Appendix D. Official references

Below are the official vendor documentation pages and technical standards cited and verified for this course book. All references were verified on October 21, 2026.

Vercel

• Vercel Documentation
• Deployments & Environments
• Environment Variables
• Deployment Protection & Protection Bypass for Automation
• Functions Configuration & Fluid Compute

Supabase · PostgreSQL

• Supabase Documentation
• Connecting to Postgres & Supavisor Connection Pooler
• Row Level Security (RLS)
• Auth Redirect URLs & Wildcards
• Storage Access Control & Signed URLs
• Database Backups & Point-in-Time Recovery (PITR)
• PostgreSQL Documentation — CREATE INDEX CONCURRENTLY

HashiCorp Terraform · GitHub Actions

• Terraform Language & State Documentation
• Purpose of Terraform State
• S3 Backend & State Locking (use_lockfile)
• The lifecycle Meta-Argument (prevent_destroy)
• Refactoring (moved blocks) & import blocks
• Sensitive Data in State & Ephemeral Values
• GitHub Docs — Configuring OpenID Connect in Amazon Web Services

Amazon Web Services (Route 53)

• Amazon Route 53 Developer Guide
• Choosing between alias and non-alias records
• Choosing a routing policy & Health Checks

Cloudflare

• Cloudflare Reference & Zero Trust Docs
• DNS Proxy status (Orange Cloud vs Grey Cloud)
• SSL/TLS Encryption modes (Full (Strict)) & Origin CA
• Cache Rules & Edge Caching
• Cloudflare Workers & Queues
• Cloudflare AI Gateway
• Cloudflare Tunnel (cloudflared)
• Split Tunnels & Local Domain Fallback
• User-side Root Certificates for Developers

NIST · Tailscale · OpenTelemetry · OWASP

• NIST SP 800-207 Zero Trust Architecture
• NIST SP 800-61 Rev. 3 Incident Response Recommendations
• Tailscale Documentation — How Tailscale Works, Subnet Routers & ACLs
• OpenTelemetry Documentation
• OWASP Secrets Management Cheat Sheet