xcsh

Use the latest xcsh with an authenticated environment, existing certificate/key inputs, and your namespace in XCSH_NAMESPACE. Keep keys, encrypted artifacts, and resource reports in a private directory outside Git.

For native Terraform preparation without the xcsh CLI, see the Terraform walkthrough. Both retained endpoints serve the same public trust certificate; each tool owns separate resources.

Prerequisites at a glance

An authenticated xcsh context, an existing namespace, a matching certificate/key pair, and private owner storage.

Workflow

1. Prerequisites
2. Configuration
3. Configure
4. Verify
5. Maintain
6. Remove