Architecture, per-cloud setup, security posture, pilot rollout, and daily-use reference. Kept in sync with each Refine release; the same PDFs are bundled with every customer delivery.
Start here if you're new to Refine or just subscribed.
Capabilities, multi-cloud coverage, competitive positioning, FAQ. The single doc to read first.
Download →Set up the Refine server on AWS, connect your first cloud account, learn the daily-use flow. ~60 min start to finish.
Download →What Refine needs to run: instance sizing by account count, supported AWS regions, disk + memory minimums, OS requirements.
Download →For your security team, architects, and reviewers.
How Refine deploys in your AWS account, where data lives, and what crosses the boundary — your cost and infrastructure data stays in your account (paid tiers send zero telemetry; the Free edition sends only an anonymous aggregated monthly summary).
Download →Detailed network paths, security groups, NACLs, optional VPC endpoint configurations, and air-gap variants.
Download →Exact IAM policy text for every role Refine creates. Used by security reviewers to validate the read-only-by-design claim.
Download →Pick the path that matches how you subscribed.
For customers who subscribed via AWS Marketplace (Free or a paid tier). Subscribe, launch the CloudFormation stack, and Refine verifies your subscription automatically — no license file or form. Covers stack launch and first login.
Download →For customers who received a delivery ZIP from Blacktip directly. EC2 sizing, setup wizard, PostgreSQL production option, HTTPS via ALB.
Download →For GovCloud, FedRAMP, and classified-network deployments. Sneakernet-compatible delivery, offline Ed25519 license verification, zero internet dependency.
Download →GovCloud-partition specifics. CloudFormation differences (Cost Explorer paths dropped), partition ARNs, FedRAMP inheritance.
Download →One guide per cloud. Refine supports all three in a single deployment.
One-click CloudFormation per AWS account. Creates the per-account Lambda collector + S3 bucket. External-ID protected. Optional keyless mode creates no IAM access key when Refine runs on EC2 in the same AWS partition.
Download →One-line curl | bash in Azure Cloud Shell. Creates Entra ID app, Reader role, Storage Account, and daily Cost Management Export. Supports Azure Public + US Government.
Terraform module. Creates Service Account with viewer + BigQuery data-viewer roles, plus BigQuery billing export.
Download →Wire Refine into your existing directory. RBAC mapping for ROOT / ADMIN / USER roles, plus per-account-group scoping.
Download →Once Refine is running.
Every page, every dashboard, every recommendation type. The complete reference for FinOps teams using Refine daily.
Download →How to run a successful 90-day Refine pilot: stakeholder mapping, week-by-week milestones, value-realization checkpoints, executive presentation.
Download →Every Refine delivery ships with the same docs bundled in the ZIP. If you have a question that isn't covered here, or you want the latest version delivered with your release, email support@blacktip-ops.com. Typical response within 1 business day.