WEBVTT

1
00:00.000 --> 00:06.960
So one of the things that's of course going to have to happen here in order for

2
00:06.960 --> 00:07.800
Cloud

3
00:07.800 --> 00:13.700
on ramp to be able to automatically deploy to Amazon AWS is we're going to have

4
00:13.700 --> 00:14.180
to have

5
00:14.180 --> 00:15.840
a way to authenticate.

6
00:15.840 --> 00:21.900
Now when we get into this, you'll see that we can actually use an IAM account

7
00:21.900 --> 00:22.920
from Amazon

8
00:22.920 --> 00:26.940
and just sort of log in with a username and password.

9
00:26.940 --> 00:28.920
That's not exactly the preferred method.

10
00:28.920 --> 00:35.320
The preferred method is actually to use an API key with a secret key.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

10
00:28.920 --> 00:35.320
The preferred method is actually to use an API key with a secret key.

11
00:35.320 --> 00:39.130
So I just wanted to take a minute here just to show you how to set up your

12
00:39.130 --> 00:39.840
account if

13
00:39.840 --> 00:43.530
you want to do that preferred method, which is what we're going to be using

14
00:43.530 --> 00:44.080
here in this

15
00:44.080 --> 00:45.080
skill.

16
00:45.080 --> 00:49.360
So let's go ahead and jump in to our AWS account and take a look at how we set

17
00:49.360 --> 00:49.680
that

18
00:49.680 --> 00:51.760
up.

19
00:51.760 --> 00:56.040
So here in AWS, I'm starting off on the console home.

20
00:56.040 --> 01:01.050
This under recently visited, I actually have IAM here because I've already
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

20
00:56.040 --> 01:01.050
This under recently visited, I actually have IAM here because I've already

21
01:01.050 --> 01:02.160
configured this

22
01:02.160 --> 01:03.640
and set this up.

23
01:03.640 --> 01:08.440
However, if you don't have it here, you can of course go right over here to

24
01:08.440 --> 01:09.440
services under

25
01:09.440 --> 01:15.080
services, you can get to IAM from right here on this page as well.

26
01:15.080 --> 01:17.600
So let's go ahead and click on that.

27
01:17.600 --> 01:20.480
And from here, let's go to users.

28
01:20.480 --> 01:25.090
And as you can see, I actually have two users set up here, one that has some

29
01:25.090 --> 01:25.960
warnings on

30
01:25.960 --> 01:29.120
it there that clearly I don't use very often.

31
01:29.120 --> 01:33.930
And we also have this net admin account, which is the one that I'm using for
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

31
01:29.120 --> 01:33.930
And we also have this net admin account, which is the one that I'm using for

32
01:33.930 --> 01:34.960
this particular

33
01:34.960 --> 01:36.240
lab.

34
01:36.240 --> 01:42.350
And if we click on that user, the main thing to note is that there is an access

35
01:42.350 --> 01:43.440
key already

36
01:43.440 --> 01:46.040
created for this user.

37
01:46.040 --> 01:50.730
This is the key that we're going to be using to connect in and authenticate

38
01:50.730 --> 01:51.520
with cloud

39
01:51.520 --> 01:53.000
on ramp.

40
01:53.000 --> 01:58.270
If you did not already have this configured, what you would need to do is come

41
01:58.270 --> 01:59.040
over here

42
01:59.040 --> 02:01.600
and click on create access key.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

42
01:59.040 --> 02:01.600
and click on create access key.

43
02:01.600 --> 02:05.910
Of course, if you didn't have one, it would be access key one instead of access

44
02:05.910 --> 02:06.240
key to,

45
02:06.240 --> 02:10.090
but either way, you simply click create access key, you choose what you're

46
02:10.090 --> 02:10.920
going to use that

47
02:10.920 --> 02:12.280
key for.

48
02:12.280 --> 02:17.280
In this particular case, the best choice is probably third party service,

49
02:17.280 --> 02:17.760
because we're

50
02:17.760 --> 02:23.010
going to use this access key to enable access for a third party application,

51
02:23.010 --> 02:23.840
specifically

52
02:23.840 --> 02:25.680
cloud on ramp.

53
02:25.680 --> 02:29.600
It gives us some security best practices down at the bottom.

54
02:29.600 --> 02:32.850
If you actually click on the learn more and read through it, it's actually
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

54
02:29.600 --> 02:32.850
If you actually click on the learn more and read through it, it's actually

55
02:32.850 --> 02:33.400
going to tell

56
02:33.400 --> 02:38.080
you that this is the best thing to use for this application anyway.

57
02:38.080 --> 02:41.680
Then down at the bottom, we're going to say that we understand the above

58
02:41.680 --> 02:42.560
recommendation

59
02:42.560 --> 02:46.320
and want to proceed with the access key.

60
02:46.320 --> 02:49.800
Of course, we would then simply scroll down and click next.

61
02:49.800 --> 02:54.910
I'm going to hit cancel since I already have my key, but once you create it,

62
02:54.910 --> 02:56.240
make sure

63
02:56.240 --> 03:03.230
that you copy both the API key and the secret key that it creates, keep those
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

63
02:56.240 --> 03:03.230
that you copy both the API key and the secret key that it creates, keep those

64
03:03.230 --> 03:04.200
handy and

65
03:04.200 --> 03:08.770
of course, private, we're going to need those as we move forward doing our

66
03:08.770 --> 03:09.920
authentication

67
03:09.920 --> 03:13.240
with cloud on ramp.

68
03:13.240 --> 03:18.140
So in this video, we just took a real quick look here at how to create a key

69
03:18.140 --> 03:18.840
for a user

70
03:18.840 --> 03:24.080
account so that we can use that to authenticate into AWS.

71
03:24.080 --> 03:28.260
One other thing to note here, I've simply given this account administrative

72
03:28.260 --> 03:28.960
privileges

73
03:28.960 --> 03:33.880
in my AWS account, but you do have to make sure that whenever accounts are
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

73
03:28.960 --> 03:33.880
in my AWS account, but you do have to make sure that whenever accounts are

74
03:33.880 --> 03:35.400
going to use

75
03:35.400 --> 03:43.120
does at least have the ability to create VMs, modify networks and so on within

76
03:43.120 --> 03:43.920
AWS.

77
03:43.920 --> 03:46.360
Our focus here is not really on permissions.

78
03:46.360 --> 03:50.920
However, it does have to have the correct permissions to be able to deploy

79
03:50.920 --> 03:52.400
cloud on ramp.

80
03:52.400 --> 03:57.680
Next, let's get our networking and VPCs set up in AWS.

81
03:57.680 --> 04:07.680
[BLANK_AUDIO]