Deploy ScyllaDB Cloud to Your Own AWS Account¶

Add AWS Account Details¶

1. Go to My Clusters and choose Create a New Cluster. Alternatively, you can go to New Cluster and choose Dedicated VM.

2. Choose Your AWS Account to specify under which account ScyllaDB should run.

   If BYOA is already defined, you can continue to choose your ScyllaDB version and instance type.

   If BYOA is not defined, a wizard will guide you through setting up BYOA. You’ll need to provide your AWS Account ID to proceed.

Define a Boundary Policy¶

1. Define a policy to limit Scylla Cloud permissions in your AWS account. Use this policy file to define a new policy named ScyllaCloudBoundary. This policy will restrict Scylla Cloud’s permissions on your AWS account and will be used in further steps.

2. From the AWS console, navigate to IAM Services > Policies and click Create Policy.

3. Click the JSON tab.

4. From the Scylla Cloud wizard, copy the json file by clicking the copy button.

5. Paste the contents into the AWS json editor. From the AWS editor, click next.

6. Click Review Policy.

7. Navigate to the Policies main window, search for the ScyllaCloudBoundary policy and click on it to open the policy details.

8. Copy the Policy ARN (output should be similar to the following example: arn:aws:iam::734708892259:policy/ScyllaCloudBoundary).

9. In the Scylla Cloud wizard Boundary Policy ARN field, paste the Policy ARN you copied in the previous step.

10. Confirm the details are correct in the Summary screen. Your screen should be similar to:

    

11. Click Next: Create Cloud Policy.

Create a Scylla Cloud policy¶

Create a new policy ScyllaCloud to manage Scylla Cloud role and resources

1. From the AWS console, navigate to IAM Services > Policies and click Create Policy

2. Click the JSON tab.

3. From the Scylla Cloud wizard, copy the json file by clicking the copy button.

4. Paste the contents into the AWS json editor. From the AWS editor, click next.

5. Click Review Policy.

6. Where indicated name the policy ScyllaCloud (no other name can be used).

7. Click Create Policy.

8. Navigate to the Policies main window, search for the ScyllaCloud policy and click on it to open the policy details.

9. Copy the Policy ARN (output should be similar to the following example: arn:aws:iam::734708892259:policy/ScyllaCloud).

10. In the Scylla Cloud wizard Cloud Policy ARN field, paste the Policy ARN you copied in the previous step.

11. Confirm the details are correct in the Summary screen. Your screen should be similar to:

    

12. Click Next: Create Role.

Create a Scylla Cloud Role¶

1. From the AWS console, navigate to IAM > Roles and click on Create Role.

2. When asked for a type of trusted entity, select Another AWS account and enter the Scylla Production Account ID - from the Scylla Cloud Wizard.

3. Check Require external ID and fill in the following:

   • From the Scylla Cloud Wizard, copy the External ID by clicking the copy button and paste it into the AWS External ID field.

   • This string should be treated as a password and kept secure

   • Save the string as you will need to use it later

   Note

   Require MFA should NOT be checked

4. From the AWS Create Role Screen, click Next: Permissions.

5. Search for the policy ScyllaCloud and check it.

6. Click Next: Add Tags and any other tags you want or you can just skip this step.

7. Click Next: Review and fill in the following fields:

   • In Role Name Enter ScyllaCloud

   • Role Description is optional. Enter any description that makes sense to you, as this is only for your usage.

8. Click Create Role. Make sure the ScyllaCloud role is listed in the new role ARN list.

9. Navigate to the Roles main window, search for the ScyllaCloud role and click on it to open the policy details.

10. Copy the Role ARN (example: arn:aws:iam::734708892259:role/ScyllaCloud).

11. In the Scylla Cloud wizard Cloud Role ARN field, paste the Role ARN you copied in the previous step.

12. Click Next: Complete the Cloud Account Setup.

13. Confirm the details are correct in the Summary screen. Your screen should be similar to:

    

14. Confirm you receive a success message or else you can restart the Scylla Cloud Wizard.

15. Click Next: Complete the Cloud Account Setup.

Create the cluster¶

1. Confirm that the Your AWS Account option is selected on the Create Cluster page and launch the new cluster. The cluster will run on your AWS account.

2. Validate from your AWS console that the instances are listed. Search for the tag Scylla Cloud to identify managed Scylla Cloud instances.

Congratulations! You are done! You can now proceed to run a Scylla Cluster on your own Account. When the cluster is up and running, you will be able to see the running cluster from your EC2 console. Search for the tag Scylla Cloud to identify managed Scylla Cloud instances including ScyllaDB nodes, Scylla Monitor, and Scylla Manager.