Prerequisites

Progress checklist

• AWS CLI v2 installed and logged in
• jq installed
• Shared account profile (docs use sandbox)
• Opted into ap-southeast-6 if needed

Overview

Everything goes through ./scripts/demo.sh. You need permission to create S3 buckets, IAM roles, VPC endpoints, and (for prove) EC2 + SSM.

AWS CLI and Region

Install AWS CLI v2 if you do not have it yet.

macOS

brew install awscli
# already installed:
brew upgrade awscli

Linux

curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
unzip awscliv2.zip
sudo ./aws/install
# already installed:
sudo ./aws/install --update

Check the version and that credentials work:

aws --version
aws sts get-caller-identity

Primary Region is ap-southeast-2 (Sydney). Replica is ap-southeast-6 (Auckland). Your credentials need S3, IAM, and EC2 in both.

jq

demo.sh uses jq for state and policy JSON. Install it if you need to:

macOS

brew install jq

Linux

# Fedora / RHEL
sudo dnf install jq
# Debian / Ubuntu
sudo apt install jq

jq --version

Environment

export AWS_PROFILE=sandbox

That is enough. demo.sh picks the Region per command (and passes --region explicitly), so a leftover AWS_REGION in your shell will not send Auckland calls to Sydney.

up-consumer builds its own private VPC. You do not pass a VPC or subnet ID.

Next

Shared buckets