VPC Deployment
The VPC Deployment layer handles the automated peering of the Spendplane Shadow Plane with your existing private cloud infrastructure.
Supported Private Clouds
Private Link & Transit Gateway supported.
ExpressRoute & VNet Peering supported.
Cloud Interconnect & Shared VPC support.
Automated CIDR Management
Spendplane automatically scans your VPC for available CIDR blocks to avoid address space collisions. When you initiate a spendplane deploy, we reserve a /24 subnet for the ephemeral Shadow Plane.
Security Groups
Spendplane automatically configures security groups to only allow ingress traffic from the Shadow Plane. Outbound traffic from your VPC remains locked within your private boundaries.
Resource Discovery
Our Scanning Engine identifies internal databases (RDS, PostgreSQL, Redis) and legacy services, creating a local DNS map for your LLM agents.