View a markdown version of this page

Step 4: Deploy the Compute stack - Innovation Sandbox on AWS

Step 4: Deploy the Compute stack

In this step, you deploy the compute resources required for the ISB application.

Important

Ensure that you are logged in using the Hub account for deploying the Compute stack.

  1. Sign in to the AWS Management Console and choose the button to launch the Compute stack CloudFormation template.

Launch Stack

The template launches in the US East (N.Virginia) Region by default. To launch the solution in a different AWS Region, use the Region selector in the console navigation bar.

  1. On the Create stack page, verify that the correct template URL is in the Amazon S3 URL text box, and choose Next.

  2. On the Specify stack details page, enter a stack name for your solution stack. For information about naming character limitations, see IAM and AWS STS quotas, name requirements, and character limits in the AWS Identity and Access Management User Guide.

  3. Under Parameters, review the parameters for this solution template and modify them as necessary. This solution uses the following default values.

    Parameter Default Description

    Namespace

    myisb

    Use the same namespace from the Account Pool stack deployment of Innovation Sandbox. For example, myisb.

    Org Management Account Id

    <Requires input>

    The AWS Account Id of the Organization Management account where the AccountPool stack is deployed.

    IDC Account Id

    <Requires input>

    The AWS Account Id where the IAM Identity Center is configured.

    Allow Listed IP Ranges

    0.0.0.0/1,128.0.0.0/1

    Comma separated list of CIDR ranges that allow access to the API.

    Use Stable Tagging

    Yes

    Automatically use the most up to date and secure account cleaner image up until the next minor release.

    Note: Selecting 'No' will pull the image as originally released, without any security updates.

    Accept Solution Terms of Use

    <Requires input>

    Solution’s terms of use statement for review. The solution will not deploy unless you enter Accept in the parameter field.

    Custom Domain Name

    <Optional>

    A single fully-qualified domain to serve the solution on (for example, isb.example.com). If empty, the CloudFront distribution URL is used. No wildcards, scheme, or path. To attach this domain (with TLS) to the CloudFront distribution, also provide Custom Domain Certificate ARN. If you front the solution with your own edge or proxy, set this to your public domain and leave the certificate ARN empty. For details, refer to Configure a custom domain.

    Custom Domain Certificate ARN

    <Optional>

    The ARN of an existing AWS Certificate Manager (ACM) certificate in the us-east-1 Region that covers the Custom Domain Name (a wildcard certificate is supported). Provide this to serve the domain on the CloudFront distribution. Leave empty if you terminate TLS on your own edge or proxy.

  4. Choose Next.

  5. On the Configure stack options page, review and choose to acknowledge the messages under Capabilities and transforms, and choose Next.

  6. On the Review and create page, review and confirm the settings.

  7. Choose Submit to deploy the stack.

    You can view the status of the stack in the AWS CloudFormation Console in the Status column. You should receive a CREATE_COMPLETE status in approximately 60 minutes.

Note

New deployments of Innovation Sandbox on AWS start with maintenance mode turned ON. Only Innovation Sandbox Admin users can use the web application until an Admin completes the post-deployment configuration and turns maintenance mode off. For more information, see Post-deployment configuration tasks and Managing maintenance mode.