2.2.1. Preparing to Deploy with AWS MarketPlace

An Amazon Web Services (AWS) account and knowledge of its operation are required to use mijin Catapult(v.2), which is available on AWS Marketplace.
This chapter will help you understand what you will need to prepare in advance of deployment.
creation-day:

Aug. 1, 2022

update date:

March. 22, 2023

2.2.1.1. Prepare AWS account

Amazon Web Services (AWS) will be the platform for creating infrastructure technologies such as computing, storage, and databases in the cloud.
To perform the operation, you will need to create an AWS account, so please refer to the following site and create an AWS account.

https://aws.amazon.com/jp/register-flow/

Warning

mijin Catapult(v.2), it is recommended to create and deploy an administrative IAM account instead of the root user.
To create an administrative IAM user, see below.
https://docs.aws.amazon.com/ja_jp/IAM/latest/UserGuide/getting-started_create-admin-group.html
If you want to know more about root users, please refer to the following
https://docs.aws.amazon.com/ja_jp/IAM/latest/UserGuide/id_root-user.html

2.2.1.2. Knowledge of AWS

The main AWS services used by mijin are
The following will be automatically created when deploying mijin Catapult(v.2) provided by Marketplace.

2.2.1.3. Account authorization to deploy to AWS

To deploy mijin Catapult(v.2) on AWS, you need to grant privileges to the account you prepared with Prepare AWS account.
Permissions to create Knowledge of AWS AWS resources and to subscribe to use the mijin Catapult(v.2) images deployed in Marketplace are required.

An IAM policy focused only on AWS Marketplace and Deploy permissions is as follows
Refer to the following to create an IAM policy and grant it to the IAM account to be used for deployment.
https://docs.aws.amazon.com/ja_jp/apigateway/latest/developerguide/api-gateway-create-and-attach-iam-policy.html
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": "iam:PassRole",
            "Resource": "*",
            "Condition": {
                "StringEquals": {
                    "iam:PassedToService": [
                        "lambda.amazonaws.com",
                        "ec2.amazonaws.com"
                    ]
                }
            }
        },
        {
            "Sid": "VisualEditor1",
            "Effect": "Allow",
            "Action": [
                "iam:*RolePolicy",
                "route53:*HostedZone",
                "iam:List*",
                "aws-marketplace:*",
                "elasticloadbalancing:RegisterTargets",
                "ec2:*RouteTable*",
                "iam:CreateRole",
                "elasticloadbalancing:DeleteLoadBalancer",
                "ec2:DescribeInternetGateways",
                "elasticloadbalancing:DescribeLoadBalancers",
                "ec2:*KeyPairs",
                "lambda:GetFunction*",
                "ec2:DescribeAccountAttributes",
                "elasticloadbalancing:ModifyTargetGroupAttributes",
                "cloudformation:ListStackResources",
                "iam:GetRole",
                "elasticloadbalancing:DescribeTarget*",
                "elasticloadbalancing:CreateTargetGroup",
                "route53:ChangeResourceRecordSets",
                "iam:DeleteRole",
                "cloudformation:GetTemplate*",
                "ec2:RunInstances",
                "elasticloadbalancing:*Listener",
                "ec2:*Addresses",
                "cloudformation:GetStackPolicy",
                "cloudformation:DeleteStack",
                "ec2:DeleteVpc",
                "iam:GetAccountSummary",
                "ec2:*Tags",
                "route53:GetChange",
                "iam:*InstanceProfile*",
                "ec2:*InternetGateway",
                "ec2:CreateVpc",
                "sns:ListTopics",
                "route53:ListQueryLoggingConfigs",
                "cloudformation:*ChangeSet*",
                "cloudformation:EstimateTemplateCost",
                "elasticloadbalancing:DescribeListeners",
                "ec2:DescribeAvailabilityZones",
                "ec2:ModifyVpcAttribute",
                "ec2:*Route",
                "ec2:ReleaseAddress",
                "cloudformation:ListStacks",
                "elasticloadbalancing:CreateLoadBalancer",
                "ec2:TerminateInstances",
                "elasticloadbalancing:DeleteTargetGroup",
                "ec2:AllocateAddress",
                "cloudformation:DescribeStack*",
                "lambda:AddPermission",
                "cloudformation:CreateStack",
                "ec2:DescribeVpcs",
                "lambda:*Function",
                "ec2:*NatGateway*",
                "lambda:RemovePermission",
                "ec2:*SecurityGroup*",
                "ec2:*Subnet*",
                "ec2:DescribeInstances"
            ],
            "Resource": "*"
        }
    ]
}

