I. Create the Batfish Enterprise CloudFormation Stack
Sign-in to the AWS account that you want to analyze in the AWS console and access the CloudFormation template for Batfish Enterprise. By default, Batfish Enterprise will pulls data from a group of regions based on the deployment region. You can change the set of polled regions from cloud settings page after Batfish Enterprise is up and running.
CloudFormation will open in your AWS console, starting at Step 1 – Specify template.
Don’t change any of the options on the Create stack page. The S3 template is already selected.
Click Next to go to Step 2 – Specify Stack Details
On the Specify stack details, in the KeyName field, specify the SSH key pair to use to access the instance. You will use this key pair to setup SSH tunneling. This field is required. If you haven’t uploaded an SSH keypair into AWS EC2, or need to create a new keypair follow the instructions listed here – Amazon EC2 key pairs – Amazon Elastic Compute Cloud. Make sure you have this keypair on your local machine. Without it, you will NOT be able to access the Batfish Enterprise service.
Optionally, you can also use the remaining fields to change the CloudFormation stack name, specify the VPC and Subnet CIDR blocks, select the instance size, restrict access based on IP address and change the polling interval.
Click Next to go to Step 3 – Configure stack options
On the Configure stack options, you don’t need to set any options, because the stack you are creating will be part of a new AWS Virtual Private Cloud (VPC) with a new private subnet.
Optionally, you can add tags to the resources that will be created, set the IAM role that the stack will assume, configure the stack policy, or adjust any of the other settings. Any tags that you create will be added to all resources created using the template. By default, all resources will have a tag called Name with a value Batfish Enterprise AWS Trial
Click Next to go to Step 4 – Review.
On the Review page, click the box reading I acknowledge that AWS CloudFormation might create IAM resources. By checking this box, you are giving Batfish Enterprise read-only access to the AWS configuration. The specific IAM role and policy it uses is shown below.
Click Create Stack. Stack creation can take up to 5 minutes. Once the stack has been created, click the Outputs tab and make a note of JumpHostName value. You will need this information to connect to the Batfish Enterprise service.