CloudFormation

CloudFormation provides a method to create the necessary IAM Roles in your Member accounts. Topogy provides a CloudFormation template to ensure your roles have the correct permissions.

---

CloudFormation StackSet

Create the StackSet

1. Access your Management account
2. Open the CloudFormation console at https://console.aws.amazon.com/cloudformation/
3. Click "StackSets" in left menu
4. Click "Create StackSet" button in upper right corner

Configure the template

5. Paste the S3 URL in the box: https://topogy-cfn-templates.s3.us-east-1.amazonaws.com/templates/cross-role-template.yaml
6. Click the "Next" button

7. Enter a name for your StackSet: TopogyCrossAccountRoleStackSet
8. Enter your External ID: <This comes from the Topogy console>

Deploy

9. Check the "I acknowledge that AWS CloudFormation might create IAM resources with custom names." checkbox
10. Click the "Next" button

11. Under "Specify regions" you will need to select the Region, even though IAM is global, so the choice is not important. We recommend you select us-east-1.
12. Click the "Next" button

13. Hit the "Submit" button

Verify

14. At this point, AWS should be running your StackSet. Confirm that it completes successfully before continuing, by clicking on the "Stack Instances" tab and looking at the "Detailed status" for each account that you targeted.

15. Once the StackSet has completed, hit the "Refresh List" button in the Topogy app. If everything was successful, you should see all of your accounts connected.