Advanced Search
Search Results
113 total results found
Reference : Lease States
Leases states in Sandbox Studio. This table explains the various states the leases can be in at any given time. State Terminal state? Description Pending Approval No The lease request is pending approval from an Admin or a Ma...
Home Page
After logging into the Sandbox Studio UI, as an Administrator, you will land on your Administrator's Home page. As a Sandbox Studio Administrator, you have the capability of requesting and accessing AWS Accounts yourself, overseeing the end user accounts as...
Running the Installation Wizard
Introduction This wizard has been created to facilitate the installation and deployment of the Sandbox Studio solution in your environment. It automates as many steps as possible and checks for prerequisites before the installation. Running the wizard Log...
Installation Prerequisites
Before installing Sandbox Studio, it is important to confirm that the required prerequisites are in place. Most enterprise organisations that already run a multi-account AWS environment will typically have these prerequisites met. However, it is still essentia...
AWS Accounts
As an Administrator, by clicking on the AWS Accounts (1) link in the Administrator section of the left menu, the Administrator can access the Accounts Summary page. On this page the Administrator can see an Accounts Summary (2) of how many accounts are in ...
Before you start...
Before you embark on this manual AWS CloudFormation adventure, let us remind you that we've poured countless hours (and several pots of coffee) into creating a beautiful, automated deployment wizard that handles all the CloudFormation templates, Identity Cente...
Email Settings
As an Administrator you have control over what and how notifications are sent. From the left hand menu, select Settings > Email Settings (1): Two tabs are available: Delivery Settings: Allows to configure how emails are sent, either through Amazon Simple...
Cleaner Settings
An Administrator is able to control and change the way that the AWS Accounts are cleaned/recycled at the end of a lease. This is task is completed by an open-source tool called AWS Nuke. However, in some instances an Administrator may wish to modify the way ...
System Settings
The Administrator has access to a wide range of advanced settings from the System Settings (1) menu on the left hand menu. This page will detail each of the following sections: General Settings Lease Settings Terms of Service Advanced > Authentication S...
Subscription
On the Subscription page, an Administrator can view their Sandbox Studio current licensing entitlements and usage. Subscription page The Subscription page shows the current status of the licence, how many AWS accounts are allowed, the API key used to connect...
Security & Compliance
This page provides an overview of the security model used by Sandbox Studio. It explains how the solution is deployed, the controls in place, and how it aligns with enterprise security, compliance, and governance requirements. Deployment Model Customer...
Overview of what you'll do
Installing Sandbox Studio manually follows three main stages. Each stage builds on the last, so it’s important to work through them in order. 1. Confirm Prerequisites Before beginning the installation, you should confirm that your organisation meets all pr...
Step 3: Deploy the Network stack
Install the Network CloudFormation stack in the hub account. How to Install this Stack Login to the AWS Management Console using the Hub Account. Navigate to the CloudFormation page. Click Create Stack and select With new resources (standard). For Templ...
Step 6: Deploy the API stack
Install the API CloudFormation stack in the hub account. How to Install this Stack Login to the AWS Management Console using the Hub Account. Navigate to the CloudFormation page. Click Create Stack and select With new resources (standard). For Template ...
Creating sandbox accounts
Sandbox Studio works by managing a pool of AWS accounts. These accounts are pre-provisioned by your organisation and then handed out to users as sandboxes when requested. Sandbox Studio does not create new AWS accounts itself; instead, it manages the lifecycle...
External identity provider setup (Optional)
Many organisations, particularly those running a multi-account AWS environment, use AWS IAM Identity Center with an external identity provider such as Microsoft Active Directory, Microsoft Entra ID, or Okta. This allows centralised identity management, where o...
Setup a custom domain (Optional)
By default, Sandbox Studio is deployed behind an AWS CloudFront distribution. Users can access it using the CloudFront distribution URL that is output from the SandboxStudio-API stack. However, in most organisations you will want to provide a more user-friend...
Prerequisite Skills and Specialised Knowledge
Overview This solution requires foundational knowledge of AWS and specific AWS services. The level of expertise needed depends on the user's role and responsibilities within the deployment. General Requirements (All Users) AWS Fundamentals Users deploying ...
Roles deployed by the solution
Sandbox Studio installs multiple roles in your environment, each serving different purposes Role name Account created in Purpose Can be assumed by OrgMgtRole - SandboxStudio-{Namespace}-OrgMgtRole Management Account For operations on the ...
Backup of the solution
The following elements need to be backed up on a regular basis: 1. Sandbox Studio Database (RDS) Sandbox Studio stores its data into a relational database hosted on Amazon RDS. As a precaution, backup this database regularly. This database is named sandb...