We have two groups of resources that would be created in your account. In the first stage, we provision a new VPC, IAM role and VPC IPv6 CIDR Block.
These resources are created by adding external networks (BYOA) and launching a CloudFormation stack in your AWS account.
After that, DoubleCloud will be able to create resources only in that VPC under the role that was provided at the beginning.
In the second stage, virtual machines, disks, KMS keys and S3 buckets will be created when the user provisions a new cluster.