Platform as a Service, cloud environment for application developers. PaaS providers offer a computing platform with an operating system, database, web server and programming language tools. PaaS users can develop their solutions without having to purchase the necessary hard- and software.

See the Cloud Computing. IaaS / PaaS / SaaS Layers presentation for more information.

Visit the Cloud Orchestration Framework page for the details on PaaS capabilities used in the Cloud Orchestrator.


Usage-based payment method in which users pay only for the services actually provided or resources actually consumed.

Users can easily see the current monthly prices for EPAM Cloud resources using the 'or2price' Maestro CLI command and estimate their virtual machine monthly cost.

The cost of a project in different configurations can be estimated using the Cost Estimator.

The cloud resources are billed on the hourly basis. The actual charge depends on a number of factors, such as whether the virtual machine is running or stopped, how much storage volume is actually consumed, whether checkpoints and images are used, etc.

The Reporting tab of the Cloud Management Console allows monitoring the hourly project costs as well as the cost of the used resources.

See the Account Management Guide, Section 8, Billing in EPAM Cloud, for details.


The password is used to log in to virtual instances in private or public regions or to application servers.

In private regions, the password is used as a part of domain credentials to log in to Windows instances. For Mac instances, custom user/password combination is used. Linux instances, in their turn, are accessed via SSH.

In public regions, to connect to a Windows instance, the specific password is generated.

Windows Password in AWS/Google/Exoscale

On Windows instances, the password generated by AWS is used. It can be retrieved with the Get Windows Password option in the instance details on the AWS Management Console. The other method which does not require accessing AWS directly, is decrypting the password with Maestro tools. This is done in two steps:

1. Run or2console command several minutes after the VM is launched (it takes at least4 minutes to generate the password). You will get an email containing the details on the VM and an attachment with the encrypted password. Save the attachment.

2. Run or2-aws-decrypt-password command and specify the path to the file saved on step 1, and the path to the SSH key used on instance launch. The command output will contain the decrypted password to the instance.

Windows Password in Azure

The password for Azure Windows instances is generated at instance creation and is sent in an email to the instance requestor. No specific actions on password deciphering. In case the password is lost, it is impossible to request it again.

For more information on logging in to virtual instances, please see Logging in to virtual instances presentation for more information.

Visit the Cloud Orchestration Framework page for the details on PaaS capabilities used in the Cloud Orchestrator.

Personal Project

Project available for EPAM Cloud users for their personal purposes (training, demo, educational, etc.) for free, but within a certain monthly financial allowance (quota). The personal project monthly quota corresponds to the job function level of the employee. Additionally, daily resource quotas are applicable.

Personal projects are not to be used as billable projects.

In EPAM Cloud personal projects can be run only in the EPAM-BY2 region for EPAMers all over the world, and in EPAM-IN1 - for the employees in India.

See Quick Start Guide, Section 7, Personal Quotas and Projects, for details.


User permissions in EPAM Cloud specify the scope of actions the user can perform in cloud. Each project member is given access to a certain set of actions, depending on their current project. If a user has several roles with a project, they have default permissions corresponding to the role with the maximum permission level.

In case the default permissions are not enough for EPAM Cloud, one of the project responsible persons can provide additional access using the Manage Cloud wizard.

The project role also affects the set of permissions the user will have when logging in to public cloud providers via SSO. It is impossible to update these permissions manually, but in case expanded permissions are needed, the user can request an IAM user.

See User Permissions page to find more info and the guidelines on permissions management.

Primary Contact

The user acting as the first point-of-contact for all major events and changes in a project. The Primary Contact receives project-related alerts and notifications, messages about instance status changes, reports and security-related alerts.

In EPAM Cloud, the Project Manager and Delivery Manager are the primary contacts for the project. Primary contacts are assigned automatically according to the user's role in UPSA.

See Security Policy for details.

Private Cloud

Cloud computing model offering similar services as the public cloud but only for a single enterprise and operating totally within its firewall.

EPAM Private Cloud is a set of cloud services designed to achieve various goals within a secure environment, based on EPAM hardware.

See EPC Services page for details.

Project Financial Quota

Financial limitation applied to a project and specifying the desired monthly cost limit.

Project financial quotas are set up by project responsible persons (Project Manager, Account Manager, Project Coordinator) with the help of the Manage Cloud wizard. In case the quota is applied to a public cloud provider, and the total sum exceeds $500, additional approvals can be needed.

Quotas mechanism also includes the possibility to set up notifications informing on the level of the quota depletion, and to specify which actions should be performed by Orchestrator when the quota limit is reached.

See the EPAM Cloud - Account Management Guide, Section 4, Project Quotas, for details.

Project Financial Quota Alert

Project financial quota alert is an email sent to project primary and secondary contact when the project cloud cost reaches a specific limit (the quota total, or some ).

The alert includes the information on the alert trigger, for example, the quota is 50% used, or depleted completely. The main aim of the quota alert is to provide timely info on the project financial state. As a result, the project team can react properly and review their infrastructure utilization flow in order to keep to the previously estimated budgets.

See the EPAM Cloud - Account Management Guide, Section 4, Project Quotas, for details.

Project Role

Set of functions and duties defining the user's scope of responsibility within the project. The Project Role has the related set of User Permissions defining the user's access to the EPAM Cloud Services.

The list of available default Project Roles is mapped to the list of job functions. Once a user is assigned to a project, the Project Manager select the Project Role(s) corresponding to the user's function in the project. The default Project Roles define the default User Permissions associated with them. The default permissions can be edited, if necessary.

See the Account Management Guide, Annex A - User Permissions, for the list of default Project Roles.

Project Resource Quota

The resource quota identifies the number of virtual resources that the project members can run within 24 hours. This applies to virtual machines and storage volumes, created with EPAM Orchestrator tools.

The resource quota allows to control virtual infrastructure expansion, and to omit uncontrolled growth in case of an error (for example in an automation script) or caused by human factor. In addition, for AWS regions, significant resource quota depletion within a short period of time can indicate that the account was compromised, and urgent actions are needed.

In case the daily resource quota is depleted on a project, project members can not create new resources via EPAM Orchestrator till the 24-hours period ends. However, for public clouds, it is still possible to run new resources by logging in to their native management consoles.

See the EPAM Cloud - Account Management Guide, Section 4, Project Quotas, for details.

Public Cloud

Cloud computing model where the resources and services are generally available via the Internet and accessible via self-service portals.