The Trinity Beast — AWS Partner Onboarding Guide

1. Overview

If you need direct, low-latency access to The Trinity Beast — bypassing the public ALB and the internet — you have two connection paths depending on the protocol you need:

2. Critical Ports — Monitor These

3. Connecting via PrivateLink (TCP)

PrivateLink creates a private endpoint in your VPC that routes directly to our internal TCP NLB. Traffic stays on the AWS backbone the whole way — you never see our VPC CIDR or container IPs, and we never see yours.

Onboarding Steps

aws ec2 create-vpc-endpoint \
  --vpc-id vpc-YOUR_VPC_ID \
  --service-name com.amazonaws.vpce.us-east-2.vpce-svc-0147410454a727b3f \
  --vpc-endpoint-type Interface \
  --subnet-ids subnet-YOUR_SUBNET \
  --security-group-ids sg-YOUR_SG \
  --region us-east-2

# LPO price query via PrivateLink (request/response)
curl http://vpce-XXXX.vpce-svc-0147410454a727b3f.us-east-2.vpce.amazonaws.com:8080/price?asset=BTC&api_key=YOUR_KEY

# LRS report via PrivateLink (Authorization: Bearer header required)
curl -H "Authorization: Bearer YOUR_KEY" \
  http://vpce-XXXX.vpce-svc-0147410454a727b3f.us-east-2.vpce.amazonaws.com:9090/reports/usage

# Real-Time WebSocket Feed (persistent connection — prices pushed as they arrive)
wscat -c "ws://vpce-XXXX.vpce-svc-0147410454a727b3f.us-east-2.vpce.amazonaws.com:8080/ws/prices?api_key=YOUR_KEY"
# Then subscribe: {"subscribe": ["BTC","ETH","SOL"]}
# Prices flow continuously — no polling required

flowchart TD
    A[You create a VPC Interface Endpoint] --> B[Connection shows pendingAcceptance]
    B --> C[The Trinity Beast approves the connection]
    C --> D[Endpoint becomes available]
    D --> E[You connect using the endpoint DNS on ports 8080 / 9090]
    E --> F[Traffic routes over the AWS backbone]
    F --> G[NLB load-balances to a healthy container]
    G --> H[You receive a UME response]

    style A fill:#1e3a5f,stroke:#60a5fa,color:#e2e8f0,stroke-width:2px
    style B fill:#334155,stroke:#94a3b8,color:#e2e8f0,stroke-width:2px
    style C fill:#4a2800,stroke:#FF9900,color:#e2e8f0,stroke-width:2px
    style D fill:#064e3b,stroke:#10b981,color:#e2e8f0,stroke-width:2px
    style E fill:#1e3a5f,stroke:#60a5fa,color:#e2e8f0,stroke-width:2px
    style F fill:#334155,stroke:#94a3b8,color:#e2e8f0,stroke-width:2px
    style G fill:#334155,stroke:#94a3b8,color:#e2e8f0,stroke-width:2px
    style H fill:#064e3b,stroke:#10b981,color:#e2e8f0,stroke-width:2px
        

WebSocket Feed Protocol

You can open a persistent WebSocket connection at /ws/prices?api_key=KEY on port 8080 and receive real-time price updates from the same exchange feeds that power the entire system. No polling, no intervals — prices arrive the instant they're received from the 6 exchanges.

Available assets: GET /ws/assets — returns all 360 prewarmed assets across 6 exchanges. No auth required.

4. Connecting via VPC Peering (UDP)

VPC Peering connects your VPC to ours. Traffic routes between the two VPCs using private IPs. You send UDP datagrams to our NLB's static private IP — Layer 4 pass-through with zero measurable overhead. The NLB routes to healthy containers automatically, surviving deployments and scaling events without any changes on your end.

Onboarding Steps

aws ec2 create-vpc-peering-connection \
  --vpc-id vpc-YOUR_VPC_ID \
  --peer-owner-id 211998422884 \
  --peer-vpc-id vpc-03deaddb7083cd59c \
  --peer-region us-east-2 \
  --region YOUR_REGION

aws ec2 create-route \
  --route-table-id rtb-YOUR_RT \
  --destination-cidr-block 10.0.0.0/16 \
  --vpc-peering-connection-id pcx-XXXXXXXXXXXX \
  --region YOUR_REGION

# UDP LPO price query (Python example)
import socket, json
sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
payload = json.dumps({"asset": "BTC", "api_key": "YOUR_KEY"})
sock.sendto(payload.encode(), ("NLB_PRIVATE_IP", 2679))
data, _ = sock.recvfrom(4096)
response = json.loads(data)
print(json.dumps(response, indent=2))

flowchart TD
    A[You request VPC Peering to The Trinity Beast VPC] --> B[The Trinity Beast accepts the peering connection]
    B --> C[You add a route to 10.0.0.0/16]
    C --> D[The Trinity Beast adds a route to your CIDR]
    D --> E[The Trinity Beast opens its security group for your CIDR]
    E --> F[You send a UDP datagram to the NLB private IP]
    F --> G[NLB passes it through to a healthy container]
    G --> H[You receive a UME response datagram]

    style A fill:#1e3a5f,stroke:#60a5fa,color:#e2e8f0,stroke-width:2px
    style B fill:#4a2800,stroke:#FF9900,color:#e2e8f0,stroke-width:2px
    style C fill:#1e3a5f,stroke:#60a5fa,color:#e2e8f0,stroke-width:2px
    style D fill:#4a2800,stroke:#FF9900,color:#e2e8f0,stroke-width:2px
    style E fill:#4a2800,stroke:#FF9900,color:#e2e8f0,stroke-width:2px
    style F fill:#1e3a5f,stroke:#60a5fa,color:#e2e8f0,stroke-width:2px
    style G fill:#334155,stroke:#94a3b8,color:#e2e8f0,stroke-width:2px
    style H fill:#064e3b,stroke:#10b981,color:#e2e8f0,stroke-width:2px
        

5. Quick Reference

6. How Approvals Are Processed (TBCC)

Behind the scenes, The Trinity Beast Command Center gives our team a dedicated Partner Management widget for reviewing and approving applications. When your application comes in, this is the tool that generates the exact commands our team runs to connect you.

The widget also gives our team a Partners tab for viewing every connected partner, a Pending Approvals tab for accepting PrivateLink and VPC peering requests, and a Security Groups tab for managing UDP access CIDRs.

7. What Happens After You're Approved

Approval is not just a status flip. The moment your application is marked approved, we automatically provision your API key and email it to you — you can start making requests without any further manual step on either side.

What you receive: a live API key scoped to the partner tier (unlimited access, LRS reporting included free, no billing), and a welcome email with an authenticated 72-hour magic-link that logs you directly into your Account Dashboard — no separate login step required. We give you 72 hours instead of the normal 15-minute magic link, since you may not open the email right away. That email also includes both the TCP (PrivateLink) and UDP (VPC Peering) instructions from Sections 3 and 4.

Your LRS Reports

LRS Reports are included free for your Partner-tier account by policy — no addon purchase required. Your Account Dashboard sidebar shows a Reports link under the Partner section, taking you to the same LRS Reports panel (date-range filtering, 4-format export) available to paying subscribers.

Your Asset Watchlist

You can configure a specific watchlist of assets rather than pulling from the full prewarmed catalog on every call. Your Account Dashboard's Partner Connection panel gives you a chip-picker for this. Your watchlist is stored on your key record and is there for your own reference — it does not restrict which assets you can actually query, since Partner access is unlimited by policy.