AWS: Connect Source Organizations
Who can use this feature
Anyone with these permissions: Manage source connections
This article explains how to connect an AWS source organization to Eon. You can connect as many organizations as you need.
Connect a source organization
You’ll start this procedure in the Source accounts > AWS accounts page by clicking New Connection and selecting Connect organizational unit.
Before you start
Before you connect your AWS organization, make sure:
-
You can log in to the organization’s management account under an identity that can deploy CloudFormation StackSets and perform the actions in Eon’s stack template.
-
You understand the permissions Eon needs to back up your resources.
See AWS: Permissions Deployment Files for details on both of these points.
Log in to the AWS management account
In a new tab, log in to your AWS management account with a role that can deploy CloudFormation StackSets. Make sure to use the same browser you’re logged into Eon with.
While you’re logged in, note this information so you can provide it to Eon in the next step:
-
ID of the organization’s management account.
-
ID of the organization unit (OU) whose member accounts you want to connect.
Provide the organization details
Returning to the tab you have Eon opened in, under What do you want to connect?, select Account.
Paste the AWS management account ID and Organization OU ID.
Leave Role Name as the default value.
If, for some reason, you already have a role in your management account called EonOrganizationAccountRole, you can change the new role name.
Click Launch CloudFormation in AWS. The AWS CloudFormation Quick create stack page opens in a new tab.
Deploy the StackSet
In the Quick create stack tab that opened, the form is pre-filled for your organization’s configuration. You can review the stack name and parameters, but don’t change them.
Scroll to the bottom of the page and select the acknowledgement checkbox, then click Create stack.
The StackSet is deployed to your AWS management account and propagates the necessary roles to the selected organizational units (OUs). Wait for about a minute until the status changes to CREATE_COMPLETE.