Preparing AWS
You can leverage the Amazon Web Services ecosystem to run machines on-demand all in one place.
Follow the guide below to link QAssist and your Microsoft Azure instance.
Pre-requisites
AWS Regions
The following resources should be in the same region and VPC
- A VPC1
- With a NAT Gateway2
- With 2 subnets with a NAT Gateway (It can be the same NAT Gateway)
Subnet A
- Will be used for the bridgeSubnet B
- Will be used for the on-demand machines
- A way to run the bridge, we recommend
ECS
service3- If you wish to host it differently, follow the guide here
Setup IAM Access
For QAssist to communicate with Amazon Web Services, you will need to create an IAM Account
with an Access Key
Follow the guide here, make a note of the following:
Access Key
Access Key Secret
You will also need to apply the permissions below to the created user.
IAM Permissions
IAM Permissions
The following permissions are required and need to be applied to the IAM user
ec2:CreateTags
ec2:RunInstances
ec2:DescribeRegions
ec2:DescribeVpcs
ec2:DescribeSubnets
ec2:DescribeSecurityGroups
ec2:DescribeInstanceTypeOfferings
ec2:DescribeInstanceTypes
ec2:GetPasswordData
ec2:DescribeImages
ec2:DescribeInstances
ec2:StartInstances
ec2:RebootInstances
ec2:StopInstances
ec2:TerminateInstances
Setup Bridge
This section only applies if you are using ECS
using the recommended settings.
Any other services or ways to run the bridge are out of scope of this document.
- Create your
ECS
service, using the recommended settings - Follow this guide to create a bridge on QAssist, with the following settings
URL
- This will be theDomain
from theWeb App for Containers
- Make a note of the secret key you receive in your email
- Set the following environment variable in the
ECS
containerName
-Cipher__Key
Value
- The secret key you received when creating the bridge
- The bridge setup is complete
Setup Provider
- In QAssist go to
Providers
and clickCreate Provider
Type
-AWS
Name
- choose a friendly nameAccess Key
- FromIAM User
Access Key Secret
- FromIAM User
Region
- The region where the pre-requisite resources where createdEndpoint
(Optional) - The API endpoint to communicate with
- Click
Add
, QAssist will run some checks, which may take a few minutes - QAssist should now be able to communicate with your Amazon Web Services instance
-
QAssist will only create machines in the VPC configured, Learn more. ↩
-
A NAT gateway is required for machines to access the internet ↩
-
ECS
is a fast and cost-effective way to get the bridge up and running ↩