2.2.1. Preparing to Deploy with AWS MarketPlace

An Amazon Web Services (AWS) account and knowledge of its operation are required to use mijin Catapult(v.2), which is available on AWS Marketplace.

This chapter will help you understand what you will need to prepare in advance of deployment.

creation-day:

Aug. 1, 2022

update date:

March. 22, 2023

2.2.1.1. Prepare AWS account

Amazon Web Services (AWS) will be the platform for creating infrastructure technologies such as computing, storage, and databases in the cloud.

To perform the operation, you will need to create an AWS account, so please refer to the following site and create an AWS account.

https://aws.amazon.com/jp/register-flow/

Warning

mijin Catapult(v.2), it is recommended to create and deploy an administrative IAM account instead of the root user.

To create an administrative IAM user, see below.

https://docs.aws.amazon.com/ja_jp/IAM/latest/UserGuide/getting-started_create-admin-group.html

If you want to know more about root users, please refer to the following

https://docs.aws.amazon.com/ja_jp/IAM/latest/UserGuide/id_root-user.html

2.2.1.2. Knowledge of AWS

The main AWS services used by mijin are

The following will be automatically created when deploying mijin Catapult(v.2) provided by Marketplace.

• Amazon VPC

  Create a virtual network. mijin Catapult(v.2) will be placed in a network on this VPC.

  For more information, check the following documents

  https://docs.aws.amazon.com/ja_jp/vpc/latest/userguide/what-is-amazon-vpc.html

• Amazon EC2

  Create a computing machine. mijin Catapult(v.2) nodes (servers) are created.

  For more information, check the following documents

  https://docs.aws.amazon.com/ja_jp/AWSEC2/latest/UserGuide/concepts.html

• Amazon EBS

  Create storage on the computing machine.

  mijin Catapult(v.2) places blockchain and mongo data on EBS.

  For more information, check the following documents

  https://docs.aws.amazon.com/ja_jp/AWSEC2/latest/UserGuide/AmazonEBS.html

• Elastic Load Balancing

  Create a load balancer to relay to the computing machine.

  mijin Catapult(v.2) ensures redundancy by routing access to API nodes through a load balancer.

  For more information, check the following documents

  https://docs.aws.amazon.com/ja_jp/elasticloadbalancing/latest/userguide/what-is-load-balancing.html

• Amazon Route 53

  Create a DNS service to be used for name resolution of computing machines.

  mijin Catapult(v.2) connects each node by name resolution using DNS.

  For more information, check the following documents

  https://docs.aws.amazon.com/ja_jp/Route53/latest/DeveloperGuide/Welcome.html

• AWS IAM

  Specify users and groups that have access to AWS services and resources, such as between AWS services, and

  Centralized management of fine-grained access permissions.

  mijin Catapult(v.2) When deploying, the AWS account must have IAM privileges. (Explained in Account authorization to deploy to AWS)

  
  

  mijin Catapult(v.2) to resources created after deployment.

  ・Authority from EC2 instance to Secrets Manager

  ・SSM login privileges from EC2 instances

  to the profile of the EC2 instance that is the API,PEER node.

  
  

  For EC2 IAM roles, see below.

  https://docs.aws.amazon.com/ja_jp/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html

  
  

  For more information on SSM login, please see below.

  https://docs.aws.amazon.com/ja_jp/systems-manager/latest/userguide/session-manager-getting-started-instance-profile.html

• AWS Systems Manager Parameter Store

  Use as secure tiered storage for configuration data management and confidentiality control.

  mijin Catapult(v.2) stores configuration information and common settings for each node.

  By storing them in the parameter store, they can be restored in the event of a failure.

  For more information on the parameter store, see

  https://docs.aws.amazon.com/ja_jp/systems-manager/latest/userguide/systems-manager-parameter-store.html

• AWS CloudFormation

  Provides orchestration to automatically build AWS services.

  AWS Marketplace uses AWS CloudFormation to build mijin Catapult(v.2) on AWS.

  For more information, check the following documents

  https://docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/Welcome.html

2.2.1.3. Account authorization to deploy to AWS

To deploy mijin Catapult(v.2) on AWS, you need to grant privileges to the account you prepared with Prepare AWS account.

Permissions to create Knowledge of AWS AWS resources and to subscribe to use the mijin Catapult(v.2) images deployed in Marketplace are required.

