Deploying from the AWS Marketplace (with CFT)

Usage Instructions

Prerequisites:

• An AWS account with administrative access
• A valid EC2 key pair
• An IAM role with the necessary permissions listed in step 9

Steps:

1. Open the Canner Enterprise page on AWS Marketplace.

2. Click the Continue to Subscribe button to subscribe to Canner Enterprise.

   

3. Click the Continue to Configuration button.

   

4. In the Configure this software section on the page, select the region where you want to install Canner Enterprise.

   

5. Click the Continue to Launch button.

   

6. Review the information and click the Launch button.

   

7. A new tab will open to the Create stack page. Leave the settings as they are and click the Next button.

   

8. Fill out the necessary information on the Specify stack details page and click the Next button. The required fields are:

   

   • Stack name: A user-defined name for the CloudFormation stack being created or updated.
   • InstanceProfileName: The name of the IAM instance profile that will be assigned to the EC2 instances launched by the stack.
   • InstanceType: The EC2 instance type to be launched by the stack, e.g., t2.micro, m5.large, etc.
   • KeyName: The name of the EC2 key pair that will be used to SSH into the instances launched by the stack.
   • RoleName: The name of the IAM role that will be assigned to the EC2 instances launched by the stack.
   • VpcId: The ID of the VPC (Virtual Private Cloud) in which the EC2 instances launched by the stack will be deployed.
   • SubnetId: The ID of the subnet within the VPC in which the EC2 instances launched by the stack will be deployed.
   • VolumeSize: The size (in GiB) of the EBS (Elastic Block Store) volume to be attached to the EC2 instances launched by the stack.
   • VolumeType: The type of EBS volume to be attached to the EC2 instances launched by the stack.

9. In the Configure stack options section, select an IAM role to create Canner Enterprise and click the Next button. This IAM role must have the following permissions:

   {
       "Version": "2012-10-17",
       "Statement": [{
               "Sid": "VisualEditor0",
               "Effect": "Allow",
               "Action": [
                   "ec2:DescribeImages",
                   "ec2:AuthorizeSecurityGroupEgress",
                   "ec2:AuthorizeSecurityGroupIngress",
                   "ec2:DescribeInstances",
                   "ec2:DescribeVpcs",
                   "ec2:CreateSecurityGroup",
                   "ec2:CreateTags",
                   "ec2:DescribeInstanceTypes",
                   "ec2:RunInstances",
                   "ec2:DescribeSubnets",
                   "ec2:DescribeKeyPairs",
                   "ec2:DescribeSecurityGroups",
                   "ec2:DescribeSecurityGroupRules",
                   "ec2:DescribeTags",
                   "ec2:AuthorizeSecurityGroupIngress",
                   "ec2:RevokeSecurityGroupIngress",
                   "ec2:AuthorizeSecurityGroupEgress",
                   "ec2:RevokeSecurityGroupEgress",
                   "ec2:ModifySecurityGroupRules",
                   "ec2:UpdateSecurityGroupRuleDescriptionsIngress",
                   "ec2:UpdateSecurityGroupRuleDescriptionsEgress"
               ],
               "Resource": "*"
           },
                   {
               "Sid": "iam",
               "Effect": "Allow",
               "Action": [
                   "iam:CreateRole",
                   "iam:CreateInstanceProfile",
                   "iam:GetRole",
                   "iam:GetInstanceProfile",
                   "iam:ListRoles",
                   "iam:AttachRolePolicy",
                   "iam:PutRolePolicy",
                   "iam:ListInstanceProfiles",
                   "iam:AddRoleToInstanceProfile",
                   "iam:ListInstanceProfilesForRole",
                   "iam:PassRole",
                   "iam:ListAttachedRolePolicies",
                   "iam:ListRolePolicies",
                   "iam:GetRolePolicy"
               ],
               "Resource": "*"
           }
       ]
   }
   

   

10. On the Review CannerEnterprise-Markerplace page, confirm the settings and select I acknowledge that AWS CloudFormation might create IAM resources with custom names. Click the Submit button.

    

11. Wait for 5-10 minutes for the system to complete the setup.

    Once the setup is complete, access the platform at https://<public_dns>/web. Or if you have not set up DNS or SSL, use http://<public_ip>/web to log in.

    The default username & password:

    • username : canner-admin
    • password : EC2 instance ID.