Hi, everyone, and welcome back.
Now, in the earlier video we were discussing about the basics of service catalog and the advantages
that it provides.
So today it's going to be a practical video where we'll go ahead and implement all the steps required
to configure the service catalog.
Now from the management console, let's quickly open up the service catalog and within here what will
be doing will be going ahead and we'll be creating a new product.
Now within here, let's give a product name.
Let's just call this development envy.
All right, let's go a bit down in the owner.
You can just say security team will go further down and here you have virgin details.
And within here you'll have to add your cloud formation template.
As we're discussing, the service catalog basically makes use of the cloud formation template that is
associated with a specific environment.
And once the user launches that environment behind the scenes service catalog will go ahead and launch
the cloud formation template.
So this is what we'll have to add here.
Now for today's video, I have a simple cloud formation template that creates an easy to instance based
on a specific image and based on a specific instance type.
So we'll be uploading this specific file.
The name is EC two Hyphen Frankfurt HD.
So this AMA is based on Frankfurt region.
So let's go ahead and click on Choose File will select the easy to hyphen Frankfurt.
I'll click on Open.
Let's go a bit down.
You can give the description name as well.
I'll just say Dave Stack.
And let's click on Create Product.
Great.
Now, at this stage, our product is created.
The next important part is the portfolio.
So let's click on portfolio within your let's just call it dev portfolio and within the owner, I'll
just say security team.
Let's go a bit down and I'll click on Create.
Great.
So once the portfolio is created within this portfolio, you can go ahead and add a product.
It can be single product, multiple products, etc..
So let's go ahead and add a product of development environment to this portfolio.
All right.
Now, along with this, you can also go ahead and associate various groups, rules or users that can
have the permission on this specific product.
So if you go to group rules and users, you can go ahead and add either groups, rules or users.
So let's do one thing.
Let's go ahead and quickly create a new IAM user.
We'll click on users, I'll add a new user, let's just call it as the developer hyphen user will add
a password based authentication, I'll add a password ID, select the checkbox associated with a password
reset, and we'll quickly create this user.
Now from the service catalog console, you can go to users and you will see that you have a developer
user in case the user is not appearing.
You can just quickly do a refresh.
So I'll add this developer user and I'll click on Add Access Grid.
Now one more thing that you need to do is that this user does not have a permission.
So you need to give the user permission for the service catalog as well as for the resources that will
be created through the service catalog product.
For example, if a service catalog is launching the easy to instance end the database, then the instances
and the database will be launched based on the permission that the user has.
If a user does not really have a permission, then the resources will not be created.
Now, since we are going to go ahead and create an easy to instance, we have to ensure that the developer
user not only has the permission associated with the service catalog, but also to that of the easy
to instance.
Great.
So from the IAM console.
Let's go to the developer user and within the permission we'll add one specific permission related to
the service catalog.
So I'll say a service catalog and you have the end user full access.
So this is the permission that we will be giving.
And along with that, we'll add one more policy.
So this would be a custom policy.
And in here, I'll add a policy that I have available locally.
So let me add it over here.
So what this policy allows, it allows easy to instance access and it allows a three axis on the get
object operation, primarily because the cloud formation template that we had uploaded it goes to as
three.
And when a user launches the service catalog, the permission on that object is required.
Once this is done, you can click on review policy.
You can give a policy name.
Let's just call it as resource policy and click on Create Policy here.
Great.
Once this is done, it's time to log in.
So let's go back to the IAM dashboard.
I'll copy the signing URL and from a different browser will quickly log into the developer user.
So we'll add a sign in earlier.
So this would be the account ID within your, I'll say developer user and let's give a password and
I'll click on signing.
Great.
So we'll switch to the Frankfort region here.
And let's open up the service catalog here.
And within here, you see you have a product of development environment that is been seen and you also
have a provision product which basically shows you if there are any provisioning that had already happened
by this user.
So let's go to the product.
You have a development environment product.
Let's go ahead and launch this product.
You can give it a name.
I'll just call it as demo product launch.
Once this is done, you can go ahead and click on launch product.
Alright.
So after 2 to 3 minutes you will see that the status is available and within the resources it is showing
you the instance id it will quickly open this up to verify if the instance is created or not.
You see, our instance is now running.
Once this is done in case after you have completed your practical, you can go ahead and also terminate
this specific product.
I'll just type it as terminate.
So it is in the terminating state if I'll quickly refresh.
You see, the instance is shutting down post, which it would be terminated.
All right.
So I hope that this at a high level overview you understood this service catalog from practical point
of view and with this will conclude today's video.