Managed Services configuration in AWS
Storage Security comes bundled with 3rd party services that can be replaced with AWS managed equivalents. Bellow are the steps on how to configure each of the AWS services in MDSS.
MongoDB -> Amazon DocumentDB
- TLS can be disabled in the cluster parameter group, otherwise the DocumentDB tls certificate will need to be loaded in MDSS using the
/etc/mdss/ca_certificatesdirectory
After creating a DocumentDB instance in AWS, its connection string can be added in the MDSS configuration file /etc/mdss/customer.env as it appears in the “Connect“ section:
MONGO_URL=mongodb://<username>:<insertYourPassword>@<address>:27017/?replicaSet=rs0&readPreference=secondaryPreferred&retryWrites=falseRedis -> Amazon ElastiCache
After creating a new Redis cache in Amazon ElastiCache, its Configuration endpoint can be added in the MDSS configuration file /etc/mdss/customer.env as it appears in the “Cluster details“ section:
CACHE_SERVICE_URI=<redis_hostname>.cache.amazonaws.com:6379CACHE_SERVICE_URL=<redis_hostname>.cache.amazonaws.comCACHE_SERVICE_PORT=6379CACHE_SERVICE_URL and CACHE_SERVICE_PORT also need to be configured for MDSS to check connectivity to the service before starting up.
RabbitMQ -> Amazon MQ
After creating a new Amazon MQ instance, its Endpoint can be added in the MDSS configuration file /etc/mdss/customer.env as it appears in the “Connections“ section:
RABBITMQ_URI=amqps://<amazon_mq_hostname>.amazonaws.com:5671RABBITMQ_HOST=<amazon_mq_hostname>.amazonaws.comRABBITMQ_PORT=5671RABBITMQ_HOST and RABBITMQ_PORT also need to be configured for MDSS to check connectivity to the service before starting up.