SOP - AWS - Amazon Web Services - Setting up a virtual server --PUBLIC

Scope

Sometimes you need a server to host applications accessed by other computers. BCM's virtual servers meet some needs but updates to settings and network public/private access controls can be a challenge. AWS hosting may alleviate this by permitting hosting outside of BCM's servers for non-sensitive applications.

Procedures

Requesting AWS Credentials

• Process takes ~3-5 days (a couple for making the PO, a couple for creating the credentials)
• links for related support info
  • | service portal request link
  • | FAQ

1. Request a PO for AWS services from DLT solutions
   1. Estimate your monthly costs, create a PO for a few months - the PO can be refilled as you continue to use services
   2. In the BCM procurement portal create a cart
      1. catalog item - DLT Part No. 9098-10004 - Amazon Web Services Infrastructure
      2. include the wording, "The terms of the DLT, Internet2 Net+ agreement for AWS are incorporated by reference".
      3. The PO should be made to: DLT Solutions LLC, 2411 Dulles Corner Park, Suite 800, Herndon, VA 20171
      4. NOTE 1: When specifying the line item, use a Net Price of $1.00. I.E. If you are creating a PO for $2300.00, choose Quantity 2300 and specify a Net Price of $1.00.
      5. NOTE 2: Please ask your procurement analyst to create an "Evergreen" PO.
2. Once the PO is created, request AWS services in the BCM IT portal
3. Within a few days, you will receive the login link and access credential

Creating an AWS LightSail Server

1. Sign in with AWS credentials
2. In the main portal, search for LightSail
3. Click on 'Create Instance'
4. Configure the instance
   1. Select a platform (windows or linux)
   2. Select a blueprint (App and OS or OS only)
   3. Select launch scripts to automate set-up (only needed if you have a script to auto-configure the environment)
   4. Choose networking type (IPv4, IPv6, or dual)
   5. Select a size (ram, cores, storage, ...)
      1. for Filemaker Server, 2 core, 8GB ram is minimum recommended specs
   6. Name the instance
   7. Click 'Create Instance'
5. virtual machine should be ready within a few minutes, you can then click to open a remote desktop session
6. You can access the VM through the lightsail dashboard, https://lightsail.aws.amazon.com/ls/webapp/home/instances

Using the Server

Hosting a Filemaker Server

1. Set-up a bcm vpn client
2. Map any needed bcm network storage
3. Download the Filemaker Server Installer
4. Run the Filemaker Installer (and any dependency related installers)
5. Update Firewall Settings on the AWS LightSail Instance
   1. FileMaker Server uses ports 80, 443, 2399, 5003
6. Update Firewall Settings in Windows Server (OS)
   1. Open Windows Defender > Advanced Settings > Inbound Rules
   2. FileMaker Server uses ports 80, 443, 2399, 5003
      1. Protocol: TCP
      2. Specific Ports: 80, 443, 2399, 5003
      3. Recommended rule name: filemaker_server_19