search

aws-ia / terraform-aws-control_tower_account_factory

AWS Control Tower Account Factory
Apache License 2.0
604 stars 386 forks source link

VPC deployment on newly created account #387

Closed ShyamKumar-Y closed 7 months ago

ShyamKumar-Y commented 9 months ago

Describe the outcome you'd like I want to deploy the VPC in newly created account. However, using pipeline I`m not sure how to achieve that. We are using aws fargate cluster to run a self hosted agent in the Control Tower and Management account. We are using Control tower account which is a landing zone of the new account. Management account we use to manage stacksets and VPC in existing manual process we follow. Fargate instance can run when I have two dependency stacksets in new account. And of the stackset needs VPC in the new account. Since it has interdependency with each other unable to deploy the VPC. So is there anyway we can can deploy the VPC from Management account to a new account?

Here is the summary of the issue Dependencies to run self hosted agent: Pipeline required to run Self hosted agent in ECS cluster on newly created account. Security Group "Linux Stack" should be there. Fargate task expecting VPC and internal subnets to be there. Azure pipeline is getting failed due to Security Groups is not found because this SG must be in VPC ECS task could use the SG and VPC subnet "private" to run self hosted agent We are trying to create VPC, subnet and other resources through self hosted agent, however agent it self has dependency of VPC, subnet and "Linux Stack" to run

A clear and concise description of what you want to happen.

Is your feature request related to a problem you are currently experiencing? If so, please describe. Yes, I`m currently facing the issue in Terraform automation.

A clear and concise description of what the problem is.

Additional context

Add any other context or screenshots about the feature request here.

ShyamKumar-Y commented 9 months ago

Can anyone help me with VPC deployment in newly created account?

stumins commented 7 months ago

Hi @ShyamKumar-Y,

Control Tower Account Factory supports configuring the VPC creation behavior for new accounts, such as the CIDR range to use or disabling the creation of any VPCs. The Account Factory settings are honored by AFT when creating new accounts, so you can use these settings to customize the VPCs for accounts that AFT creates. For more information, see: https://docs.aws.amazon.com/controltower/latest/userguide/configuring-account-factory-with-VPC-settings.html

If the above documentation does not help, I recommend reaching out to AWS Premium Support who can provide better support for your specific issue.