2.2.1.4. mijin Catapult(v.2) license in AWS

AWS Marketplace licenses for the mijin Catapult(v.2) product version are made available by agreeing to the EULA for mijin Catapult(v.2) in Marketplace.
For the EULA, please refer to the following
https://d7umqicpi7263.cloudfront.net/eula/product/d6b2653b-ee61-4a62-8fef-a9fa7930892e/c255cb3f-6c72-412a-a899-42fa3f83fd71.pdf

The license fee for the AWS Marketplace version of mijin Catapult(v.2) will be added to your AWS usage fee and charged on a pay-as-you-go per-hour basis.
It does not matter what the specifications or number of CPU cores are, it is per node.

item

Value

mijin license fee

$0.40 per hour

Note

AWS MarketPlace Trial Version is not subject to the mijin Catapult(v.2) license fee.
AWS MarketPlace Enterprise x86_64 Version has a minimum of 5 node activations, so the approximate license cost per month is calculated as follows

Hourly
$0.4/1h * 5(units) = $2.0/1h
by the day
$2.0/1h * 24(h) = $48.0/1d
In units of 1 month (30 days)
$48/1d * 30(h) = $1,440.0/1m

2.2.1.5. AWS Usage Fees

In addition to the mijin license fee, AWS resource usage fees are

・Amazon EC2
・Amazon EBS
・Elastic Load Balancing
・Amazon Route53
・Amazon VPC(Nat Gateway)
・parameter store

The cost of the pay-as-you-go service will be charged on a pay-as-you-go basis.
The fee also varies depending on the amount of data transferred and other factors.
For information on AWS usage fees, please refer to the following

https://aws.amazon.com/jp/pricing/

Note

The configuration of mijin Catapult(v.2) offered on AWS Marketplace changes depending on the parameters you specify, and the cost will vary.
Note that the following will vary, depending primarily on the parameter specification.
・instance type
・Number of nodes (instances)
・Whether Elastic Load Balancing is required or not
・Whether VPC is created or not
・Block size and IOPS of EBS

2.2.1.5.1. AWS Marketplace Product Description

The products currently offered by Tech Bureau are as follows
Each product has its own product page on AWS Marketplace.
The mijin Catapult(v.2) offered in the AWS Marketplace does not require any complex operations to build.
Depending on the parameters chosen at deployment time, it automatically builds an environment that includes a network and builds a secure and robust blockchain network from an image that includes mijin.

The contents of the environment to be created are explained on each deployment method page.

2.2.1.6. Trial Version

The trial version is available free of charge as a simple to start mijin Catapult(v.2).
There is no redundancy and it will be a single operation mijin Catapult(v.2).
Compared to the commercial version, it is a single-AZ arrangement with no customizability, but it is suitable for a trial or development environment.
../../_images/mijin_trial_network.png
Free Trial Environment Overview

item

Description

Marketplace Product Page

AWS MarketPlace Trial Version

デプロイ方法
Build a new VPC with mijin Catapult(v.2).
Deploying a trial version of mijin を参照

Deployment time

約15分

Support
基本サポートなし

AWSに関する問題は以下で問い合わせ：
https://aws.amazon.com/jp/premiumsupport/

available region
Available in 21 regions worldwide
ap-northeast-1, us-west-1, us-west-2, us-east-1,
us-east-2, eu-north-1, eu-west-1, eu-west-2,
eu-west-3, eu-south-1, af-south-1, ap-south-1,
ap-east-1, ap-northeast-2, ap-northeast-3,
ap-southeast-1, ap-southeast-2, sa-east-1,
ca-central-1, eu-central-1, me-south-1

