§ AWS DEPLOYMENT

Choose your setup.
Deploy in AWS.

Choose your identity provider. Enter credentials and AWS resource details in CloudFormation.

Identity provider

Use the provider configured for your Broch sign-in app.

// COMMON SETUP

The template defaults to a new Amazon RDS database and Route 53 DNS. The stack creates the VM, database, and DNS records in your AWS account.

Using another database or DNS provider? Change those parameters in AWS, or build your own template from broch-deploy.

Open the CloudFormation template for your identity provider:

// NEXT

AWS handles the deployment.

Choose the target region in the AWS console.
Review the selected template in CloudFormation.
Enter your domain and DNS details (a Route 53 hosted zone ID by default), a master key you generate (openssl rand -base64 48), your VPC and subnets, your identity provider app details, and a Let's Encrypt email.
Acknowledge the IAM resources and create the stack.

Check the identity provider before creating the stack. Changing it later requires rebuilding the VM.

This page asks for setup choices only. It does not receive credentials or deploy into your account.

Read the AWS guide →