Cloud control and reporting

Kerrigan cloud API control model

Cloud services broker every remote interaction; the local admin REST API is outside this path.

Kerrigan cloud API control model Cloud applications use AWS services to discover Kerrigan, send asynchronous commands, receive lifecycle events, and consume reported state. An optional CLI validates the same contracts, while a protected pairing service establishes the appliance identity without exposing the local admin REST API. CLOUD ENVIRONMENT KERRIGAN APPLIANCE INVOKE DISCOVER / READ PUBLISH CMD COMMANDS EVENTS REPORTS STATE WRITE LOCAL ACTION PAIRING RESULT CALLER Operator / automation independent IAM identity CLOUD Cloud integration application · optional validation CLI STATE Registry + latest state Thing Group · DynamoDB MQTT AWS IoT Core QoS 1 · cluster-scoped topics WAF + SHIELD Pairing service one-time code · certificate CONNECTOR Kerrigan cloud connector outbound mTLS connection LOCAL Fleet Manager authoritative state FLEET DevKits boot · OTA · health LEGEND COMMAND CLOUD API / EVENT ASYNC STATE SECURITY BOUNDARY