aws-well-architected-labs icon indicating copy to clipboard operation
aws-well-architected-labs copied to clipboard

Support for running in govcloud?

Open ericbrumfield opened this issue 2 years ago • 1 comments

Hello,

I was attempting to run and setup some of the stacks in govcloud following these modules:

  • https://wellarchitectedlabs.com/cost/200_labs/200_cloud_intelligence/trusted-advisor-dashboards/dashboards/1_prerequistes/
  • https://wellarchitectedlabs.com/cost/300_labs/300_optimization_data_collection/2_deploy_additional_roles/

I wasn't able to setup the 2nd data collection path for trusted advisor dashboards. I naively thought I could update the CF yaml along with updating the arn partitions for working on govcloud, but the lambdas still fail to create after modifying the yamls to use our own s3 buckets. I normally work in Terraform (TF) and not Cloudformation (CF), so I think the codebuckets that the lambda's attempt to pull from during setup is crossing the ITAR boundary from govcloud to public aws cloud possibly?

Is there any way I can get access to the lambda code in the stacks or adjust this part of the setup so that I can run the examples in govcloud?

Thanks!

ericbrumfield avatar Mar 14 '22 20:03 ericbrumfield

Hello, the gov regions are not supported yet but we are working on this.

As a workaround you can:

  1. upload ta.zip code to your s3 bucket from here
  2. Install https://wellarchitectedlabs.com/cost/300_labs/300_optimization_data_collection/ without TA Module
  3. Modify the template trusted_advisor.yaml to use a custom s3 bucket and path. Then install as a separate stack pointing to resources created on the step 2.

iakov-aws avatar May 12 '22 07:05 iakov-aws