The cloud engineer's Tenka-Ichi.

An OSS competition platform on real AWS. Take an app that "only works locally" and make it production-grade — auth, exposure, audit, and availability are auto-scored every minute, and the leaderboard moves in real time. Organizers run events, scoring, and a reusable problem catalog from one console.

First quest · No signup · ~3 min what-is-tenkacloud Tutorial Difficulty: Intro Learn what TenkaCloud is — by playing it. Don't read the pitch — solve one quest. You'll learn the product and its modes inside the problem; clearing it unlocks deploy-tenkacloud-lite. Start with this quest

▶ Watch the 30-second tour · Hosting an event? Host your own event · Get a Hosted Event quote

Operated by BULL LLC · Apache 2.0

TenkaCloud — TenkaCloud Battle ◉ English ▼◎ Score: 2360 pt / Rank: 1/2♙ Guest ▼

Welcome, Guest

Welcome to TenkaCloud Battle
Team cumulative score
Total
2360 pt
Rank
1 / 2
Problems
3
Completed
1
Score trend
Showing all 2 teams in this event
Select event / team ⌄
300025002000150010005000 21:3721:3921:4121:4321:4521:4721:4921:51 21:50 gan 1980 pt (Guest you) 2360 pt
━ gan━ (Guest you)

Take on problems

3 problems are deployed. Open the problem list to start.

Two modes

Live battles. Solo challenges. Or both.

Real-time Battles and patient Challenges, in a single event if you want.

Battle

Uptime, in real time. A health check probes every team every minute — the last one standing wins.

Score events
Your team's score-change history, auto-refreshed every 30 seconds. Up to 100 newest events.
Cumulative score trend
2000150010005000 21:37:0021:43:0021:49:00
History (100)
Occurred Problem Type Delta
Seconds ago microservice-migration-battle Battle (uptime) -100 pt
1 min ago hello-world Challenge (flag) +800 pt

Challenge

Solve the problem, submit the flag, earn the points. Learn one AWS service at a time, in depth.

Problem list (Quests)
A catalog of problems deployed to your team. Jump directly to each access URL from its card.
All (3) Battle (2) Challenge (1)
Unsolved (3)
microservice-migration-battle Battle Difficulty: intermediate In progress
hello-world Challenge Difficulty: intro Unanswered
hello-world-battle Battle Difficulty: intermediate In progress
⌄ Cleared (0)
Who it's for

Build cloud capability across the org.

For Cloud Enablement (CCoE), Platform / SRE, and Security teams that need hands-on AWS training — without rebuilding the event platform. Environment provisioning, login, scoring, and progress tracking — all in one screen.

Cloud Enablement / CCoE

Run training events multiple times a year.

New-grad onboarding, internalization programs, cross-team AWS drills — run them multiple times a year on the same platform. Move from one-off workshops to a planned annual program.

Talk to us
Platform / SRE

Design drills from one screen.

Each team gets an isolated AWS environment, automatically provisioned. Scoring, progress, and Console access are aggregated. A week of setup collapses to an afternoon, freeing up facilitators.

Operator guide
Engineers / individual learners

Sharpen on the real thing.

Solve problems on live AWS infrastructure and climb the rank. The platform is OSS, so meetups, schools, and communities can also self-host on their own AWS account for free.

Author a problem
Onboarding

Connect AWS in three steps.

We designed away the "what's it going to do in my account?" question. One least-privilege AssumeRole — nothing more, nothing less.

01

Deploy the bootstrap, once.

One CloudFormation template, deployed once into your account. An IAM Role is provisioned for us.

02

Locked with ExternalId.

TenkaCloud can only AssumeRole with a unique ExternalId. A leaked Role ARN gets you nowhere.

03

Compete from the portal.

Log in. Your problem stack deploys itself. Endpoints and scores are live the moment you land.

Security

Your AWS account, still yours.

