Before starting the deployment, familiarize yourself with the key components and their roles.
AWS Cloud Development Kit (CDK) and Deployment process
The deployment uses Infrastructure as Code principles through the AWS Cloud Development Kit (CDK), a framework that defines AWS resources (For example, EC2 instances, Lambda functions, S3 buckets, IAM roles) using scriptable code.
Deployment mechanism: The process is orchestrated by an AWS CodePipeline project.
Execution: The CodePipeline triggers an AWS CodeBuild project, which executes the IVX CDK code to provision the cloud infrastructure.
IAM Roles and Permissions
The CDK automatically creates two core IAM roles required to manage and operate the IVX Private Cloud:
private-ivx-codepipeline-role-{aws_stage}-{aws_account_id}-{aws_region}: Used by the CodePipeline stack to create and manage pipeline resources.ivx-cloud-role-{aws_stage}-{aws_account_id}-{aws_region}: Used by the CodeBuild stack to create the core IVX Private Cloud resources.
Both roles require specific permissions for CloudFormation, S3, ECR, SSM, and Lambda to manage the full deployment life cycle.