Open topic with navigation

# Checklist: Creating an AWS Deployment

The complete process of deploying on AWS includes the following broad steps. Each of these steps is explained in the following sections. Most steps can be performed using either the AWS web interface or through the AWS CLI tool. We explain each method where possible.

The manual procedure given here applies to AWS installations only. For on-prem deployments, use the procedures given here. For Azure deployments, use the procedures given here.

Perform the tasks in the listed order.

| Task | See...
--- | --- | ---
| Ensure that your AWS environment is ready for deployment | Understanding the Prerequisites for an AWS Deployment
| Prepare your AWS Deployment environment
Create and configure the AWS Virtual Private Cloud, including security groups and IAM roles | Create the Virtual Private Cloud
Create two security groups, one for the bastion host and one for intra-VPC connectivity | Creating Security Groups
Create the IAM role for Elastic Kubernetes Service (EKS) | Creating the IAM Roles in AWS
Prepare the bastion host, which you will use for access to the AWS deployment environment | Creating and Configuring the Bastion
Ensure that you have the latest installation files | Downloading Installation Tools and Packages
Prepare the Elastic File System (EFS) instance used for the AWS deployment environment | Creating the Elastic File System
Set up your EKS cluster | Configuring the Elastic Kubernetes Service
Create and label the worker nodes, where application processing takes place | Creating and Configuring Worker Nodes
Configure a public hosted zone for the OMT structure | Configuring Route 53
| Transfer the product images to the Elastic Container Registry (ECR) | Uploading Product Images to the ECR
| (Conditional) If you plan to deploy Intelligence or Recon, install the ArcSight Database in AWS | Installing the Database in AWS
| (Conditional) If you plan to deploy Intelligence, configure settings for Elasticsearch in AWS | (Conditional – Intelligence) Configuring Settings for Elasticsearch in AWS
| Install ArcSight capabilities
Install basic pods onto the Kubernetes cluster to bootstrap the OMT infrastructure | Bootstrapping OMT
Ensure that you have secure, trusted communication between pods within the Kubernetes cluster and components outside of the cluster | Securing External Communication with the RE Certificate
To create the Application Load Balancer (ALB), import your certificate or a CA-signed certificate into Amazon Certificate Manager | Creating and Validating the Route 53 Certificate
Configure an ALB to serve as the single point of contact for clients | Configuring the Application Load Balancer (ALB)
Create and label the worker nodes, where application processing takes place | Labeling Cloud (AWS) Worker Nodes
Deploy capabilities | Installing ArcSight in AWS
| Configure the Load Balancer to serve as the single point of contact for clients
Configure access to the OMT management portal and to reconfiguration | Performing Post Installation Network Configuration
| Post deployment configurations
Configure the database and Kafka Scheduler | Completing the Database and Kafka Scheduler Setups - AWS
| Enable the ArcSight products application (pod) logs in AWS, including FluentD for logging the cluster functionality (Cloudwatch) | Enabling Pod Logs in AWS
| Performing Post-deployment Configuration | Post-deployment Configuration
| Integrating the Platform Into Your Environment | Integrating the Platform Into Your Environment