topic Re: IAM Permissions required for AWS Single Gateway in Cloud Firewall

IAM Permissions required for AWS Single Gateway

israelsc — Wed, 10 Jul 2024 01:54:48 GMT

Hello everyone!

I am deploying a lab on AWS for the creation of a CloudGuard Network for AWS Single Gateway . This based on sk111013 AWS CloudFormation Templates

I am using the "Launch stack" option to create the firewall inside a "new VPC".

However, when I give the template parameters and launch the stack, it generates a rollback due to an error:

I'm thinking it may be due to IAM permissions, but I'm not sure.

These are the permissions I currently have on my IAM account:

I can't find any documentation or sk that indicates the permissions needed to deploy a Security Gateway on AWS.

Do you think it is something related to IAM permissions or any ideas to start checking on AWS?

I hope you can help me.

Greetings to all!

Re: IAM Permissions required for AWS Single Gateway

Edan_Leventhal — Wed, 10 Jul 2024 03:43:33 GMT

Hi Israelsc,

Have you made sure you are subscribed to the Check Point product in the marketplace? That's a possible cause for this error.

Re: IAM Permissions required for AWS Single Gateway

PhoneBoy — Wed, 10 Jul 2024 17:41:43 GMT

I can confirm this is a likely cause of this issue (or at least something real easy to rule out).

Re: IAM Permissions required for AWS Single Gateway

israelsc — Mon, 15 Jul 2024 21:01:04 GMT

Hello team,
Thank you very much for the solution.

That's right, I was missing to subscribe to Check Point products in the marketplace and that's why I was getting the error.
After subscribing, I was able to deploy a Gateway and a Management Server without problems in AWS.

However, I have not yet found a particular document or documentation on: IAM Permissions for deploying an AWS Single Gateway,

Any idea where I can find this information?

Greetings!

Re: IAM Permissions required for AWS Single Gateway

israelsc — Mon, 29 Jul 2024 21:12:17 GMT

Hello

I have been searching through documentation and have not yet found an article that provides me with this information.

I am looking for the IAM permissions needed for an AWS account to be able to deploy a CheckPoint Single Gateway on AWS starting from the CloudFormation Template in the documentation.

Greetings!!

Re: IAM Permissions required for AWS Single Gateway

yizhako — Tue, 30 Jul 2024 08:02:42 GMT

Hi,
you can find the information at the following SK
https://support.checkpoint.com/results/sk/sk175207

Section 8

Yizhak O.

Re: IAM Permissions required for AWS Single Gateway

israelsc — Mon, 05 Aug 2024 17:44:24 GMT

Hello @yizhako , that's the documentation that I was searching, thanks a lot!