An IAM policy focused only on AWS Marketplace and Deploy permissions is as follows

Refer to the following to create an IAM policy and grant it to the IAM account to be used for deployment.

https://docs.aws.amazon.com/ja_jp/apigateway/latest/developerguide/api-gateway-create-and-attach-iam-policy.html

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": "iam:PassRole",
            "Resource": "*",
            "Condition": {
                "StringEquals": {
                    "iam:PassedToService": [
                        "lambda.amazonaws.com",
                        "ec2.amazonaws.com"
                    ]
                }
            }
        },
        {
            "Sid": "VisualEditor1",
            "Effect": "Allow",
            "Action": [
                "iam:*RolePolicy",
                "route53:*HostedZone",
                "iam:List*",
                "aws-marketplace:*",
                "elasticloadbalancing:RegisterTargets",
                "ec2:*RouteTable*",
                "iam:CreateRole",
                "elasticloadbalancing:DeleteLoadBalancer",
                "ec2:DescribeInternetGateways",
                "elasticloadbalancing:DescribeLoadBalancers",
                "ec2:*KeyPairs",
                "lambda:GetFunction*",
                "ec2:DescribeAccountAttributes",
                "elasticloadbalancing:ModifyTargetGroupAttributes",
                "cloudformation:ListStackResources",
                "iam:GetRole",
                "elasticloadbalancing:DescribeTarget*",
                "elasticloadbalancing:CreateTargetGroup",
                "route53:ChangeResourceRecordSets",
                "iam:DeleteRole",
                "cloudformation:GetTemplate*",
                "ec2:RunInstances",
                "elasticloadbalancing:*Listener",
                "ec2:*Addresses",
                "cloudformation:GetStackPolicy",
                "cloudformation:DeleteStack",
                "ec2:DeleteVpc",
                "iam:GetAccountSummary",
                "ec2:*Tags",
                "route53:GetChange",
                "iam:*InstanceProfile*",
                "ec2:*InternetGateway",
                "ec2:CreateVpc",
                "sns:ListTopics",
                "route53:ListQueryLoggingConfigs",
                "cloudformation:*ChangeSet*",
                "cloudformation:EstimateTemplateCost",
                "elasticloadbalancing:DescribeListeners",
                "ec2:DescribeAvailabilityZones",
                "ec2:ModifyVpcAttribute",
                "ec2:*Route",
                "ec2:ReleaseAddress",
                "cloudformation:ListStacks",
                "elasticloadbalancing:CreateLoadBalancer",
                "ec2:TerminateInstances",
                "elasticloadbalancing:DeleteTargetGroup",
                "ec2:AllocateAddress",
                "cloudformation:DescribeStack*",
                "lambda:AddPermission",
                "cloudformation:CreateStack",
                "ec2:DescribeVpcs",
                "lambda:*Function",
                "ec2:*NatGateway*",
                "lambda:RemovePermission",
                "ec2:*SecurityGroup*",
                "ec2:*Subnet*",
                "ec2:DescribeInstances"
            ],
            "Resource": "*"
        }
    ]
}

2.2.1.4. mijin Catapult(v.2) license in AWS

AWS Marketplace licenses for the mijin Catapult(v.2) product version are made available by agreeing to the EULA for mijin Catapult(v.2) in Marketplace.

For the EULA, please refer to the following

https://d7umqicpi7263.cloudfront.net/eula/product/d6b2653b-ee61-4a62-8fef-a9fa7930892e/c255cb3f-6c72-412a-a899-42fa3f83fd71.pdf

The license fee for the AWS Marketplace version of mijin Catapult(v.2) will be added to your AWS usage fee and charged on a pay-as-you-go per-hour basis.

It does not matter what the specifications or number of CPU cores are, it is per node.

item	Value
mijin license fee	$0.40 per hour

Note

AWS MarketPlace Trial Version is not subject to the mijin Catapult(v.2) license fee.

AWS MarketPlace Enterprise x86_64 Version has a minimum of 5 node activations, so the approximate license cost per month is calculated as follows

Hourly

$0.4/1h * 5(units) = $2.0/1h

by the day

$2.0/1h * 24(h) = $48.0/1d

In units of 1 month (30 days)

$48/1d * 30(h) = $1,440.0/1m

2.2.1.5. AWS Usage Fees

In addition to the mijin license fee, AWS resource usage fees are

・Amazon EC2

・Amazon EBS

・Elastic Load Balancing

・Amazon Route53

・Amazon VPC(Nat Gateway)

・parameter store

The cost of the pay-as-you-go service will be charged on a pay-as-you-go basis.

The fee also varies depending on the amount of data transferred and other factors.

For information on AWS usage fees, please refer to the following

https://aws.amazon.com/jp/pricing/

Note

The configuration of mijin Catapult(v.2) offered on AWS Marketplace changes depending on the parameters you specify, and the cost will vary.

Note that the following will vary, depending primarily on the parameter specification.

