Deploy on AWS

To generate a full stack to run on AWS via Cloudformation, click the button below. This will redirect you to the AWS console for a quick installation. Note that currently only the eu-west-1 and us-east-1 regions are supported. AMD SEV-SNP is currently only available in these regions and that is required by the MPC Core container for security.

Steps

1. Once loaded the template into the AWS console, validate the template is correct, review the Infrastructure and press Next.

2. On Step 2, there are parameters that will have to be set. Double check the parameters and press Next to Step 3 once complete.

   (Note: The parameter names have a suffix of an ID which you can ignore.)

   1. AuthClientId - Your API Key Client ID. Obtain this from the Dashboard.
   2. AuthClientSecret - Your API Key Client Secret. Obtain this from the Dashboard.
   3. OrganisationId - Your organisation ID - reach out to Customer Office or your Sales rep for this.
   4. ApprovalMode - Choose which Approval Mode you want to configure your virtual signer for
      1. 'api-approval' - Use your own API to decide whether to approve or reject a request.
         1. ApprovalExternalPolicyBaseURL - URL that is called for vault reshares and signatures.
            (Check here for details and examples.)
         2. ApprovalHttpSignaturePublicKeyHex - Certificate key to validate API calls to the API approver backend.
      2. 'always-approve' - Approve every request with no policy checks.

3. Acknowledge the Cloudformation template and click Next to the Final Review Page

4. Submit the Wizard and wait for Cloudformation to deploy the stack.

For a comprehensive overview of the AWS infrastructure architecture, including security features, multi-tenant isolation, and technical components, see the AWS Architecture documentation.

Components