MicroStrategy ONE

Deploy MicroStrategy Cloud Platform for AWS with Only Private IPs

You can deploy MicroStrategy Cloud Platform for AWS so the platform instances and load balancer directing traffic to them are only accessible via private IPs in a private subnet.

In a typical MicroStrategy Cloud Platform for AWS configuration, platform instances are deployed with private IPs into a private subnet, but the load balancer directing traffic to them is accessible from the internet via public IPs in a public subnet. To alleviate this security risk, you can deploy the entire MCP architecture so every component is only reachable within their own existing private subnet, via private IPs, as shown in the architecture diagram below.

EC2 instances created in the VPC need outbound access to the following:

Hostname Protocol Port Purpose
pypi.org HTTPS 443 Installs and updates Python packages
checkpoint-api.hashicorp.com HTTPS 443

Version checks and security vulnerability updates
*.amazonaws.com HTTPS 443 AWS resources, such as CodeDeploy

*.microstrategy.com

HTTPS

443

Post environment telemetry/status to MicroStrategy console
  1. Go to the MicroStrategy Cloud Platform.
  2. Log in with your Resource Center account. To learn how to create a Resource Center account, see Create a Resource Center Account.
  3. Click New Environment.
  4. Select the configuration that fits your requirements. You can go back later and deploy a new environment with a different configuration.
  5. Enter an environment name.
  6. Customize your environment as needed.
  7. Enter your AWS account number
  8. Select the Use Existing VPC checkbox. This allows you to use your existing infrastructure and networking resources.
  9. Click on the Configuration link.
  10. Click OK to be redirected to the AWS Console.
  11. Log into your AWS account.
  12. The CloudFormation Template URL is prefilled. Do not change it. Click Next.

  13. Enter the following information:

    Stack Name: Enter name of the CloudFormation stack. Use any name you prefer.

    VPC: From the drop-down menu, select the VPC in which you want to deploy the MicroStrategy Platform.

    VPC CIDR Block: Enter the CIDR range of your VPC. You can check the CIDR range assigned to your VPC in the VPC drop-down menu.

    Public Subnet 1 ID: Leave this field blank.

    Public Subnet 2 ID: Leave this field blank.

    Private Subnet 1 ID: Select the Private Subnet ID.

    Private Subnet 2 ID: Select the Private Subnet ID.

  14. Click Next.

  15. On the Options page, specify tags for the resources in your stack and set advanced options, if necessary. Click Next.

  16. Confirm your selections on the Review page and click Next.

  17. Click Create to deploy the stack. When the status of the stack is CREATE_COMPLETE, the deployment is complete.

  18. Return to the Environment Configuration page and click Validate. When validation is successful, a green checkbox appears.

  19. Click Create Environment.