Creating a role to deploy the Data Gateway in AWS
You can use the veritas-dgw-deployment-role-creator.yaml CloudFormation template to create a role that has all the permissions required to deploy the Data Gateway. The ARN of the role that gets created by the template appears in the stack output. You need to provide this ARN in the IAM role ARN field while deploying the main Data Gateway stack.
To create a role to deploy the Data Gateway in AWS
- Download the zip file required for deploying the Data Gateway.
See Downloading the Veritas Resiliency Platform virtual appliances.
- Extract the zip file to a location of your choice. The following directories are extracted:
CloudFormation_Templates
Lambda_Function_Zip_Files
- Upload both the directories to an S3 bucket of your choice. Ensure that the S3 bucket is in the region where you want to deploy the Data Gateway.
Upload the directories at the root level of the bucket. Do not upload them to any subdirectory within the bucket.
- Open the CloudFormation service on the AWS web console.
- Click Create Stack.
- In the Select Template page, choose a stack template by using one of the following options:
Upload a template to Amazon S3: Select the
veritas-dgw-deployment-role-creator.yamlfile within theCloudFormation_Templatesdirectory from your local computer. This is the location where you have extracted the zip file.Specify an Amazon S3 template URL: This URL is the link to the file in the S3 bucket where you have uploaded the directories. To get this URL, go to Amazon S3 service, click on the bucket name, and then click the
CloudFormation_Templatesdirectory. Copy the URL displayed for theveritas-dgw-deployment-role-creator.yamlfile. This URL looks similar to the following:https://s3.amazonaws.com/S3_bucket_name/CloudFormation_Templates/
veritas-dgw-deployment-role-creator.yamlWhere, S3_bucket_name is the name of your S3 bucket.
- In the Specify Details page, enter the following information:
Deployment bucket name.
- On the Options page, provide information for the Tags, Permissions, and Advanced fields. These are optional fields and you can skip providing information here.
- Review the selection and select the acknowledgment check box for IAM resource creation. Click Create.
- When the stack status changes to CREATE_COMPLETE, the role gets created.
- From the Outputs of the main Data gateway stack, note the ARN of the role that got created and used this value while creating the Data Gateway stack.