Prepare deployment resources using the ArcGIS Enterprise Cloud Builder CLI for AWS PREP command

The ArcGIS Enterprise Cloud Builder Command Line Interface for Amazon Web Services PREP command automates several essential prerequisite tasks for an ArcGIS Enterprise deployment on Amazon Web Services (AWS). After preparing a JSON file specifying your parameters, run the PREP command to do the following:

• Create a network stack and Amazon Simple Storage Service (S3) bucket for your deployment.
• Create a Amazon Virtual Private Cloud (VPC) for your deployment.
• Upload all necessary authorization files and SSL certificates to the S3 bucket.
• Import your SSL certificate to AWS Certificate Manager.

You only need to run the PREP command again in the following circumstances:

• You want to create another deployment in a different region or on a separate network.
• You have more than one AWS account and you want to create deployments for different accounts.
• You need to update the SSL certificate for your deployment.
• Your ArcGIS licenses expired and you need to upload new license files.

The PREP command returns information to a text file on your local drive.

1. Download the ArcGIS_Enterprise_Cloud_Builder_AWS_CLI_<version>_<#>.exe file from My Esri and place it on your local drive.
2. Double-click the ArcGIS_Enterprise_Cloud_Builder_AWS_CLI_<version>_<#>.exe file to extract its contents. During extraction, you can specify a location for the extracted files or use the default location, c:\Program Files\ArcGIS\CloudBuilder\AWS\CLI. You must be a Windows Administrator to extract to the default location.

   The ArcGIS Enterprise Cloud Builder CLI for AWS utility and its supporting files and samples are extracted to the location you specify.

3. Move your SSL certificate (.pfx) and license files (.prvc or .ecp for ArcGIS Server, and .json for Portal for ArcGIS) to the machine where you just extracted the ArcGIS Enterprise Cloud Builder CLI for AWS utility.
4. If you want to modify and use the sample .json files provided with the utility, make copies of the files in the Configuration folder. Be sure to place the copies in a subfolder under the Configuration folder.
5. Before executing the PREP command with the ArcGIS Enterprise Cloud Builder CLI for AWS utility, modify one of the sample preparation files or create your own .json preparation file.

   To create a VPC and S3 bucket and upload your SSL certificate and ArcGIS license files in one step, modify your copy of the allprep.json sample file, or create your own .json preparation file that includes the parameters shown in the following example. Open the file in a text editor, set the parameters to the information specific to your account and deployment, and save your changes. For a description of each parameter, see ArcGIS Enterprise Cloud Builder CLI for AWS parameters

   In this example, the utility will connect to the AWS account using the account's access key and secret key. An Amazon S3 bucket named EnterpriseFiles will be created in region ap-northeast-1, and license files and an SSL certificate will be copied from the specified local folders and placed in the S3 bucket. A VPC will also be created in availability zones ap-northeast-1b and ap-northeast-1a.

   Note that it is possible that all your ArcGIS Server licenses are in the same file.

   {
   	"AWSCredentials": {
   		"AWSAccessKey": "ABCDEFGHIMI4YCPABC",
   	 "AWSSecretKey": "ABCDLZDYIzZuXHlWHOPhMqrTmABCD",
   		"AWSRegion": "ap-northeast-1"
   	},
   	"NetworkStack": {
   		"StackName": "EnterpriseVPC",
   		"AZs": "ap-northeast-1b,ap-northeast-1a",
   		"CreateFlag":true
   	},
   	"ArcGISEnterpriseFiles": {
   	 "DeploymentBucket": "enterprisefiles",
   		"PortalLicense": "C:\\ArcGISLicenses\\Your_Portal_License.json",
   		"ServerLicense": "C:\\ArcGISLicenses\\Your_GIS_Server_License.prvc",
   		"GeoAnalyticsLicense": "C:\\ArcGISLicenses\\Your_GeoAnalytics_Server_License.prvc",
   		"ImageServerLicense": "C:\\ArcGISLicenses\\Your_Image_Server_License.prvc",
   		"RasterAnalyticsLicense": "C:\\ArcGISLicenses\\Your_Image_Server_License.prvc",
   		"ImageHostingLicense": "C:\\ArcGISLicenses\\Your_Image_Server_License.prvc",
   		"GeoEventLicense": "C:\\ArcGISLicenses\\Your_GeoEvent_Server_License.prvc",
   		"SSLCertificateFile": "C:\\MyCerts\\wildcard_yourdomain_com.pfx",
   		"SSLCertPassword": "changeit"
   	}
   }

6. Open Command Prompt and change directories (cd) to the folder where you extracted the ArcGIS Enterprise Cloud Builder CLI for AWS utility and files. Run the utility with the PREP command: cloudbuilder.exe PREP -j <prepfilename.json>

   For example, to use a file named myallprep.json that you placed in a new prep file subfolder of the ArcGIS Enterprise Cloud Builder CLI for AWS Configuration folder, type the following:

   cloudbuilder.exe PREP -j Configuration\MyPrepFiles\myallprep.json

7. Locate the ArcGIS Enterprise Cloud Builder CLI for AWS utility's output file (in the format PREP_<date><time>.json) in the CloudBuilder\AWS\CLI\Output folder on your local drive. This file contains information you need when you create the deployment.

   The output from running the example file in step 5 would include an ID and two subnet IDs for a new VPC, the S3 bucket name, and the unique Amazon Resource Name (ARN) created for your SSL certificate.

   "NetworkStack": {
         "VPCId": "vpc-z9fb11ba",
         "subnet1": "subnet-z319acee",
         "subnet2": "subnet-f4fc658f"
      },
      "DeploymentDetails": {
         "DeploymentBucket": "enterprisefiles",
         "SSLCertificateARN": "arn:aws:acm:ap-northeast-1:123456789123:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
      }

   Note that the contents of the output file will vary depending on what information you provided in the configuration file.

You're now ready to create a deployment using the command line interface.