Search Results

AWS AppConfig is used by Sandbox Studio to store its runtime configuration. You will need to update this configuration after the CloudFormation stacks have been deployed so that Sandbox Studio knows how to authenticate users and where to route traffic. If App...

AWS Secrets Manager is used to store the SAML Identity Provider (IdP) certificate securely. The SandboxStudio-API stack creates a secret for this purpose. You must update it with the correct certificate from your Identity Center application. If the certificat...

Overview The Sandbox Studio solution includes observability tools for monitoring the solution resources. Amazon CloudWatch Application Insights Sandbox Studio on AWS includes access to Amazon CloudWatch Application Insights to provide automatic detection an...

When the Sandbox Studio solution detects an issue with one of its sandbox accounts, the account is moved to a Quarantine state and an email is sent to the solution administrators indicating that action be taken to resolve the account’s quarantine status. Note...

If the cleanup process fails to completely clean an account at the end of a lease, Sandbox Studio will move the account into a Quarantine state, and email the Administrators notifying them of the issue. To resolve an account that has failed clean-up: L...

Sandbox Studio Software LTDEnd User License Agreement (EULA)  Version: 1.0  Table of Contents Parties and Product  License Grant and Scope  Key Definitions  Usage Restrictions  Intellectual Property Rights  Disclaimers and Liability  Support a...

Sandbox Studio's licensing is managed directly through the AWS Marketplace, ensuring a seamless and integrated experience with your existing AWS billing. Sandbox Studio software is licensed annually based on the number of AWS Accounts (sandboxes) you manage vi...

From the My AWS Accounts page, you can see the status and details of all the AWS accounts (aka "leases") you have requested. Request a new Account For active accounts, users can access the AWS console using this button If the account has a budget limit,...

Accessing approvals When setting up the Account Templates, the Manager or Admins can set an account to require approval, before it is issued to a user.  When a user requests such an account, Managers or Admins need to approve the request for the user to be gr...

As a Manager, you can see and manage leases. To have management access to leases, you need to: Have Manager access in Sandbox Studio Be granted management permissions on the account template that the leases use Note: Administrators have full permissions...

After logging into the Sandbox Studio UI, as a Manager, you will land on your Manager's Home page. As a Sandbox Studio Manager, you have the dual capability of overseeing the environment for your end users and also requesting and accessing AWS Accounts your...

To create a new account template: Click on "Account Templates" on the left menu Click on "Add Account Template" Creating an account template is a 7-step process that can be done from scratch or use an existing template from Sandbox Studio. In thi...

On the Add a new Account Template page, complete the required fields in the Basic Details section. For Name, enter a descriptive name for your lease template so that you can easily keep track of it. (Optional) For the description, specify the inten...

This step defines the budget limits for leases using this template. Define if you want a maximum budget to be enforced for the leases. By default, this flag is optional (You can define templates with no budget limits), but platform administrators can enfo...

This step defines the maximum duration for leases using this template. Define if you want a maximum duration to be enforced for the leases. If you select Set an expiry date, enter a value in Maximum Lease Duration (in Months, Days or Hours). The duration...

Using Permissions, you can configure what the end users can and cannot do in their accounts.  Sandbox Studio uses IAM Identity Center Permissions Sets for permissions. You can see more details explaining each of the sections of this page at https://docs.aws.a...

In this section, you define if leases can be shared, if they require approval, and who can manage and approves them. Team sharing (1) In the Team Sharing section of the page. A simple toggle that once enabled will require the Manager or Administrator to ...

Using launch templates, managers can define what resources need to be set up on new accounts creation. For instance, create S3 buckets, deploy Cloud Formation templates, etc. Sandbox Studio uses AWS Codebuild to set up resources. Launch Settings (1) Selec...

Having completed all the steps, the final step is to Review the selected settings and one satisfied that everything is correct, click Submit to create a new lease template. Users can then request a lease with this new lease template. The new lease templa...

As a Manager or Administrator, you can view the costs incurred by the leases. This allows you to keep track of the costs of your leased accounts. You can view all leases on the Manage Leases page. Each lease will display the amount spent on the lease so far...