# Documentation

- [Command](/documentation/command.md): Command line tools to build and orchestrate secure by design applications.
- [Nodes and Workers](/documentation/command/nodes.md): Ockam Nodes and Workers decouple applications from the host environment and enable simple interfaces for stateful and asynchronous message-based protocols.
- [Routing and Transports](/documentation/command/routing.md): Ockam Routing and Transports enable protocols that provide end-to-end guarantees to messages traveling across many network connection hops and protocols boundaries.
- [Relays and Portals](/documentation/command/advanced-routing.md): Ockam Relays make it easy to traverse NATs and run end-to-end protocols  between Ockam Nodes in far away private networks. Ockam Portals make existing protocols work over Ockam Routing.
- [Identities and Vaults](/documentation/command/identities.md): Ockam Identities are unique, cryptographically verifiable digital identities. These identities authenticate by proving possession of secret keys. Ockam Vaults safely store these secret keys.
- [Secure Channels](/documentation/command/secure-channels.md): Ockam Secure Channels are mutually authenticated and end-to-end encrypted messaging channels that guarantee data authenticity, integrity, and confidentiality.
- [Verifiable Credentials](/documentation/command/credentials.md): Scale mutual trust using lightweight, short-lived, revocable, attribute-based credentials.
- [Guides](/documentation/command/guides.md)
- [AWS Marketplace](/documentation/command/guides/aws-marketplace.md): AWS Marketplace listings guides
- [Ockam Node](/documentation/command/guides/aws-marketplace/ockam-node.md): Create an ockam node using Cloudformation template
- [Ockam Node for Amazon MSK](/documentation/command/guides/aws-marketplace/ockam-node-for-amazon-msk.md): Create an ockam kafka outlet node using Cloudformation template
- [Ockam Node for Amazon RDS Postgres](/documentation/command/guides/aws-marketplace/ockam-node-for-amazon-rds-postgres.md): Create an Ockam Postgres outlet node using Cloudformation template
- [Ockam Node for Amazon Timestream InfluxDB](/documentation/command/guides/aws-marketplace/ockam-node-for-amazon-timestream-influxdb.md): Create an Ockam Timestream InfluxDB outlet node using Cloudformation template
- [Ockam Node for Amazon Redshift](/documentation/command/guides/aws-marketplace/ockam-node-for-amazon-redshift.md): Create an Ockam Redshift outlet node using Cloudformation template
- [Ockam Node for Amazon Bedrock](/documentation/command/guides/aws-marketplace/ockam-node-for-amazon-bedrock.md): Create an Ockam Bedrock outlet node using Cloudformation template
- [Programming Libraries](/documentation/libraries.md)
- [Rust](/documentation/libraries/rust.md): Rust crates to build secure by design applications for any environment – from highly scalable cloud infrastructure to tiny battery operated microcontroller based devices.
- [Nodes and Workers](/documentation/libraries/rust/nodes.md): Ockam Nodes and Workers decouple applications from the host environment and enable simple interfaces for stateful and asynchronous message-based protocols.
- [Routing and Transports](/documentation/libraries/rust/routing.md): Ockam Routing and Transports enable other Ockam protocols to provide end-to-end guarantees like trust, security, privacy, reliable delivery, and ordering at the application layer.
- [Identities and Vaults](/documentation/libraries/rust/vaults-and-identities.md): Generate cryptographically provable unique identities and store their secret keys in safe vaults.
- [Secure Channels](/documentation/libraries/rust/secure-channels.md): Create end-to-end encrypted and mutually authenticated secure channels over any transport topology.
- [Credentials and Authorities](/documentation/libraries/rust/credentials.md): Scale mutual trust using lightweight, short-lived, revokable, attribute-based credentials.
- [Implementation and Internals](/documentation/libraries/rust/internals.md)
- [Nodes and Workers](/documentation/libraries/rust/internals/nodes.md)
- [Protocols](/documentation/protocols.md): Cryptographic and Messaging Protocols that provide the foundation for end-to-end application layer trust in data.
- [Nodes and Workers](/documentation/protocols/nodes.md): Ockam Nodes and Workers decouple applications from the host environment and enable simple interfaces for stateful, asynchronous, and bi-directional message-based protocols.
- [Routing and Transports](/documentation/protocols/routing.md): Ockam Routing and Transports enable higher level protocols that provide end-to-end guarantees to messages traveling across many network connection hops and protocols boundaries.
- [Keys and Vaults](/documentation/protocols/keys.md): Ockam Vaults store secret cryptographic keys in hardware and cloud key management systems. These keys remain behind a stricter security boundary and can be used without being revealed.
- [Identities and Credentials](/documentation/protocols/identities.md): Ockam Identities are cryptographically verifiable digital identities. Each Identity has a unique Identifier. An Ockam Credential is a signed attestation by an Issuer about the Attributes of a Subject.
- [Secure Channels](/documentation/protocols/secure-channels.md): Ockam Secure Channels are mutually authenticated and end-to-end encrypted messaging channels that guarantee data authenticity, integrity, and confidentiality.
- [Access Controls and Policies](/documentation/protocols/access-controls.md)
- [Audit by Trail of Bits](/documentation/audit-by-trail-of-bits.md): Ockam went through extensive cryptographic audits