Commvault provides CloudFormation (CFT) templates that you can use to create shared services and member account products for the AWS Service Catalog. You can then use the account products to create new accounts, and you can attach the templates to existing accounts. The templates encapsulate the permissions that required to protect AWS workloads in your multi-account environment.
Important
-
You must create the Commvault shared services account product first, as documented below. Then, you create the Commvault member account product.
-
After you create AWS Service Catalog account products, use those products to provision accounts going forward. Don't provision AWS accounts from the AWS Organizations console anymore.
Download the Templates
Download the Commvault-provided CFT templates:
Go to AWS Service Catalog
-
Sign in to the AWS account where you store your Account Factory blueprints.
This account is sometimes called the "hub account".
-
Go to AWS Service Catalog.
Create the Commvault Shared Services Account Product
-
From the navigation pane, go to Product list.
The Admin - Product list page appears.
-
Click Create product, and then select Create product.
The Create product page appears.
-
In the Product details pane, enter information for your shared services account product, such as a name and a description.
Commvault recommends the following name and description for the shared services account blueprint:
-
Product name: Commvault Shared Services Account
-
Product description: Use this blueprint for your shared services accounts that host Commvault shared resources (such as compute and storage). These shared resources typically reside in the Infrastructure OU.
-
-
Select Use a template file, and then click Choose file.
-
Select SharedServicesAccount-CFT.yml.
-
At the bottom of the console page, select Create product.
The Admin - Product list page appears, and the new Commvault shared services account product is listed.
Create the Commvault Member Account Product
-
From the navigation pane, go to Product list.
The Admin - Product list page appears.
-
Click Create product, and then select Create product.
The Create product page appears.
-
In the Product details pane, enter information for your member account product, such as a name and a description.
Commvault recommends the following name and description for the member services account blueprint:
-
Product name: Commvault Member Account
-
Product description: Use this blueprint for all member accounts that contain workloads to be protected by the Commvault software. These workloads and their resources typically reside in the Workloads OU.
-
-
Select Use a template file, and then click Choose file.
-
Select SharedServicesAccount-CFT.yml.
-
At the bottom of the console page, select Create product.
The Admin - Product list page appears, and the new Commvault member account product is listed.