System Settings
The Administrator has access to a wide range of advanced settings from the System Settings (1) menu on the left hand menu. This page will detail each of the following sections:
- General Settings
- Lease Settings
- Terms of Service
- Advanced > Authentication Settings
- Advanced > Account Monitoring
General Settings
In the General Settings section, the Administrator can make the following configuration changes by clicking on the Update (1) button :
- System Version: Check if the Version of Sandbox Studio they are running is the latest by clicking on the Check for Updates. More details here: Monitor for updates
- Maintenance Mode: Set the application into Maintenance
Mode,Mode.whichInwillmaintenanceXXXXXmode, users cannot create leases. This is particularly interesting when you need to update Sandbox Studio for example. - Deployment Mode:
SetDevelopmenttheorapplicationProduction.intoWhenDeploymentinMode,development,whichauthorisationwillonXXXXXAPI calls is not enforced.
Unless requested by the Sandox Studio team for support purpose, please avoid changing this value.
Lease Settings
In the Lease Settings section, the Administrator can make the following configuration changes by clicking on the Update (1) button :button:
- Requires Maximum Budget:
ThisIfsettingsetdeterminestowhenYes,amanagersManagerorisadministrators creating an accounttemplate,templatesaswill have towhethersetoranotmaximum budget. In other words, this makes sure manager set a maximum budgetiswhenenforced.creating an account template. - Maximum Budget:
ThisThesettingmaximumdeterminesbudgetwhen a Manager is creatingthat an accounttemplate,templateascan have. Account templates won't be able towhat the maximumhave budgetvaluehigher(inthandollars)thiscan be.value. - Maximum Leases Per User: This setting limits the number of active leases a user can have at any point in time.
- Requires Maximum Duration:
ThisIfsettingsetdeterminestowhenYes,amanagersManagerorisadministrators creating an accounttemplate,templatesaswill have towhether or notset amaxmaximum duration. In other words, this makes sure manager set a maximum durationiswhenenforced.creating an account template. - Maximum Duration:
ThisThesettingmaximumdeterminesdurationwhen a Manager is creatingthat an accounttemplate,templateascan have. Account templates won't be able towhat the maximumhave durationcanlongerbe.than this value.
CleanupTerms Settings
of Service
InAn Administrator may wish to get the Cleanupusers Settingsof section,their sandbox accounts to agree to certain Terms of Service before they access their sandbox environments. An Administrator is able to edit these Terms of Service and also keep a record of previous versions that users agreed too.
Within the Terms of Service page, the Administrator canis makeable to view (1) the followingexisting configurationterms changesof byservice, clickingEdit on(2) the Update (1) button :
Max Failed Cleanup Attempts: The numberterms oftimesservicethatand view theAWSversionNuke cleanup process will attempt to clean an account before giving upRetry Wait Time: The delayhistory (in seconds) to wait before retrying a failed attempt to cleanupSuccessful Attempts Required3): Due to the complexityofaccountpreviouscleaning - this setting sets the numberversions oftimesTermstheofAWS Nuke process should complete successfully before confirming it is clean.Success Wait Time: The delay (in seconds) to wait before retrying a successful cleanup
Authentication Settings
In the Authentication Settings section, the Administrator can make the following configuration changes by clicking on the Update (1) button :
- Web App URL: The URL of the application (defaults to Cloud Front Distribution URL or custom domain)
- AWS Access Portal URL: The AWS Access Portal URL for IAM Identity Center SSO
- Session Duration: The duration of the session in minutes
- IDP Sign In URL: The IDP Sign In URL for IAM Identity Center SSO
- IDP Sign Out URL: The IDP Sign Out URL for IAM Identity Center SSO
- IDP Audience: The IDP Audience Identifier for IAM Identity Center SSO
Web App URL: The URL of the application (defaults to Cloud Front Distribution URL)AWS Access Portal URL: The AWS Access Portal URL for IAM Identity Center SSOSession Duration: The duration of the session in minutes
Notificationthose Settings
settings Inmay thebreak Notifications Settings section, the Administrator can make the following configuration changes by clicking on the Update (1) button :
Email From:The email address that will be used to send notifications emails fromyour Sandbox Studio
Account Monitoring
In the Account Monitoring section, the Administrator can trigger the following checks manually:
- Lease Monitoring: Active accounts i.e. accounts associated with a lease are checked hourly to determine if the budget or expiry date has been reached. However if you wish to check the current status - you can press the Start Lease Monitoring buttons to run a check immediately.
- Account Drift Monitoring: All AWS accounts are periodically checked to ensure they remain in sync with Sandbox Studio. This includes verifying their AWS Organisation Unit and permissions. Click on the Detect Drift to run this check immediately.










