Skip to content

Commit db7b5bc

Browse files
author
Christi Miller
committed
adding more getting started guide
1 parent 95523a1 commit db7b5bc

File tree

1 file changed

+40
-6
lines changed

1 file changed

+40
-6
lines changed

GETTING_STARTED.md

+40-6
Original file line numberDiff line numberDiff line change
@@ -6,20 +6,54 @@ For new or existing projects, especially ones that have PII data (think health a
66
This guide walks through a linear process of deployment based on the [AWS Platform Guide](https://thoughtbot.atlassian.net/wiki/spaces/APG/overview). It is highly recommended to read through each relevant section to understand the nuances of the steps this tutorial outlines.
77

88
## Steps
9-
* [Platform Dependencies](https://thoughtbot.atlassian.net/wiki/spaces/MC/pages/104824833/Platform+Dependencies).
109
* Create email groups for AWS root users.
10+
* Create management AWS account (e.g. [email protected]).
11+
* Create Email addresses for root users of AWS accounts, for example:
12+
13+
14+
15+
16+
17+
18+
19+
20+
21+
22+
* Create email groups for permission sets.
23+
* Google
24+
* Google login for each developer working on the platform
25+
* Set up SAML
26+
* Set up SCIM
27+
* Google Groups for permission sets:
28+
* aws-production-developers
29+
* aws-production-secrets
30+
* aws-production-viewers
31+
* aws-sandbox-developers
32+
* aws-sandbox-secrets
33+
* aws-sandbox-viewers
34+
* Microsoft
35+
* ActiveDirectory login for each developer working on the platform
36+
* Set up the Microsoft SSO app
37+
* ActiveDirectory security groups for permission sets:
38+
* aws-production-developers
39+
* aws-production-secrets
40+
* aws-production-viewers
41+
* aws-sandbox-developers
42+
* aws-sandbox-secrets
43+
* aws-sandbox-viewers
1144
* Create source code repositories -- for details on the repos needed, see [Repository Conventions](https://thoughtbot.atlassian.net/wiki/spaces/APG/pages/10649919).
12-
* Create password vault.
13-
* Create management AWS account.
45+
* Create password vault (e.g. 1Password or similar).
1446
* Register or delegate domains.
1547
* [Launch Control Tower](https://thoughtbot.atlassian.net/wiki/spaces/APG/pages/11239471).
1648
* [Launch Customizations for Control Tower](https://thoughtbot.atlassian.net/wiki/spaces/APG/pages/86999041).
1749
* [Set up accounts](https://thoughtbot.atlassian.net/wiki/spaces/APG/pages/11173895).
1850
* [Configure Single Sign On](https://thoughtbot.atlassian.net/wiki/spaces/APG/pages/86933512).
19-
* Create email groups for permission sets.
20-
* Configure SAML for SSO.
21-
* Configure SCIM for SSO.
2251
* Configure DNS for domains.
52+
* If a domain name already exists:
53+
* Prefer that DNS be transferred to Route 53 in the network account.
54+
* If can’t be transferred, determine if Terraform access can be set up for IAC.
55+
* If no domain exists:
56+
* Register a new domain through Route 53 in the network account.
2357
* Continuous Integration and Deployment (CI/CD) for infrastructure
2458
* [Provision Platform Resources](https://thoughtbot.atlassian.net/wiki/spaces/APG/pages/11304961/Install).
2559
* Create users for developers.

0 commit comments

Comments
 (0)