Number of nodes

1台（DUALモード）

placement availability zone

シングルAZ（1つ）

load balancer

None

2.2.1.7. Production version

The full version is customizable for enterprise production, with fault-tolerant and high-availability configurations as standard, and secure API access can be easily configured.
In addition, you can set up a new or existing environment with mijin Catapult(v.2) and apply it to various environments, such as load balancing using load balancers.
../../_images/mijin_product_network.png
AWSデプロイ情報

item

Description

Marketplace Product Page
x86_64版： AWS MarketPlace Enterprise x86_64 Version
arm64版： AWS MarketPlace Enterprise arm64 Version

既存環境へのデプロイ方法
すでに既存サービスがあり、
同じVPC内で mijin Catapult(v.2) を管理したい場合は
Deploy mijin on an existing VPC を参照

新規環境へのデプロイ方法
mijin Catapult(v.2) Technical Inquiries
初めてAWSを使う場合は
Create a new VPC and deploy mijin を参照

Deployment time

約30分

Support
デプロイ関連のお問い合わせは
https://mijin.io/aws_contact/

※ mijin Catapult(v.2) に関する技術的な質問は
Paid support (ticket)

For AWS-related information, go to AWS Support Case:
https://aws.amazon.com/jp/premiumsupport/

available region
Available in 21 regions worldwide
ap-northeast-1, us-west-1, us-west-2, us-east-1,
us-east-2, eu-north-1, eu-west-1, eu-west-2,
eu-west-3, eu-south-1, af-south-1, ap-south-1,
ap-east-1, ap-northeast-2, ap-northeast-3,
ap-southeast-1, ap-southeast-2, sa-east-1,
ca-central-1, eu-central-1, me-south-1

Number of nodes

2 API nodes, 3 to 7 PEER nodes (5 to 9 total)

配置AZ（アベイラビリティゾーン）
Multi AZ (2)
※ Single AZ cannot be set.

load balancer

必要に応じて設定可能

2.2.1.8. About Paid Support

Support for deploying mijin Catapult(v.2) will be provided free of charge, but if you need technical inquiries about mijin Catapult(v.2), you can purchase paid support (ticket-based) from Tech Bureau to assist you.
Please contact us below to inquire about purchasing support.

https://mijin.io/aws_contact/

Support Contents
mijin Catapult(v.2) Technical Inquiries
Node failure support (during business hours)
Version upgrade notification and procedure release
Infrastructure support in an AWS environment.

etc

2.2.1.9. Limitations due to AWS service quotas

AWS Marketplace mijin Catapult(v.2) uses the following AWS services, so if you use an AWS account that already has an environment built, there is a possibility of startup failure due to service quotas.
For service quotas, see the explanation below.

https://docs.aws.amazon.com/ja_jp/general/latest/gr/aws_service_limits.html
Below is a description of the number of services created by mijin Catapult(v.2).
AWS Services and Restrictions

AWS Services

Content related to restrictions

Amazon VPC
VPC: 1
サブネット: 4（トライアルは1）
インターネットゲートウェイ: 1
NAT Gateway: 2（トライアルは0）
ルートテーブル: 1
セキュリティグループ: 5

参考: https://docs.aws.amazon.com/ja_jp/vpc/latest/userguide/amazon-vpc-limits.html

Amazon EC2
EC2 インスタンス: 5〜9（トライアルは1）
インスタンスタイプによりクォータ変動あり

EC2制限: https://docs.aws.amazon.com/ja_jp/general/latest/gr/ec2-service.html
オンデマンド制限: https://docs.aws.amazon.com/ja_jp/AWSEC2/latest/UserGuide/ec2-on-demand-instances.html#ec2-on-demand-instances-limits

EBS: 630GB〜
https://docs.aws.amazon.com/ja_jp/general/latest/gr/ebs-service.html

Elastic Load Balancing
Network Load Balancer: 1（有効時）
https://docs.aws.amazon.com/ja_jp/elasticloadbalancing/latest/network/load-balancer-limits.html

Amazon Route53
Internalゾーン: 1
https://docs.aws.amazon.com/ja_jp/Route53/latest/DeveloperGuide/DNSLimitations.html

AWS IAM
IAMロール: 2（トライアルは1）
IAMポリシー: 2（トライアルは1）
https://docs.aws.amazon.com/ja_jp/IAM/latest/UserGuide/reference_iam-quotas.html

Systems Manager Parameter Store
パラメーター数: 48〜（トライアルは15）
https://docs.aws.amazon.com/ja_jp/general/latest/gr/ssm.html