Summary:

In this document, We will set up an on-premises to AWS cloud. We will log into the AWS console to modify an existing user account. This existing user account will be given permissions to allow NetApp Cloud Volumes ONTAP to create services in AWS.

During this process, we will also show you how to create a VPC, subnet, route table, Internet Gateway, and key pair. If you have already configured your AWS network, you can skip this process and move to the next document on how to create your NetFoundry system.

 

1. Make a note of what region you are creating your AWS service. You will need this in your next document of how to create a NetFoundry network.

2. Some of the directions below could have changed from the time of writing this document. You may have to look around for items listed in this manual.

 

 

Step 1: Login to your AWS account

 

Step 2: In the upper left corner of window, click services tab. A sub-menu will appear. Type "IAM" in the search bar and click enter

In this example, I am modifying an existing user with permissions to allow NetApp Cloud Volumes ONTAP to create services in AWS.

 

 

Step 3: From left pane, select users. In the right pane, click the user name you want to modify.

Under Permissions, click add inline policy then click the JSON tab. Delete any existing JSON lines and paste the script below. Click Review Policy, provide a policy name and click Create Policy

For additional reading on this subject, please visit https://docs.netapp.com/us-en/occm/task_getting_started_aws.html

{
    "Version": "2012-10-17",
    "Statement": [{
            "Effect": "Allow",
            "Action": [
                "iam:CreateRole",
                "iam:DeleteRole",
                "iam:PutRolePolicy",
                "iam:CreateInstanceProfile",
                "iam:DeleteRolePolicy",
                "iam:AddRoleToInstanceProfile",
                "iam:RemoveRoleFromInstanceProfile",
                "iam:DeleteInstanceProfile",
                "iam:PassRole",
                "ec2:DescribeInstanceStatus",
                "ec2:RunInstances",
                "ec2:ModifyInstanceAttribute",
                "ec2:CreateSecurityGroup",
                "ec2:DeleteSecurityGroup",
                "ec2:DescribeSecurityGroups",
                "ec2:RevokeSecurityGroupEgress",
                "ec2:AuthorizeSecurityGroupEgress",
                "ec2:AuthorizeSecurityGroupIngress",
                "ec2:RevokeSecurityGroupIngress",
                "ec2:CreateNetworkInterface",
                "ec2:DescribeNetworkInterfaces",
                "ec2:DeleteNetworkInterface",
                "ec2:ModifyNetworkInterfaceAttribute",
                "ec2:DescribeSubnets",
                "ec2:DescribeVpcs",
                "ec2:DescribeDhcpOptions",
                "ec2:DescribeKeyPairs",
                "ec2:DescribeRegions",
                "ec2:DescribeInstances",
                "ec2:CreateTags",
                "cloudformation:CreateStack",
                "cloudformation:DeleteStack",
                "cloudformation:DescribeStacks",
                "cloudformation:DescribeStackEvents",
                "cloudformation:ValidateTemplate",
                "ec2:AssociateIamInstanceProfile",
                "ec2:DescribeIamInstanceProfileAssociations",
                "ec2:DisassociateIamInstanceProfile"
            ],
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "ec2:TerminateInstances"
            ],
            "Condition": {
                "StringLike": {
                    "ec2:ResourceTag/OCCMInstance": "*"
                }
            },
            "Resource": [
                "arn:aws:ec2:*:*:instance/*"
            ]
        }
    ]
}

 

Step 4: Select the Security credentials tab

 

Step 5: Click Create access key 

 

Step 6: Copy Access key ID to a secure location, then click the show button under Secret access key. Copy this key to a secure location, then click close button. Note: You will not get another chance to copy the Secret access key after you close the window.

 

Step 7: Now click services tab and type "VPC" in the search bar of sub-menu and click enter

 

Step 8: How to configure a VPC in AWS? In the left pane, select Your VPCs 

 

Step 9: Click create VPC 

 

Step 10: Create VPC and provide a name tag, IPv4 CIDR block and leave tenancy as default, unless you have a specific reason to change. Click create in the bottom right once completed

 

Step 11: Your VPC has been successfully created. Click the close button once confirmed.

 

Step 12: How to create a subnet? On the left pane, click subnets

 

Step 13: Click create subnets

 

Step 14: Configure subnet by providing a name tag, the VPC you created in the previous steps, the availability zone of your choice and the IPv4 CIDR block. The last CIDR block could be the same. Click create in the bottom right once completed

 

Step 15: You have successfully created a subnet

 

Step 16: Highlight the subnet you just created by clicking the box, then click Actions and select Modify auto-assign IP settings

 

Step 17: Click the box next to Enable auto-assign public IPv4 address and click save

 

Step 18: How to setup an Internet Gateway? On the left pane, click Internet Gateways. On the main pane, click Create internet gateway.

 

19: Provide a name for your internet gateway and click create.

 

20: Click the Actions button and select Attach to VPC

 

21: Select the VPC you created earlier and click attach.

 

22: How to create a route table? On the left pane, click Route Tables. On the main pane, click Create route table.

 

23: Provide a name, select the VPC you created earlier and click create.

 

24: How to configure your route table in AWS? On the left pane, select Route Tables. On the main pane, select the Routes tab and click Edit routes.

 

25: If you haven't done so already, select 0.0.0.0/0 and choose your internet gateway on AWS.

 

26: How to associate your subnet to an AWS route table? Click the Subnet Associations tab and select Edit subnet associations.

 

27: Click the box next to the subnet you want to select and click save

28: How to create an AWS key pair? Go to services tab in the upper left of window and type "EC2" in the search bar and click enter

 

 

Step 29: Scroll down the left pane to Network & Security and select Key Pair

 

Step 30: Click Create key pair

 

Step 31: Provide a name for your key pair and click create.

 

You have successfully completed step 1 of 5