Servers get launched here, and only by people who are allowed to.
Invite-only accounts with a second sign-in factor.
Every launch comes from a reviewed request. Developers submit, admins approve.
Regions, instance sizes and instance counts are capped, and every action is logged.
Internal tool. Sessions end after 30 minutes of inactivity.