Create the VPC endpoint and DNS name to be used to reach the CipherTrust Manager using the network load balancer. You must have AWS Admin/User and Thales CipherTrust Manager (CM) Admin/Owner credentials. Use the Amazon VPC console for this task.
- Sign in to the Amazon VPC console.
- Select Endpoint Services, then Create endpoint service.
- Select these options:
- Load balancer type - Network
- Available load balancers
- Select the Network Load Balancer you just created.
- Check Details of selected load balancers, Included Availability Zones and verify that the availability zone ID matches the availability zone ID of your Lake environment. See Step 1: Lake Console - Get Zone ID and IAM Role.
- Require acceptance for endpoint - Acceptance required
- Supported IP address types - IPv4
- Choose Create endpoint. Wait for the endpoint to be created.
- In the navigation pane, choose Endpoint services.
- Select the endpoint you just created.
- Choose the Allow principals tab.
- Select Allow principals.
- For Principals to add, enter the ARN of the IAM role that you copied from VantageCloud Lake and select Allow principals. (See Step 1: Lake Console - Get Zone ID and IAM Role).
- Record the VPC endpoint service name that AWS generated. You need it to configure Thales on Lake.