The OpenOpsApp role stack for AWS CloudFormation is used to create the OpenOpsApp role in your AWS account. This will in turn provide the OpenOps platform with the necessary permissions to connect to your AWS resources. When creating the stack, you have the option to enable or disable certain permission sets. While the read-only permission set is mandatory, the rest are completely optional. The sets can also be enabled or disabled later by updating the stack.

​
Installation

  1. Navigate to CloudFormation on your AWS account, in the North Virginia (us-east-1) region. You can do so by clicking here. The stack must be created in the us-east-1 region.
  2. Click Create stack, then select With new resources: Creating a new stack
  3. Under Amazon S3 URL, insert the following URL: https://openops.s3.us-east-2.amazonaws.com/OpenOpsAppRoleStack.yml, then click Next. Specifying a template
  4. Give a name to the stack, such as OpenOpsApp. Enter an AWS account ID that you want OpenOps to use. Modify the permission sets if you like, then click Next.
  5. Acknowledge the creation of the necessary IAM roles, then click Next: Capabilities
  6. Click Submit. The stack will be created, including the OpenOpsApp role and the requested permissions.

​
Modification

You’re welcome to download the stack and modify specific permissions according to your needs. Notice that some AWS components in the OpenOps workflows may not function properly as a result.

​
Support

For any questions or issues, please feel free to join our Slack community.