Skip to content

Commit 3733ad5

Browse files
committed
Fix doc to required AWS Organizations first to deploy
Close #7
1 parent 7ed2bbb commit 3733ad5

1 file changed

Lines changed: 27 additions & 7 deletions

File tree

README.md

Lines changed: 27 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,25 @@ You can visualize the the results using Amazon Managed Grafana through Amazon At
2727

2828
## Deployment
2929

30-
The deployment of the dashboard is composed of three steps.
30+
The deployment of the dashboard is composed of four steps.
31+
32+
### AWS Organization and AWS IAM Identity Center
33+
34+
Amazon Managed Grafana relies on single sign-on using your organization’s identity provider to authenticate users.
35+
The following steps guide you to setup [AWS Organization](https://aws.amazon.com/organizations/), and [AWS IAM Identity Center](https://aws.amazon.com/iam/identity-center/).
36+
37+
**NOTE**: If you already have AWS Organization and AWS IAM Identity Center you can skip those steps.
38+
39+
#### 1. Create an AWS Organizations
40+
41+
1. Open [AWS Organization](<https://console.aws.amazon.com/organizations/v2>).
42+
1. Choose **Create an Organization**. By default, the organization is created with all features enabled.
43+
1. The organization is created and the AWS accounts page appears. The only account present is your management account, and it's currently under the root organizational unit (OU).
44+
45+
#### 2. Enable AWS IAM Identity Center
46+
47+
1. Open [AWS IAM Identity Center](<https://console.aws.amazon.com/singlesignon>).
48+
1. Choose **Enable**.
3149

3250
### Deploy the architecture
3351

@@ -53,8 +71,9 @@ GRAFANA_ID=`sam list stack-outputs --stack-name ${BATCH_DASHBOARD_NAME} \
5371

5472
### Create and add group permissions to grafana
5573

56-
Amazon Managed Grafana relies on to authenticate users.
57-
The following steps guide you to setup AWS Organization, AWS IAM Identity Center and create a viewer and admin group.
74+
Amazon Managed Grafana integrates with AWS IAM Identity Center to provide identity federation.
75+
The federation provides users and groups that will grant access to Amazon Managed Grafana as a **Viewer**, **Editor** or **Admin**.
76+
The following steps guide you to create a viewer and admin group.
5877

5978
#### 1. Create an AWS Organizations
6079

@@ -64,19 +83,20 @@ The following steps guide you to setup AWS Organization, AWS IAM Identity Center
6483

6584
#### 2. Enable AWS IAM Identity Center
6685

67-
1. Open [AWS IAM Identity Center](<https://console.aws.amazon.com/singlesignon>).
68-
1. Choose **Enable**.
69-
1. Choose **Go to settings**.
86+
1. Open **[AWS IAM Identity Center settings](https://console.aws.amazon.com/singlesignon/identity/home#!/settings)**
7087
1. Copy the **Identity store ID** from the identity store tab. This will be used in the next step
7188

7289
### Create groups and users in IAM Identity Center
7390

74-
Create grafana admin and viewer groups.
7591
Set the identity store ID to the value copied in the previous step.
7692

7793
```bash
7894
IDENTITY_STORE="d-1234567890"
95+
```
7996

97+
Create grafana admin and viewer groups.
98+
99+
```bash
80100
ADMIN_GROUP=`aws identitystore create-group --identity-store-id ${IDENTITY_STORE} \
81101
--display-name 'grafana-batch-op-dashboard-admin'\
82102
--query GroupId \

0 commit comments

Comments
 (0)