Create the Peer Role - AWS

Before you begin

You need:

About this task

Your client-side VPC and the MarkLogic Service VPC need to securely communicate. To do so, you need a peer role that defines the privileges granted to the MarkLogic Service VPC. The peer role template creates an Identity and Access Management (IAM) role that accepts a VPC peering connection between your client-side VPC and MarkLogic Service VPC.

Procedure

  1. Download the peer-role.template. If necessary, modify the template.
  2. Navigate to the AWS CloudFormation Console page.

    AWS CloudFormation create network stack
    • Click Create Stack.
    Important: Before you continue, ensure you are creating your stack in a region supported by Data Hub Service (DHS). See Supported Regions - AWS.
  3. In the Create stack page, specify the template.

    Sample VPC peer role configuration specify template
    • Click Next.
  4. In the Specify Stack Details page, supply the fields with the following information:
    Note: For more general information on creating a stack, see Creating a Stack on the AWS CloudFormation Console.

    Sample VPC peer role configuration
    Field Description
    Stack name The name for this collection of AWS network resources.
    MarkLogic Service ID The ID that identifies you as a MarkLogic Service subscriber.

    To find your MarkLogic Service ID in DHS,
    VPC ID Your client-side VPC's identifier (vpc-*).

    To find your VPC ID in AWS CloudFormation Console,

    • Navigate to the AWS CloudFormation Console.
    • Select the stack created when you set up a client-side VPC.
    • Select the Resources tab.

    To find all of your VPC IDs in AWS,

    • Navigate to AWS.
    • From the top menu, navigate to Services > VPC.
    • In the Resources by Region page, click VPCs.

    Click the following link to view a full list of client-side network resources.

    • Click Next.
  5. (Optional) In the Configure stack options page, specify tags, IAM roles, and advanced options.
    • Click Next.
  6. Review the details.

    Review page for new peer role
    • (Optional) To make changes, click Previous.
    1. To confirm, select the I acknowledge... check box.
    2. Click Create Stack.

Results

The peer role is created and the RoleARN (a unique AWS resource identifier) is displayed. In the AWS CloudFormation Console, the status of each stack must be CREATE_COMPLETE.
Peer role stack detils with RoleArn
Important: You will need the RoleARN when configuring your secure DHS network.
  • To view this value, click the Outputs tab.

What to do next