Platform InstallationReference
AWS deployment: prerequisites
This page lists the skills, AWS permissions and DNS arrangements needed to deploy and operate Personalisation Hub in your own AWS account.
Skills and knowledge
The installation itself is guided step by step and needs no AWS expertise. Ongoing operation assumes the following baseline knowledge.
| Area | Knowledge assumed |
|---|---|
| IAM | Managing user roles and permissions |
| EC2 | Locating instances, viewing logs, basic restart actions |
| S3 | Accessing uploaded media and configuration |
| VPC and networking | Reading subnet, routing and gateway set-ups |
| CloudFormation | Reviewing stack outputs and troubleshooting stacks |
| AWS Marketplace | Subscribing to a product; finding its deployment documentation and release notes; monitoring usage, updates and support options |
| Domains and SSL | Configuring DNS for a custom domain; how SSL/TLS certificates and DNS propagation work |
AWS account access and permissions
No AWS root user credentials are required. Deploy with an IAM user or role that can:
- Subscribe to AWS Marketplace products and start provisioning
- Deploy infrastructure with AWS CloudFormation
- Request service quota increases through AWS Support
- View billing and usage information (optional; used for cost monitoring)
- Create and manage the components in the following table
| Service | Required components |
|---|---|
| Identity and Access Management (IAM) | Roles, policies, instance profiles, OIDC provider |
| Elastic Kubernetes Service (EKS) | Cluster, node groups, add-ons (VPC CNI, CSI) |
| Elastic Compute Cloud (EC2) | Launch templates, Auto Scaling groups, Elastic IPs |
| Virtual Private Cloud (VPC) | VPC, subnets, route tables, NAT, internet gateway, NACLs, DHCP options |
| Amazon RDS | DB instances, subnet and parameter groups, security groups |
| Amazon ElastiCache | Redis cluster, subnet group, security group |
| Amazon MSK | Kafka cluster, security group |
| OpenSearch Service | Domains, security groups |
| S3 | Buckets, ACLs, CORS, ownership controls |
| Elastic Load Balancing (ELB) | Load balancers, target groups |
| AWS Certificate Manager (ACM) | Certificates |
| AWS Key Management Service (KMS) | Keys, aliases |
| Systems Manager (SSM) | SSM parameters (for example, the AMI) |
The AWS documentation covers each of these services.
DNS mapping
| Item | Value |
|---|---|
| Record target | The platform's load balancer or public endpoint |
| Recommended host | A subdomain of your primary domain, for example ph.yourdomain.com |
| Record type | CNAME (or A/ALIAS) |
| DNS provider | Any — your existing provider, Cloudflare or Route 53 |
| Purpose | Makes the platform reachable from the internet and allows the SSL/TLS certificate to be issued for HTTPS |
| Propagation | DNS changes can take time to propagate globally |
The records to add are emailed to the Master Admin when installation finishes — see Step 3 — Set up DNS after installation.
Related
Last updated 15 September 2026
