AWS solutions documentation change
Summary
Added Multi Account/Multi Region configuration parameters and guidance, including IAM role deployment requirements
Security assessment
Documents security-related CloudFormation parameters (ENABLE_MULTI_ACCOUNT_DEPLOYMENT) and IAM role management, but no evidence of addressing a specific security vulnerability
Diff
diff --git a/solutions/latest/connected-mobility-solution-on-aws/aws-cloudformation-template.md b/solutions/latest/connected-mobility-solution-on-aws/aws-cloudformation-template.md index 2d3b1898f..9784806dd 100644 --- a/solutions/latest/connected-mobility-solution-on-aws/aws-cloudformation-template.md +++ b/solutions/latest/connected-mobility-solution-on-aws/aws-cloudformation-template.md @@ -9,4 +9,4 @@ You can download the CloudFormation templates for this solution before deploying -Template name | Download the template | Launch the template in the AWS Management Console | Prequisites ----|---|---|--- -**vpc.template** \- Use this template to deploy the VPC module and all associated components. The default configuration deploys the services found in the [VPC module](./virtual-private-cloud-vpc-1.html) section, and you can customize the template to meet your specific needs. | [view template button](https://s3.amazonaws.com/solutions-reference/connected-mobility-solution-on-aws/latest/vpc/vpc.template) | [launch button](https://console.aws.amazon.com/cloudformation/home?region=us-east-1#/stacks/new?stackName=vpc&templateURL=https://solutions-reference.s3.amazonaws.com/connected-mobility-solution-on-aws/latest/vpc/vpc.template&redirectId=ImplementationGuide) | None -**auth-setup.template** \- Use this template to deploy the Auth Setup module and all associated components. The default configuration deploys the services found in the [Auth Setup module](./auth-setup-1.html) section, and you can customize the template to meet your specific needs. | [view template button](https://s3.amazonaws.com/solutions-reference/connected-mobility-solution-on-aws/latest/auth-setup/auth-setup.template) | [launch button](https://console.aws.amazon.com/cloudformation/home?region=us-east-1#/stacks/new?stackName=auth-setup&templateURL=https://solutions-reference.s3.amazonaws.com/connected-mobility-solution-on-aws/latest/auth-setup/auth-setup.template&redirectId=ImplementationGuide) | None +Template name | Download the template | Launch the template in the AWS Management Console | Prequisites | Optional Features +---|---|---|---|--- +**vpc.template** \- Use this template to deploy the VPC module and all associated components. The default configuration deploys the services found in the [VPC module](./virtual-private-cloud-vpc-1.html) section, and you can customize the template to meet your specific needs. | [view template button](https://s3.amazonaws.com/solutions-reference/connected-mobility-solution-on-aws/latest/vpc/vpc.template) | [launch button](https://console.aws.amazon.com/cloudformation/home?region=us-east-1#/stacks/new?stackName=vpc&templateURL=https://solutions-reference.s3.amazonaws.com/connected-mobility-solution-on-aws/latest/vpc/vpc.template&redirectId=ImplementationGuide) | None | None +**auth-setup.template** \- Use this template to deploy the Auth Setup module and all associated components. The default configuration deploys the services found in the [Auth Setup module](./auth-setup-1.html) section, and you can customize the template to meet your specific needs. | [view template button](https://s3.amazonaws.com/solutions-reference/connected-mobility-solution-on-aws/latest/auth-setup/auth-setup.template) | [launch button](https://console.aws.amazon.com/cloudformation/home?region=us-east-1#/stacks/new?stackName=auth-setup&templateURL=https://solutions-reference.s3.amazonaws.com/connected-mobility-solution-on-aws/latest/auth-setup/auth-setup.template&redirectId=ImplementationGuide) | None | None @@ -17,0 +18,9 @@ Template name | Download the template | Launch the template in the AWS Managemen +| + + * Multi Account/Multi Region Deployment + 1. To Enable this feature, provide valid values to three CloudFormation parameters when you deploy this CloudFormation Template. + 1. `ENABLE_MULTI_ACCOUNT_DEPLOYMENT`: This is a boolean variable, use value true to enable the feature and false to disable. + 2. `ORGS_MANAGEMENT_AWS_ACCOUNT_ID`: This is the AWS Account from where you manage your Organization or where the Organization root is located. + 3. `ORGS_MANAGEMENT_ACCOUNT_REGION`: This is the region where you would deploy the which is explained later. + 2. Upon successfull deployment follow the [guidance](https://github.com/aws-solutions/connected-mobility-solution-on-aws/blob/main/source/modules/acdp/guidance/README.md) given in the GitHub repository. + @@ -24 +33 @@ Template name | Download the template | Launch the template in the AWS Managemen - +| None @@ -31 +40 @@ Template name | Download the template | Launch the template in the AWS Managemen - +| None @@ -39 +48 @@ Template name | Download the template | Launch the template in the AWS Managemen - +| None @@ -48 +57 @@ Template name | Download the template | Launch the template in the AWS Managemen - +| None @@ -57 +66 @@ Template name | Download the template | Launch the template in the AWS Managemen - +| None @@ -67 +76 @@ Template name | Download the template | Launch the template in the AWS Managemen - +| None @@ -74 +83 @@ Template name | Download the template | Launch the template in the AWS Managemen - +| None @@ -81 +90 @@ Template name | Download the template | Launch the template in the AWS Managemen - +| None @@ -88 +97 @@ Template name | Download the template | Launch the template in the AWS Managemen - +| None @@ -94,0 +104,6 @@ Template name | Download the template | Launch the template in the AWS Managemen +| None +**cms-ui.template** \- Use this template to deploy the Fleet Management UI module and all associated components. The default configuration deploys the services found in the [Fleet Management UI module](./fleet-management-ui-module.html) section, and you can customize the template to meet your specific needs. | [view template button](https://s3.amazonaws.com/solutions-reference/connected-mobility-solution-on-aws/latest/cms-ui/cms-ui.template) | [launch button](https://console.aws.amazon.com/cloudformation/home?region=us-east-1#/stacks/new?stackName=cms-ui&templateURL=https://solutions-reference.s3.amazonaws.com/connected-mobility-solution-on-aws/latest/cms-ui/cms-ui.template&redirectId=ImplementationGuide) | + + * auth-setup + * vpc + * cms-config @@ -96 +111,2 @@ Template name | Download the template | Launch the template in the AWS Managemen -**cms-sample.template** \- Use this template for [integrating custom modules](./developer-guide.html#integrating-custom-modules). | [view template button](https://s3.amazonaws.com/solutions-reference/connected-mobility-solution-on-aws/latest/cms-sample/cms-sample.template) | [launch button](https://console.aws.amazon.com/cloudformation/home?region=us-east-1#/stacks/new?stackName=cms-sample&templateURL=https://solutions-reference.s3.amazonaws.com/connected-mobility-solution-on-aws/latest/cms-sample/cms-sample.template&redirectId=ImplementationGuide) | None +| None +**cms-sample.template** \- Use this template for [integrating custom modules](./developer-guide.html#integrating-custom-modules). | [view template button](https://s3.amazonaws.com/solutions-reference/connected-mobility-solution-on-aws/latest/cms-sample/cms-sample.template) | [launch button](https://console.aws.amazon.com/cloudformation/home?region=us-east-1#/stacks/new?stackName=cms-sample&templateURL=https://solutions-reference.s3.amazonaws.com/connected-mobility-solution-on-aws/latest/cms-sample/cms-sample.template&redirectId=ImplementationGuide) | None | None