Architecture, per-cloud setup, security posture, pilot rollout, and daily-use reference. All current as of Refine v3.3.0. PDFs are bundled with every customer delivery — these copies are kept in sync.
Start here if you're new to Refine or just subscribed.
Capabilities, multi-cloud coverage, competitive positioning, FAQ. The single doc to read first.
Download →Set up the Refine server on AWS, connect your first cloud account, learn the daily-use flow. ~60 min start to finish.
Download →What Refine needs to run: instance sizing by account count, supported AWS regions, disk + memory minimums, OS requirements.
Download →For your security team, architects, and reviewers.
How Refine deploys in your AWS account, where data lives, what crosses the boundary (nothing — zero egress to Blacktip).
Download →Detailed network paths, security groups, NACLs, optional VPC endpoint configurations, and air-gap variants.
Download →Exact IAM policy text for every role Refine creates. Used by security reviewers to validate the read-only-by-design claim.
Download →Pick the path that matches how you subscribed.
For customers who subscribed via AWS Marketplace. Stack launch, license-request form, S3 license upload, first login.
Download →For customers who received a delivery ZIP from Blacktip directly. EC2 sizing, setup wizard, PostgreSQL production option, HTTPS via ALB.
Download →For GovCloud, FedRAMP, and classified-network deployments. Sneakernet-compatible delivery, offline Ed25519 license verification, zero internet dependency.
Download →GovCloud-partition specifics. CloudFormation differences (Cost Explorer paths dropped), partition ARNs, FedRAMP inheritance.
Download →One guide per cloud. Refine supports all three in a single deployment.
One-click CloudFormation per AWS account. Creates the per-account Lambda collector + S3 bucket. External-ID protected.
Download →One-line curl | bash in Azure Cloud Shell. Creates Entra ID app, Reader role, Storage Account, and daily Cost Management Export. Supports Azure Public + US Government.
Terraform module. Creates Service Account with viewer + BigQuery data-viewer roles, plus BigQuery billing export.
Download →Wire Refine into your existing directory. RBAC mapping for ROOT / ADMIN / USER roles, plus per-account-group scoping.
Download →Once Refine is running.
Every page, every dashboard, every recommendation type. The complete reference for FinOps teams using Refine daily.
Download →How to run a successful 90-day Refine pilot: stakeholder mapping, week-by-week milestones, value-realization checkpoints, executive presentation.
Download →Every Refine delivery ships with the same docs bundled in the ZIP. If you have a question that isn't covered here, or you want the latest version delivered with your release, email support@blacktip-ops.com. Typical response within 1 business day.