Prerequisites

Before attempting to create a stack with the template, a few prerequisites should be checked to ensure a successful deployment:

1. An AMI subscription must be active for the FortiAnalyzer license type being used in the template.

   • BYOL Marketplace Listing
   • PAYG (Max 2 Devices) Marketplace Listing
   • PAYG (Max 10 Devices) Marketplace Listing
   • PAYG (Max 30 Devices) Marketplace Listing
   • PAYG (Max 100 Devices) Marketplace Listing
   • PAYG (Max 500 Devices) Marketplace Listing

2. The solution requires 1 EIP to be created so ensure the AWS region being used has available capacity. Reference AWS Documentation for more information on EC2 resource limits and how to request increases.

3. If BYOL licensing is to be used, ensure these licenses have been registered on the support site.

4. Create a new S3 bucket in the same region where the template will be deployed. If the bucket is in a different region than the template deployment, bootstrapping will fail.

5. If BYOL licensing is to be used, upload these licenses to the root directory of the same S3 bucket from the step above.

6. If the FAZ will be publicly available, ensure that the PublicSubnet’s AWS route table has a default route to an AWS Internet Gateway, otherwise bootstrapping will fail. Reference AWS Documentation for further information.

7. If the FAZ will not be publicly available, ensure that a S3 gateway endpoint is deployed and assigned to the subnet’s AWS route table the FAZ will be deployed into. Otherwise, provide the relevant route table ID and the template will deploy a S3 gateway endpoint for you. Reference AWS Documentation for further information.