  • Cross-account AssumeRole + ExternalId. Every call into a player account carries a unique ExternalId. Knowing the Role ARN gets an attacker nothing.
  • Tear it down whenever, yourself. One click in the portal removes the stack. No orphans, no surprise charges.
  • The code is on GitHub. Lambdas, Step Functions, the IaC — read what runs, line by line. Apache License 2.0.
  • Near-zero idle cost. Lambda / DynamoDB / API Gateway are all pay-per-use. Between events, the platform sits at near-zero spend (subject to AWS minimum service charges).
SSO Credentials
One-click federated login to AWS Console. No personal AWS account required — participants access the environment the host has prepared, safely from the portal.
How to use Press a button below to open AWS Console, already signed in, in a new tab. The session TTL is one hour.
microservice-migration-battle
AWS Accountc7782015332
Regionus-east-1
hello-world
AWS Account677c9285832
Regionap-northeast-1
hello-world-battle
AWS Account677c9285832
Regionus-east-1
≈0$/h
Designed for near-zero idle cost.
100%
Open source. Apache 2.0. End to end.
2files
metadata.json + template.yaml to ship a problem.
1click
Participants federate into the AWS Console.
Catalog grows with you

Missing a problem? Author your own.

The problem catalog lives in the open TenkaCloudChallenge repo — write two files (metadata.json + template.yaml) and you have a new problem. A new-problem skill is shipped for Claude Code and other coding agents, so even first-timers can ship a problem just by describing the idea.

Start with an AI agent

Paste the prompt below into Claude Code or Codex and the agent will explain TenkaCloud and guide you through playing or hosting. It reads the LLM briefing llms-full.txt.

Fetch https://tenkacloud.com/llms-full.txt and read it — it is the canonical AI-agent briefing for TenkaCloud. If you cannot fetch URLs, ask me to paste its contents instead. Then, in my language: (1) explain what TenkaCloud is in about five sentences, (2) ask whether I want to PLAY (no AWS account needed) or HOST my own event on AWS, and (3) guide me step by step through the matching quick start from the briefing, stating costs and teardown before anything touches a real AWS account.
Commercial offerings

Three productized offerings — formally documented.

The OSS platform stays free under Apache 2.0. For organizations that want setup, live operations, or a program run for them, we offer three productized packages. Each has a fixed shape — scope, deliverables, exclusions, delivery model.

Hosted Event

One operated drill, end to end.

A 1-day cloud drill on the public OSS catalog, run by us. Event design, deploy into your AWS account, dry run, live facilitation, post-event report. Per-event fixed price.

Annual Arena

A 12-month program.

An annual contract of 4 operated events per year for one org: learning paths curated from the public problem catalog (beginner → advanced). Original problem development is not included in this package.

CCoE Enablement (add-on)

Advisory, sold separately.

A monthly retainer for operating-model / training-roadmap work. Never bundled into the two offerings above, so events stay productized. If you want both, that is two line items.

Pricing

Start small. Move to a yearly program.

The platform itself is Apache 2.0 OSS, so self-hosting on your own AWS account is free. Pay only when you want setup, day-of operations, or a multi-event program run for you.

Starter
¥500K/ event
Pilot (1 event, up to 2 teams)

For first-time hosts who want to validate the operated experience at a small scale.

  • Up to 2 teams per pilot event
  • Deploy / day-of support
  • Selected from the public problem set

* You bring your own AWS account.

Request a quote
Annual Arena
¥6M/ year
Annual contract — 4 operated events per year

For organizations that want to run 4 events per year on the same platform — new-grad onboarding, CCoE programs, or platform enablement.

  • Up to 4 events per year (by department / cohort)
  • Beginner → intermediate → advanced learning path proposal from the public problem catalog + facilitator playbook template
  • Post-event PDF report (= scoring history, team progress, and attack timeline pulled from the portal — one PDF per event)

* Quoted by scope and scale. You bring your own AWS account.

Talk about a program

Custom problem authoring follows the same scope as regular software development (requirements → implementation), so we quote it separately. Get in touch for that and for anything beyond these tiers.

Not sure which plan fits

Let's talk.

Cloud enablement programs, internal onboarding, recurring AWS drills — share your scale, cadence, and audience, and we'll figure out the right setup together.

If you are considering TenkaCloud for enterprise or internal training use, please feel free to contact us. TenkaCloud is open source, but we would love to learn more about real-world training needs, custom exercise requirements, and how organizations want to run hands-on operations/security drills.

Responses are stored in a Google Form (managed by Google) and used only for replying and quoting (see Privacy Policy).