Preparing for Initial CPaaS Deployment
Last updated
Was this helpful?
Last updated
Was this helpful?
A Cloud Premises as a Service (CPaaS) deployment of Panther means that your organization owns the AWS account in which Panther is deployed, but Panther performs deployment upgrades.
Before the initial deployment of Panther in your AWS environment, you will need to configure a custom domain, then deploy a CloudFormation stack that creates the IAM role Panther assumes to perform upgrades.
Learn more about CPaaS, and how it differs from other deployment models, on .
To set up a CPaaS deployment of Panther, follow the below steps:
Create a new AWS account.
Your Panther instance cannot be deployed in an AWS account with existing resources.
Create a custom Panther domain by following the , skipping the section.
If you are using , you will select an AWS region for your Panther deployment during this step. This region cannot later be changed.
Save the outputted CertificateArn and CustomDomain, as you will need them in the next step.
Provide your Panther support team the following information:
The CertificateArn and CustomDomain you generated in the previous step
The AWS region in which you created your custom domain in the previous step
Your
Deploy the CloudFormation template at the S3 URL provided by Panther, using the values for the three template parameters (DeploymentRoleName, IdentityAccountId, and OpsAccountId) also provided by Panther.
This template provisions an IAM role (typically called PantherDeploymentRole) that Panther will assume to perform upgrades. The template will resemble , but the S3 file your team is provided access to will be the most up-to-date version.
See the CloudFormation documentation for instructions on how to create a CloudFormation stack from a template either or.
Inform your Panther support team that you have finished this process.
Panther will then proceed with the deployment.