A checklist for deciding how much of the stack to hand off, and when to keep it in-house.
Every team evaluating a platform like this eventually asks some version of "should we run this ourselves or let them run it." The more useful framing isn't build versus buy, since the build itself is the same either way. It's who operates the infrastructure underneath a data product once it exists: your cloud and your team, or a managed environment.
These aren't a one-time, company-wide decision. It's common to keep a handful of sensitive products engineering-only, on infrastructure your security team already reviewed, while letting less sensitive ones run full-stack. The manifest and the proof a product ships with are identical either way, only who operates the compute underneath changes.
If you're unsure, start full-stack. A first product is the wrong place to also be standing up new infrastructure ownership. You can move a specific product to engineering-only later, once you know it's worth keeping.
Want the full reference, or ready to see it on your own data?
See deployment options