Install Runbooks
Runbooks in OneLens allow you to automate actions across your cloud environment with minimal manual effort. Before you install your first runbook, you'll need to complete a one-time setup in your AWS accounts. Once that’s done, installing a runbook becomes a simple, account-level action.
One Time Setup
Before installing your first runbook, you need to perform a one-time setup in your AWS environment. Depending on how your infrastructure is structured, follow the steps for either a Master-Child Setup or an Individual Account.
Step-by-Step Guide
OneLens will automatically prompt you with the one time setup steps when you attempt your first runbook installation.
For Master Child Setup
If you have multiple AWS accounts through AWS Organizations, follow these steps:
NOTE
If you're using a third-party billing partner, make sure you have access to the actual master/management account in AWS Organizations. You'll need this to designate a delegated administrator and proceed with the setup.
In case you don't have the access, follow the individual account setup in each account.
Create a Delegated Account
Begin by setting up a delegated account from your master account. This account will be used to manage resources and permissions across multiple AWS accounts.
Enable AWS Change Manager
After the delegated account setup, enable AWS Systems Manager Change Manager in that account. This will enable OneLens to execute changes securely across your cloud infrastructure.
For detailed steps on enabling Change Manager, refer to the Enable Change Manager.
Deploy the CFT as a StackSet for Child Accounts
Once the CFT has been deployed in the delegated account, use a CloudFormation StackSet from the delegated account to deploy the CFT to all child accounts. This ensures that each child account is configured with the required resources.
Child Accounts CFT URL:
https://prod-onyx-backend.s3.ap-south-1.amazonaws.com/onyx/aws/cft/onyx-child.template.jsonDeploy CFT as a Stack in the Delegated Account
In the delegated account, deploy the OneLens CloudFormation Template (CFT) as a CloudFormation Stack. This step sets up the necessary permissions and resources that OneLens needs to operate.
Delegated Account CFT URL:
https://prod-onyx-backend.s3.ap-south-1.amazonaws.com/onyx/aws/cft/onyx-master.template.jsonNote
If you are using a Master-Child (Multi-Account) setup, complete the StackSet deployment for your child accounts. If you are managing a single account, simply follow the previous steps and do not run the StackSet.
For detailed steps on deploying the CFT (both as a Stack in the delegated account and as a StackSet for child accounts), refer to the Deploy CFT (Stack and StackSet).
For an Individual Account
If you're setting up OneLens in a single AWS account without AWS Organizations, follow these two steps:
CFT Verification
To verify or inspect any of the CloudFormation templates before deploying, click on the respective link provided above.
Installing a Runbook
Once the setup is complete, here’s how you can install a runbook:
Open the particular runbook page in the OneLens UI.
Click the Install button at the bottom right of the page. This will open the Accounts Tab where you can see all your connected AWS accounts.
In the Accounts Tab, locate the specific account where you want to install the runbook.
Click the Install button next to the account you want to deploy the runbook to.
OneLens will then deploy the runbook using the permissions granted during one time setup.
Last updated