You must have AWS Admin/User and Thales CipherTrust Manager (CM) Admin/Owner credentials. Use the EC2 Dashboard for this task.
- Sign in to the EC2 console as admin.
- Select Load Balancers, then Create load balancer.
- Under Network Load Balancer, choose Create.
- Set these options:
- Basic Configuration
- Scheme - Internal
- Load balancer IP address type - IPv4
- Network mapping
- VPC - Choose the one where the CM instance or Proxy you want is deployed
- Availability Zones and subnets - Pick the availability zones and subnets you want the load balancer to be connected to (you can select all or just the one where your CM EC2 is deployed). You must include the availability zone that has the same ID as your Lake environment.
- Listeners and routing
- Protocol - TCP
- Port - 8443
- Default Action - Select the target group you created previously.
- Basic Configuration
- Select Create load balancer.
- [Optional] Turn on Cross-zone load balancing.
- After the load balancer is created,select it to open its details page.
- On the Attributes tab, choose Edit.
- On the Edit load balancer attributes page, turn Cross-zone load balancing on.
- Select Save changes.
- Create a VPC endpoint service. See Step 4: VPC Console on AWS - Create a VPC Endpoint Service for CM.