// Batfish Enterprise for AWS Getting Started Guide // Detailed Setup Instructions // I. Create the Batfish Enterprise CloudFormation Stack

I. Create the Batfish Enterprise CloudFormation Stack

Sign-in to the AWS account that you want to analyze in the AWS console and access the CloudFormation template for Batfish Enterprise. By default, Batfish Enterprise will pulls data from a group of regions based on the deployment region. You can change the set of polled regions from cloud settings page after Batfish Enterprise is up and running.

CloudFormation will open in your AWS console, starting at Step 1 – Specify template.

AWS Cloudformation template step 1


Don’t change any of the options on the Create stack page. The S3 template is already selected.

Click Next to go to Step 2 – Specify Stack Details

AWS Cloudformation template step 2


On the Specify stack details, in the KeyName field, specify the SSH key pair to use to access the instance. You will use this key pair to setup SSH tunneling. This field is required. If you haven’t uploaded an SSH keypair into AWS EC2, or need to create a new keypair follow the instructions listed here – Amazon EC2 key pairs – Amazon Elastic Compute Cloud. Make sure you have this keypair on your local machine. Without it, you will NOT be able to access the Batfish Enterprise service.

Optionally, you can also use the remaining fields to change the CloudFormation stack name, specify the VPC and Subnet CIDR blocks, select the instance size, restrict access based on IP address and change the polling interval.

Click Next to go to Step 3 – Configure stack options

AWS Cloudformation template step 3


On the Configure stack options, you don’t need to set any options, because the stack you are creating will be part of a new AWS Virtual Private Cloud (VPC) with a new private subnet.

Optionally, you can add tags to the resources that will be created, set the IAM role that the stack will assume, configure the stack policy, or adjust any of the other settings. Any tags that you create will be added to all resources created using the template. By default, all resources will have a tag called Name with a value Batfish Enterprise AWS Trial

Click Next to go to Step 4 – Review.

AWS Cloudformation template step 4


On the Review page, click the box reading I acknowledge that AWS CloudFormation might create IAM resources. By checking this box, you are giving Batfish Enterprise read-only access to the AWS configuration. The specific IAM role and policy it uses is shown below.

Click Create Stack. Stack creation can take up to 5 minutes. Once the stack has been created, click the Outputs tab and make a note of JumpHostName value. You will need this information to connect to the Batfish Enterprise service.

Outputs tab of the newly created CloudFormation Stack