Search Results

The Administrator has access to a wide range of advanced settings from the System Settings (1) menu on the left hand menu. This page will detail each of the following sections:  General Settings Lease Settings Terms of Service Advanced > Authentication S...

On the Subscription page, an Administrator can view their Sandbox Studio current licensing entitlements and usage. Subscription page The Subscription page shows the current status of the licence, how many AWS accounts are allowed, the API key used to connect...

This page provides an overview of the security model used by Sandbox Studio. It explains how the solution is deployed, the controls in place, and how it aligns with enterprise security, compliance, and governance requirements. Deployment Model Customer...

Installing Sandbox Studio manually follows three main stages. Each stage builds on the last, so it’s important to work through them in order. 1. Confirm Prerequisites Before beginning the installation, you should confirm that your organisation meets all pr...

Install the Network CloudFormation stack in the hub account. How to Install this Stack Login to the AWS Management Console using the Hub Account. Navigate to the CloudFormation page. Click Create Stack and select With new resources (standard). For Templ...

Install the API CloudFormation stack in the hub account. How to Install this Stack Login to the AWS Management Console using the Hub Account. Navigate to the CloudFormation page. Click Create Stack and select With new resources (standard). For Template ...

Sandbox Studio works by managing a pool of AWS accounts. These accounts are pre-provisioned by your organisation and then handed out to users as sandboxes when requested. Sandbox Studio does not create new AWS accounts itself; instead, it manages the lifecycle...

Many organisations, particularly those running a multi-account AWS environment, use AWS IAM Identity Center with an external identity provider such as Microsoft Active Directory, Microsoft Entra ID, or Okta. This allows centralised identity management, where o...

By default, Sandbox Studio is deployed behind an AWS CloudFront distribution. Users can access it using the CloudFront distribution URL that is output from the SandboxStudio-API stack. However, in most organisations you will want to provide a more user-friend...

Overview This solution requires foundational knowledge of AWS and specific AWS services. The level of expertise needed depends on the user's role and responsibilities within the deployment. General Requirements (All Users) AWS Fundamentals Users deploying ...

Sandbox Studio installs multiple roles in your environment, each serving different purposes Role name Account created in Purpose Can be assumed by OrgMgtRole - SandboxStudio-{Namespace}-OrgMgtRole Management Account For operations on the ...

The following elements need to be backed up on a regular basis:   1. Sandbox Studio Database (RDS) Sandbox Studio stores its data into a relational database hosted on Amazon RDS. As a precaution, backup this database regularly. This database is named sandb...

Secrets Sandbox Studio creates 4 secrets in AWS Secrets Manager: Secret name Description Rotated? /SandboxStudio/Sandbox/Auth/IdpCert IAM Identity Center Certificate of the Sandbox Studio SAML 2.0 custo...

Overview Sandbox Studio provisions a single-AZ database by default (db.t4g.micro). You can modify the database size according to your requirements.   Data Storage The database stores the following types of data: User display names and internal...

Automatic Update Alerts When a new version of Sandbox Studio is available, administrators will receive an update notification that appears in their left menu. This notification system is designed to keep administrators informed of significant updates without ...

Updating Made Simple Updating Sandbox Studio is easier than ever. The update process uses the same installation script you used for the initial setup, making it straightforward and familiar. How It Works When you run the installation script on a environment...

Starting with version 1.1.0 of Sandbox Studio, users' profile pictures can be displayed in the interface: IAM Identity Center IAM IdC has a specific attribute for profile picture URL: This is the field that you need to map from your IdP in order to ...

From the left menu, access your accounts by clicking on "My AWS accounts": In the list of accounts, select the account you want to terminate and click on the "Terminate" button (1): Tick the box to acknowledge that all resources in the account will be de...