DHS Network Resources - AWS

The following table provides a list of resources required for DHS network configuration.

Field Example Value Where to find this information
Name network-name Name for the DHS network. The name is generated by the user.
Region us-west-2 The region where your preconfigured network is located. See Supported Regions - AWS.
Important: For a peered network, select the same region where you created your stacks in the AWS CloudFormation Console.
Select if you want to set up VPC peering Select to set up VPC peering and create peered endpoints.
VPC ID vpc-0f23c32843d97f2fb Your client-side VPC's identifier (vpc-*).

To find your VPC ID in AWS CloudFormation Console,

  • Navigate to the AWS CloudFormation Console.
  • Select the stack created when you set up a client-side VPC.
  • Select the Resources tab.

To find all of your VPC IDs in AWS,

  • Navigate to AWS.
  • From the top menu, navigate to Services > VPC.
  • In the Resources by Region page, click VPCs.
VPC CIDR 10.0.0.0/21 Range of IPv4 addresses used to set up your client-side VPC. Primary CIDR (Classless Inter-Domain Routing) block for your VPC.
Important: The CIDR block 20.0.0.0/10 is used internally. If your VPC CIDR is within the 20.0.0.0/10 range of IP addresses, your CIDR block size must be between /20 and /28 subnet masks. The maximum amount of IP addresses in a CIDR block is 4,096, including all subnets.
AWS Account ID 123456789012 For details, see Your AWS Account ID and Its Alias.
Peer Role ARN arn:aws:iam::123456789012:role/dhs-peer-role-stack-peerRole-PUE2MD0KEMI2 After you create the peer role, the AWS network stack produces the RoleARN. For details, see AWS Identity and Access Management (IAM).
User Subnet CIDRs 10.0.0.0/23, 10.0.2.0/23, 10.0.4.0/23, 10.0.6.0/25, 10.0.6.128/25, 10.0.7.0/25 Private and public CIDRs used to set up your client-side VPC. One to six user subnet CIDRs. If you are running your client or application servers across three AWS zones, you must provide all of the subnet CIDRs. If your service is running within a single zone, enter one CIDR.