IAM Permissions required for AWS Single Gateway

[israelsc]

Hello everyone!

I am deploying a lab on AWS for the creation of a CloudGuard Network for AWS Single Gateway . This based on sk111013  AWS CloudFormation Templates

I am using the "Launch stack" option to create the firewall inside a "new VPC".

However, when I give the template parameters and launch the stack, it generates a rollback due to an error:

 

 

I'm thinking it may be due to IAM permissions, but I'm not sure.

These are the permissions I currently have on my IAM account:

 

I can't find any documentation or sk that indicates the permissions needed to deploy a Security Gateway on AWS.

Do you think it is something related to IAM permissions or any ideas to start checking on AWS?

I hope you can help me.

Greetings to all!

 

[Edan_Leventhal]

Hi Israelsc,

Have you made sure you are subscribed to the Check Point product in the marketplace? That's a possible cause for this error.

 

[PhoneBoy]

I can confirm this is a likely cause of this issue (or at least something real easy to rule out).

[israelsc]

Hello team,
Thank you very much for the solution.

That's right, I was missing to subscribe to Check Point products in the marketplace and that's why I was getting the error.
After subscribing, I was able to deploy a Gateway and a Management Server without problems in AWS.

However, I have not yet found a particular document or documentation on: IAM Permissions for deploying an AWS Single Gateway,

Any idea where I can find this information?

Greetings!

[israelsc]

Hello 

I have been searching through documentation and have not yet found an article that provides me with this information.

I am looking for the IAM permissions needed for an AWS account to be able to deploy a CheckPoint Single Gateway on AWS starting from the CloudFormation Template in the documentation.

Greetings!!

[yizhako · Accepted solution]

Hi,
you can find the information at the following SK
https://support.checkpoint.com/results/sk/sk175207

Section 8

Yizhak O.

[israelsc]

Hello @yizhako , that's the documentation that I was searching, thanks a lot!