Focus

VM-Series Deployment Guide

Stack Update with VM-Series Auto Scaling Template for AWS (v2.1)

Table of Contents

Stack Update with VM-Series Auto Scaling Template for AWS (v2.1)

A stack update allows you to modify the resources that the VM-Series Auto Scaling template firewall template deploys. Instead of deleting your existing deployment and redeploying the solution, use the stack update to modify launch configuration parameters.

You can modify the AWS instance type, the key pair for your auto scaling groups, and the APi key associated with the adminstrative user account on the firewall.

You do not have to update the stack to modify default notifications or create auto scaling alarms. See Change Scaling Parameters and CloudWatch Metrics (v2.1).

When you deploy the VM-Series Auto Scaling template, the auto scaling groups and the launch configuration are automatically created for you. The launch configuration is a template that an auto scaling group uses to launch EC2 instance, and it specifies parameters such as the instance type, the key pair for your auto scaling group, or the API key associated with the administrative user account on the firewall.

For critical applications, perform a stack update during a maintenance window.

You can update your stack directly or create change sets. The workflow in this document takes you through the manual stack update.

In the AWS CloudFormation console, select the parent stack that you want to update and choose ActionsUpdate Stack.
Modify the resources that you want to update.
You can modify the instance type, security group, key pair for the stack resources, or the API key associated with the administrative user account on the firewall.
If you create a new administrative user account or modify the credentials of the existing administrator on the firewall, in order to update that stack and deploy new firewalls with the updated API key, you need to follow the workflow in Modify Administrative Account (v2.1).
Acknowledge the notifications and review the changes and click Update to initiate the stack update.

SQS Messaging Between the Application Template and Firewall Template (v2.1)

Modify Administrative Account (v2.1)