Connect AWS Organization with Human Managed via CloudFormation Stack

This article covers the step-by-step procedure to connect your AWS Cloud organization and all its accounts with the Human Managed Platform for various use cases related to cloud security, cloud scaling, and cloud management. 

Prerequisites 

User should have AWS managed Administrative Access permission.

Step 1: Create a service request for Human Managed to onboard your AWS account

1. Submit a request 
2. In the Subject, type or select Connect AWS account 
3. In the body, type your Organization’s Preferred AWS “Account Name”
4. Once the ticket has been accepted by Human Managed and the ticket status has been updated, follow the next steps.  This will take approximately 24 hours. 

Step 2: Create a new role with CloudFormation template 

1. After your service request is processed, HM will send a link for Creating a New Role Cloud Formation Template.  Click on the provided link, then log in to your AWS account. 
2. Once the link is opened, Select “I acknowledge that AWS CloudFormation might create IAM resources” and click on the “ Create Stack” button.
   
   
3. When the stack status is CREATE_COMPLETE, click on the “ Outputs” tab 
   
   
4. Copy RoleARN value from the Stack Outputs tab when template finishes, and include the IAMRoleARN to HM in the same service request ticket.
   
5. Click the Parameters tab, copy the value of External Id, RoleName & Session Id and share it to HM in the same service request ticket. 
   
6. Wait for a response from HM within 24 hours to confirm connection of your AWS accounts with Human Managed platform. 

Step 3: Create IAM Resources with CloudFormation template 

1. After your service request is processed, HM will send a link for Creating IAM Resources Cloud Formation Template.  Download the template. 
2. Login to your AWS Organization Account using AWS console and click this link
3. Choose Upload a template file and upload the downloaded template from Step 3.1 
   
4. Click Next and provide a StackSet name of your choice
   In the Parameters section, make sure the values shown in the page resembles the same values as Step 2.5  in the IAM Role creation.
   
   
   Click Next if both Parameter values matches.
   If you find any difference in values kindly reach out to HM.
5. Proceed with default Managed execution (Inactive) and click Next
   
6. Under Set deployment options, head to Specify regions section and select the primary region for your account.
   
7. Select “I acknowledge that AWS CloudFormation might create IAM resources with custom names” and click Submit
8. Under the Operations tab when status is SUCCEEDED, copy values for RoleName in Parameters tab and share it to HM in the same service request ticket. 
   
9. Wait for a response from HM within 24 hours to confirm connection of your AWS accounts with Human Managed platform.