Overview
OpenChoreo Reference Architecture for AWS
WSO2 Developer Platform for OpenChoreo is an open-source Internal Developer Platform (IDP), a CNCF Sandbox project delivered on AWS with enterprise support. It is a Kubernetes-native platform that provides a production-ready IDP for building and operating software at scale on AWS. The platform offers opinionated abstractions for developers, strong governance controls for platform teams, and AI-agent-ready interfaces for autonomous operations, backed by enterprise-grade support from WSO2.
Why OpenChoreo on AWS
Organizations often assemble in-house developer platforms using services such as Amazon EKS, AWS CodePipelines, CloudWatch, API Gateways, and Cognito (among others) with Backstage portals and scripts, resulting in high integration overhead and ongoing maintenance. OpenChoreo replaces this with a single Kubernetes-native IDP on EKS, where platform teams define standardized golden paths once using CRDs, and developers and agents consume them via portal, CLI, MCP Servers and/or GitOps. The result is a faster path to production, built-in governance, reduced operational complexity, and an AWS App Runner-like developer experience while retaining full control over AWS infrastructure.
The problem OpenChoreo solves
Developers and platform engineers have different expectations from the same platform. Developers require a streamlined, self-service experience, while platform engineers need control, governance, and visibility into the underlying infrastructure. Many internally built platforms optimize for one group at the expense of the other, forcing teams to integrate and maintain multiple systems such as developer portals, CI/CD pipelines, GitOps workflows, observability stacks, and access controls. OpenChoreo addresses this by providing a fully integrated IDP from day one, combining developer self-service with platform-level control without the need for ongoing integration overhead.
Ready to get started? Contact the WSO2 team at https://wso2.com/contact/ for a personalized demo or enterprise discussion.
Highlights
- A complete Internal Developer Platform (IDP) that is ready to use from day one, with a modular architecture to integrate your existing tech stack.
- Deliver a unified platform experience through a Backstage-based portal, CLI, API, and MCP servers for platform teams, developers, and AI agents.
- Security and governance by design with golden paths, platform and developer abstractions, role-based access controls, resource isolation, and multi-tenancy out of the box.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Vendor refund policy
N/A
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
WSO2 Developer Platform for OpenChoreo on EKS
- Amazon EKS
Container image
Containers are lightweight, portable execution environments that wrap server application software in a filesystem that includes everything it needs to run. Container applications run on supported container runtimes and orchestration services, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS). Both eliminate the need for you to install and operate your own container orchestration software by managing and scheduling containers on a scalable cluster of virtual machines.
Version release notes
Initial release of WSO2 Developer Platform for OpenChoreo on AWS Marketplace.
OpenChoreo is an open-source Internal Developer Platform (IDP) for Kubernetes, originally developed by WSO2. It provides development and architecture abstractions, a Backstage-powered developer portal, application CI/CD, GitOps, and observability. OpenChoreo is a CNCF Sandbox project.
This release deploys OpenChoreo v1.0.0 onto a fully provisioned AWS environment using a single CloudFormation template that automates the entire setup:
Infrastructure provisioned:
- Amazon EKS cluster (configurable version, instance type, and node count)
- Amazon RDS PostgreSQL (encrypted, automated backups)
- Amazon Cognito user pool with pre-configured admin, developer, and viewer roles
- AWS Secrets Manager for secure credential management
- Amazon ECR repository for application build artifacts
- VPC with public/private subnets across 2 AZs, NAT gateway, and internet gateway
- Elastic IPs for control plane, data plane, and observability plane
- AWS Load Balancer Controller with IRSA
- External Secrets Operator with IRSA
- EBS CSI driver with IRSA
The bootstrap container runs as a Kubernetes job, automatically installing all OpenChoreo Helm charts including the control plane, data plane, workflow plane, and observability plane.
Supports custom domain configuration or quick-start mode using nip.io.
Requirements:
- An AWS account with permissions to create the above resources
- A valid email address for the initial admin user
- Minimum 3 nodes (c8i-flex.xlarge recommended)
Additional details
Usage instructions
Prerequisites:
- AWS account with admin-level IAM permissions
- A valid email to receive the initial admin password
Step 1: Launch the CloudFormation stack Click the deployment template link below, or launch directly: https://console.aws.amazon.com/cloudformation/home#/stacks/create/review?templateURL=https://openchoreo-mp-cfn.s3.amazonaws.com/0.2.0.yaml&stackName=wso2-developer-platform-for-openchoreo
Step 2: Fill in parameters
- AdminEmail: Your email (receives a temporary Cognito password)
- BaseDomain: Your domain (e.g. openchoreo.example.com) or leave empty for nip.io quick start
- Adjust EKS node type, count, and RDS instance class as needed
Step 3: Acknowledge IAM resource creation and click "Create Stack"
The stack takes approximately 30-45 minutes to complete. It provisions all infrastructure and automatically runs the bootstrap container to install OpenChoreo.
Step 4: Access OpenChoreo Once complete, go to the CloudFormation Outputs tab to find:
- ConsoleURL: Your OpenChoreo developer portal
- APIURL: The platform API endpoint
- DNSInstructions: DNS records to create (if using a custom domain)
Sign in with your AdminEmail and the temporary password sent to your inbox.
If you need help with your deployment contact us at https://wso2.com/contact/
Support
Vendor support
WSO2 offers two types of support models - Basic Support and Enterprise Support. Basic Support offers 12x5 support while Enterprise Support is 24x7 support.
For support details refer to https://wso2.com/licenses/support-policy/5.9/ .
For enterprise inquiries https://wso2.com/contact/
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products


