behalf of a user which would require them exposing their credentials to you in some way, I would implement this using the various marketplaces:

* **Azure**: [Virtual Machine Offer Publishing](https://docs.microsoft.com/en-gb/azure/marketplace/marketplace-virtual-machines)
* **AWS**: [How to List Your Product in AWS](https://aws.amazon.com/blogs/apn/how-to-list-your-product-in-aws-marketplace/)
* **GCP**: [Sell on GCP](https://cloud.google.com/marketplace/sell/#form)

This has a couple of advantages:

1. It's fully automated, you are never exposed to their subscriptions thus you don't need to prove that you no longer have access - you never had it in the first place.
2. Everything is created within the customer's Subscription (Azure), Account (AWS) or Project (GCP) thus they bear all of the costs, you then get money from the cloud provider based upon how you price yourself in the marketplace.
3. You can generally create more than just a VM, i.e. you could create a PaaS Database for persistence.

> **Comments:**
> **username_0**: Thanks. Is there a way to "pass on" AWS credits to users or bear the billing on behalf of users, for my VM on AWS for example, i.e. pay for new users who don't have an AWS subscription?  
> **username_1**: Not sure I fully understand, but if you are serving clients who do not have an AWS account you could operate as a Cloud Solution Provider (CSP) which gives you tools to manage AWS accounts on clients behalf.  

---

