# Installation Overview

> If you require complex or custom routing, and have Infrastructure-as-Code for your deployments already, this is where you will find key information.

### [IaC & TERRAFORM ➜](/docs/discriminat/aws/iac/)

If you require complex or custom routing, and have Infrastructure-as-Code for your deployments already, this is where you will find key information.

### [CONFIG REFERENCE ➜](/docs/discriminat/aws/config-ref/)

The various ways AWS-native Security Groups can be annotated with appropriate FQDN allowlists and traffic monitoring rules after deployment of DiscrimiNAT.

### [DEFAULT PREFERENCES ➜](/docs/discriminat/aws/default-prefs/)

Global level preferences for controlling logs verbosity, wildcards exposure and monitoring mode.

### [LOGS REFERENCE ➜](/docs/discriminat/aws/logs-ref/)

Fields, filters and recipes to find what you need from DiscrimiNAT's config and flow logs in AWS CloudWatch.

### [REFERENCE ARCHITECTURES ➜](/docs/discriminat/aws/reference-architectures/)

The DiscrimiNAT Firewall supports three deployment topologies: **GWLB Cross-Zone**, **GWLB Intra-Zone** and **ENI per AZ**. See their high-level diagrams and read more about their non-functional properties such as the RTO.

### [QUICK START (from Marketplace) ➜](/docs/discriminat/aws/quick-start/)

For a 5-minute deployment, assuming secure defaults, from within the marketplace console itself. This will totally lock down the private subnets in your VPC from the get-go unless monitoring mode or appropriate FQDN-based egress firewall rules exist for outbound connections.