You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: GETTING_STARTED.md
+40-6
Original file line number
Diff line number
Diff line change
@@ -6,20 +6,54 @@ For new or existing projects, especially ones that have PII data (think health a
6
6
This guide walks through a linear process of deployment based on the [AWS Platform Guide](https://thoughtbot.atlassian.net/wiki/spaces/APG/overview). It is highly recommended to read through each relevant section to understand the nuances of the steps this tutorial outlines.
* Google login for each developer working on the platform
25
+
* Set up SAML
26
+
* Set up SCIM
27
+
* Google Groups for permission sets:
28
+
* aws-production-developers
29
+
* aws-production-secrets
30
+
* aws-production-viewers
31
+
* aws-sandbox-developers
32
+
* aws-sandbox-secrets
33
+
* aws-sandbox-viewers
34
+
* Microsoft
35
+
* ActiveDirectory login for each developer working on the platform
36
+
* Set up the Microsoft SSO app
37
+
* ActiveDirectory security groups for permission sets:
38
+
* aws-production-developers
39
+
* aws-production-secrets
40
+
* aws-production-viewers
41
+
* aws-sandbox-developers
42
+
* aws-sandbox-secrets
43
+
* aws-sandbox-viewers
11
44
* Create source code repositories -- for details on the repos needed, see [Repository Conventions](https://thoughtbot.atlassian.net/wiki/spaces/APG/pages/10649919).
12
-
* Create password vault.
13
-
* Create management AWS account.
45
+
* Create password vault (e.g. 1Password or similar).
14
46
* Register or delegate domains.
15
47
*[Launch Control Tower](https://thoughtbot.atlassian.net/wiki/spaces/APG/pages/11239471).
16
48
*[Launch Customizations for Control Tower](https://thoughtbot.atlassian.net/wiki/spaces/APG/pages/86999041).
17
49
*[Set up accounts](https://thoughtbot.atlassian.net/wiki/spaces/APG/pages/11173895).
18
50
*[Configure Single Sign On](https://thoughtbot.atlassian.net/wiki/spaces/APG/pages/86933512).
19
-
* Create email groups for permission sets.
20
-
* Configure SAML for SSO.
21
-
* Configure SCIM for SSO.
22
51
* Configure DNS for domains.
52
+
* If a domain name already exists:
53
+
* Prefer that DNS be transferred to Route 53 in the network account.
54
+
* If can’t be transferred, determine if Terraform access can be set up for IAC.
55
+
* If no domain exists:
56
+
* Register a new domain through Route 53 in the network account.
23
57
* Continuous Integration and Deployment (CI/CD) for infrastructure
0 commit comments