Use ArcGIS Enterprise on Amazon Web Services and the AWS Management Console

The Amazon Web Services (AWS) Management Console is a web application that you can use to administer the Amazon Elastic Compute Cloud (EC2) instances and other resources that you have created on AWS. Typically, you use ArcGIS Enterprise on Amazon Web Services deployment tools to create deployments and then you use the AWS Management Console to prepare resources and accomplish advanced administrative tasks such as adjusting security group rules or attaching more storage to your instances.

Tip:

For information on which browser version to use with AWS Management Console, see the AWS documentation.

Advanced users who require more specialized configurations can create deployments using the AWS Management Console.

Creating a deployment using the AWS Management Console is a multistep process that requires architectural planning and an understanding of Amazon Web Services.

The following is a summary example of a basic workflow to deploy ArcGIS Enterprise using the AWS Management Console. The approach you take may vary based on your deployment needs.

1. Prepare for a deployment on AWS.
   1. Create an Amazon account and make sure it includes EC2 access.
   2. Download ArcGIS software and licenses from My Esri.
   3. Create Amazon security groups for ArcGIS, configuring at least one security group that allows remote access.
   4. For ArcGIS Enterprise deployments on a single EC2 instance, configure an Amazon Elastic IP address and map a fully qualified domain name to the IP address. Create the Elastic IP address in the same Amazon region as your deployment.
   5. For deployments that include multiple machines (multiple EC2 instances), create Elastic Load Balancers in the same Amazon region as your deployment. Create CNAME DNS mappings for each load balancer.
2. Launch as many EC2 instances as are necessary to the ArcGIS Enterprise deployment type and size you require.

   Ensure the EC2 instances include an operating system supported for ArcGIS software.

3. Connect to the EC2 instances to install and configure the ArcGIS Enterprise components.

   Follow the instructions in the appropriate installation guide for each ArcGIS Enterprise component.

4. Create the ArcGIS Server roles you require and federate them with the portal.

   Launch at least one EC2 instance for each federated server site you require.

5. If your users will publish services that reference registered data, set up a place to store the data on AWS.
   1. Choose where to store data on the cloud.
   2. Optionally, configure additional EBS volumes for local data storage.
   3. Optionally, create enterprise geodatabases in Amazon Relational Database Service (RDS) for PostgreSQL or Amazon RDS for SQL Server to store service data.
   4. Give the ArcGIS Server account permissions to access the data.
   5. Register data sources with your stand-alone and federated ArcGIS Server sites.
6. Choose a data transfer method and move data to AWS.
7. Customize security on the EC2 instances, such as firewall adjustments, SSL configuration, and setting security group rules.
8. For ArcGIS Enterprise deployments, configure the ArcGIS Enterprise portal to meet your organization's needs.
   1. Configure portal security.
   2. Add or invite members to the portal, configure member roles, and assign app licenses.
   3. Configure categories for portal content.
9. If you create a stand-alone ArcGIS Server site, configure ArcGIS Server security.
10. Prepare your production environment.
    1. Alter your AWS security group rules to disable or restrict remote access to the production AWS instance.

       This increases security on the production instance.

    2. Create a custom AMI containing the services and apps on your site.
    3. Iterate with larger instance types, if necessary, to arrive at the instance type with the appropriate amount of power for your deployment.
    4. If needed, use your custom AMI to launch or terminate instances in ArcGIS Server sites in response to demand.

       This can be done programmatically using the Amazon Auto Scaling API, or you can do it manually. Multiple machines can be connected by an Amazon Elastic Load Balancer.

This help system describes many of the steps summarized above. Another helpful resource is the Amazon Web Services documentation, which explains how to use the AWS Management Console and how to program with Amazon Web Services.