# AWS deployment: prerequisites

> The skills, IAM permissions and DNS arrangements your cloud team needs before deploying and operating Personalisation Hub in your AWS account.

Reference · Platform Installation › AWS deployment reference · Last updated 15 September 2026

URL: https://personalisationhub.com/support-centre/platform-installation/aws-deployment-prerequisites/

This page lists the skills, AWS permissions and DNS arrangements needed to deploy and operate Personalisation Hub in your own AWS account.

## Skills and knowledge

The installation itself is guided step by step and needs no AWS expertise. Ongoing operation assumes the following baseline knowledge.

| Area | Knowledge assumed |
| --- | --- |
| IAM | Managing user roles and permissions |
| EC2 | Locating instances, viewing logs, basic restart actions |
| S3 | Accessing uploaded media and configuration |
| VPC and networking | Reading subnet, routing and gateway set-ups |
| CloudFormation | Reviewing stack outputs and troubleshooting stacks |
| AWS Marketplace | Subscribing to a product; finding its deployment documentation and release notes; monitoring usage, updates and support options |
| Domains and SSL | Configuring DNS for a custom domain; how SSL/TLS certificates and DNS propagation work |

## AWS account access and permissions

No AWS root user credentials are required. Deploy with an IAM user or role that can:

- Subscribe to AWS Marketplace products and start provisioning
- Deploy infrastructure with AWS CloudFormation
- Request service quota increases through AWS Support
- View billing and usage information (optional; used for cost monitoring)
- Create and manage the components in the following table

| Service | Required components |
| --- | --- |
| Identity and Access Management (IAM) | Roles, policies, instance profiles, OIDC provider |
| Elastic Kubernetes Service (EKS) | Cluster, node groups, add-ons (VPC CNI, CSI) |
| Elastic Compute Cloud (EC2) | Launch templates, Auto Scaling groups, Elastic IPs |
| Virtual Private Cloud (VPC) | VPC, subnets, route tables, NAT, internet gateway, NACLs, DHCP options |
| Amazon RDS | DB instances, subnet and parameter groups, security groups |
| Amazon ElastiCache | Redis cluster, subnet group, security group |
| Amazon MSK | Kafka cluster, security group |
| OpenSearch Service | Domains, security groups |
| S3 | Buckets, ACLs, CORS, ownership controls |
| Elastic Load Balancing (ELB) | Load balancers, target groups |
| AWS Certificate Manager (ACM) | Certificates |
| AWS Key Management Service (KMS) | Keys, aliases |
| Systems Manager (SSM) | SSM parameters (for example, the AMI) |

The [AWS documentation](https://docs.aws.amazon.com/) covers each of these services.

## DNS mapping

| Item | Value |
| --- | --- |
| Record target | The platform's load balancer or public endpoint |
| Recommended host | A subdomain of your primary domain, for example `ph.yourdomain.com` |
| Record type | CNAME (or A/ALIAS) |
| DNS provider | Any — your existing provider, Cloudflare or Route 53 |
| Purpose | Makes the platform reachable from the internet and allows the SSL/TLS certificate to be issued for HTTPS |
| Propagation | DNS changes can take time to propagate globally |

The records to add are emailed to the Master Admin when installation finishes — see [Step 3 — Set up DNS after installation](https://personalisationhub.com/support-centre/platform-installation/step-3-set-up-dns-after-installation/).

## Related

- [AWS deployment: architecture](https://personalisationhub.com/support-centre/platform-installation/aws-deployment-architecture/)
- [AWS deployment: resources provisioned](https://personalisationhub.com/support-centre/platform-installation/aws-deployment-resources-provisioned/)
- [AWS deployment: testing and troubleshooting](https://personalisationhub.com/support-centre/platform-installation/aws-deployment-testing-and-troubleshooting/)
- [AWS deployment: lifecycle management](https://personalisationhub.com/support-centre/platform-installation/aws-deployment-lifecycle-management/)
- [Install Personalisation Hub from AWS Marketplace](https://personalisationhub.com/support-centre/platform-installation/install-personalisation-hub-from-aws-marketplace/)