Create

Mesh Design Studio

Compose domains → write mesh.yaml → generate pipelines for Terraform

1Design
2Generate
3Package
4Terraform

Create data mesh

Region · accounts · VPC

editing

1 · Where

Organization Name prefix AWS region

2 · Accounts

Single account POC — one account for all roles Three accounts Producer · Steward · Publisher

Producer account Steward account Publisher account

IAM roles are created by Terraform — do not paste role ARNs.

3 · Networking (VPC)

Default — no VPC AWS-managed network (not account default VPC) Use existing VPC Your subnet + security group IDs Create new VPC Terraform builds private VPC + Lambda SG

VPC ID (optional) Private subnet IDs Security group IDs

New VPC CIDR Availability zones

Default = no VPC. Choose existing or create only for private ENIs.

Drop domains next

Region / accounts / VPC are set above. Stack bronze → silver → gold, then Generate.

Live contract

Export copy / download

{}

Set region · accounts · VPC above, then drop domains

Mesh health

Activity

Trust snapshot

Generated pipelines

Domain	Layer	Product	Engine	Handler	Readers	Path

Layer Lambda fleet

—

VRP trust board

Domain	Status	Rows	Proof

PVDM-A attestations

Four-phase invariant

Research paper (PDF) — arXiv:2608.14643 · Proof-Gated Publication for Serverless Data-Mesh Lakehouses