AWS Control Plane Installation¶

This guide details the steps to install the AccuKnox Control Plane using an AWS AMI.

Note

The AccuKnox team will send you the AMI download URL.

Import the AMI to S3 Bucket¶

Use the following command to import the AMI:

aws ec2 create-restore-image-task \
 --bucket <S3_Bucket_name> \
 --object-key <AMI_FILE_NAME> \
 --name "AccuKnox Standalone v3.2-Jan-10-26"

To check the status of the import, run:

aws ec2 describe-images \
 --image-ids <AMI_ID> \
 --query 'Images[0].State'

Note

The S3 bucket must be in the same region where the AccuKnox Control Plane instance will be deployed.

Create an EC2 instance with the provided AMI using the following specifications:

Specification	Value
Instance Type	`m5a.2xlarge`
Root Disk Size	`256GB`

Ensure the security group allows the following inbound access:

SSH: tcp/22
Application Access: tcp/443, tcp/5000, tcp/30001 (Only Inbound access)

SSH into the EC2 instance (username: ubuntu) and check the service status:

watch systemctl status expose-accuknox.service

systemctl-status

Navigate to the browser and access the AccuKnox Control Plane Interface using the instance IP:

https://<EC2-Instance-IP>/

Note

You will need to accept the self-signed certificates in your browser to proceed.

This should bring up the AccuKnox Control Plane Interface.

If you wish to access the AccuKnox Control Plane via a Public IP, you must update the IP in the UI config map.

Edit the environment config map:

kubectl edit cm env-config -n accuknox-ui

Replace the private IP with the public IP. In vi editor, you can use the following command:
```
:%s/<privateIP>/<PublicIP>/g
# Example: :%s/10.10.23.22/98.92.33.72/g
```

Restart the UI pods to apply changes:

kubectl delete pods --all -n accuknox-ui