We are going to perform the following steps:
Here are the steps you need to follow to provision the control. In the previous task, we created an AWS Service Catalog product but it has not yet been provisioned.
Navigate to the ServiceCatalogPuppet CodeCommit repository
Scroll down to the bottom of the page and hit the Create file button
it should look like the following - but with your account id on the highlighted line:
Append the following snippet to the end of the main input field:
The CloudFormation template we used to create this product had a parameter named InstanceType. The highlighted lines show how we can use the framework to set a value for that parameter when provisioning it.
Now that we have written the manifest file we are ready to commit it.
Set the File name to
Set your Author name
Set your Email address
Set your Commit message
Using a good / unique commit message will help you understand what is going on later.
The YAML file we created in the previous step told the framework to perform the following actions:
When you added the following:
You told the framework to provision v1 of aws-config-desired-instance-types from the portfolio cloud-engineering-governance into every account that has the tag type:prod
Within each account there will be a copy of the product provisioned into each of the regions listed in the regions_enabled section:
For this workshop, we are creating and provisioning the product into the same AWS Account, but in a multi-account setup, you might choose to create a product in a “hub” account and provision it only to “spoke” accounts.
In the workshop, you will only have permission to view the products in eu-west-1.
Once you have made your changes the ServiceCatalogPuppet Pipeline should have run. If you were quick in making the change, the pipeline may still be running. If it has not yet started feel free to the hit the Release change button.
Once it has completed it should show the Source, Generate and Deploy stages in green to indicate they have completed successfully:
If this is failing please raise your hand for some assistance
Once you have verified the pipeline has run you can go to Service Catalog provisioned products to view your provisioned product. Please note when you arrive at the provisioned product page you will need to select account from the filter by drop down in the top right:
If you cannot see your product please raise your hand for some assistance
You have now successfully provisioned a product
To see the AWS Config rule enabled, navigate to AWS Config rules. Once there you should see the following: