Deploy 1Password Connect Server on AWS ECS Fargate with CloudFormation
1Password Connect works with AWS Fargate . AWS Fargate lets you leverage Amazon Elastic Container Service (ECS) to run containers without the need to manage clusters.
Requirements
Before you can use 1Password CLI with your Connect server, you must:
- Sign up for 1Password.
- Create a 1Password Connect server in your infrastructure.
- Sign up with AWS Fargate .
Example
You can use 1Password's example CloudFormation template (connect.yaml) as a starting place for deploying Connect on AWS Fargate.
The example CloudFormation template creates the necessary networking resources, ECS resources, rules, groups, and policies. See Resources for more details.
The result is a publicly accessible hostname that routes requests to a 1Password Connect Server instance running in AWS Fargate.
You can also use this example CloudFormation file to deploy into an existing AWS virtual private cloud (VPC) or an existing Amazon Elastic Container (AWS ECS) cluster. You can modify it using a text editor or using Amazon's CloudFormation Designer tool.
Resources
The example CloudFormation template creates the following network resources:
- A virtual private cloud (VPC)
- Two public subnets
- An Internet gateway
- An Application Load Balancer (ALB)
The example CloudFormation template creates the following ECS resources:
- An ECS cluster
- Two task definitions
- A
1password/connect-apicontainer - A
1password/connect-synccontainer
- A
Get started
To use the example connect.yaml file to deploy a Connect server on AWS Fargate (using CloudFormation):
- Start the AWS Create Stack wizard.
- Select the example
connect.yamlfile as the stack template. See Selecting a stack template . - Provide a Base64 URL encoded version of your Connect server's
1password-credentials.jsonfile.
When importing this CloudFormation template, it prompts you to provide a Base64 URL encoded version of the 1password-credentials.json. You can generate this encoded value with the following shell command: