Multi-cloud · Platform Engineering
Self-service Service Catalogue that lets external clients spin up secure infra in minutes.
We built a multi-tenant self-service Service Catalogue exposing curated, secure infra products to external clients — provisioning collapsed from weeks to 12 minutes.
[Env provisioning]
12 min
[Ticket handoffs]
0
[Policy enforcement]
100%
[ The Problem ]
Where the business was stuck.
External clients waited weeks for secure infrastructure provisioning through manual ticket queues.
[ Key Challenges ]
- ▸External clients blocked by internal ticket queues
- ▸No way to expose safe, curated infra products externally
- ▸Security team gated every request manually
Our approach
How we engineered
the outcome.
STEP 01
Backstage-based catalogue with Terraform modules as products
STEP 02
Policy-as-code and per-tenant guardrails baked in
STEP 03
Self-service portal with SSO for external clients
[ Solution highlights ]
Delivered — measured — in production.
- ✓12-minute avg env provisioning (was ~3 weeks)
- ✓Zero ticket handoffs for standard requests
- ✓Security policy provably enforced on every product
[ Tech stack ]
Built on Multi-cloud.
Backstage
Terraform
OPA
Vault
"
Our external clients now serve themselves — with tighter guardrails than we ever had manually.