・instance type

・Number of nodes (instances)

・Whether Elastic Load Balancing is required or not

・Whether VPC is created or not

・Block size and IOPS of EBS

2.2.1.5.1. AWS Marketplace Product Description

The products currently offered by Tech Bureau are as follows

Each product has its own product page on AWS Marketplace.

• Trial Version (AWS MarketPlace Trial Version)

• Product version (AWS MarketPlace Enterprise x86_64 Version)

• Product version (AWS MarketPlace Enterprise arm64 Version)

The mijin Catapult(v.2) offered in the AWS Marketplace does not require any complex operations to build.

Depending on the parameters chosen at deployment time, it automatically builds an environment that includes a network and builds a secure and robust blockchain network from an image that includes mijin.

The contents of the environment to be created are explained on each deployment method page.

2.2.1.6. Trial Version

The trial version is available free of charge as a simple to start mijin Catapult(v.2).

There is no redundancy and it will be a single operation mijin Catapult(v.2).

Compared to the commercial version, it is a single-AZ arrangement with no customizability, but it is suitable for a trial or development environment.

item	Description
Marketplace Product Page	AWS MarketPlace Trial Version
How to Deploy Build a new VPC with mijin Catapult(v.2).	Deploying a trial version of mijin
Deployment time	About 15 minutes
Support	Basically none For AWS issues, please contact us at AWS Support Case. https://aws.amazon.com/jp/premiumsupport/
available region	Available in 21 regions worldwide * ap-northeast-1 * us-west-1 * us-west-2 * us-east-1 * us-east-2 * eu-north-1 * eu-west-1 * eu-west-2 * eu-west-3 * eu-north-1 * eu-south-1 * af-south-1 * ap-south-1 * ap-east-1 * ap-northeast-2 * ap-northeast-3 * ap-southeast-1 * ap-southeast-2 * sa-east-1 * ca-central-1 * eu-central-1 * me-south-1
Number of nodes	1 unit (DUAL mode)
placement availability zone	1(Single AZ)
load balancer	None

2.2.1.7. Production version

The full version is customizable for enterprise production, with fault-tolerant and high-availability configurations as standard, and secure API access can be easily configured.

In addition, you can set up a new or existing environment with mijin Catapult(v.2) and apply it to various environments, such as load balancing using load balancers.

item	Description
Marketplace Product Page	Product version (AWS MarketPlace Enterprise x86_64 Version) Product version (AWS MarketPlace Enterprise x86_64 Version)
How to Deploy If you already have an existing service and want to manage it in the same VPC If you already have an existing service and want to manage mijin Catapult(v.2) within the same VPC, please click here.	Deploy mijin on an existing VPC
How to Deploy mijin Catapult(v.2) Technical Inquiries If you are new to AWS, see here	Create a new VPC and deploy mijin
Deployment time	About 15 minutes
Support	For assistance with deployment, please contact https://mijin.io/aws_contact/ Please contact us from the above link for technical inquiries regarding mijin Catapult(v.2), as it is a paid support (ticket) service. For AWS issues, please contact us at AWS Support Case. https://aws.amazon.com/jp/premiumsupport/
available region	Available in 21 regions worldwide * ap-northeast-1 * us-west-1 * us-west-2 * us-east-1 * us-east-2 * eu-north-1 * eu-west-1 * eu-west-2 * eu-west-3 * eu-north-1 * eu-south-1 * af-south-1 * ap-south-1 * ap-east-1 * ap-northeast-2 * ap-northeast-3 * ap-southeast-1 * ap-southeast-2 * sa-east-1 * ca-central-1 * eu-central-1 * me-south-1
Number of nodes	5 - 9 units (2 API nodes x2 PEER nodes x3 to x7)
placement availability zone	2(Multi AZ) ※ Single AZ cannot be set.
load balancer	Can be set as necessary or not

2.2.1.8. About Paid Support

Support for deploying mijin Catapult(v.2) will be provided free of charge, but if you need technical inquiries about mijin Catapult(v.2), you can purchase paid support (ticket-based) from Tech Bureau to assist you.

Please contact us below to inquire about purchasing support.

https://mijin.io/aws_contact/

Support Contents

mijin Catapult(v.2) Technical Inquiries Node failure support (during business hours) Version upgrade notification and procedure release Infrastructure support in an AWS environment. etc

2.2.1.9. Limitations due to AWS service quotas

AWS Marketplace mijin Catapult(v.2) uses the following AWS services, so if you use an AWS account that already has an environment built, there is a possibility of startup failure due to service quotas.

For service quotas, see the explanation below.

https://docs.aws.amazon.com/ja_jp/general/latest/gr/aws_service_limits.html

Below is a description of the number of services created by mijin Catapult(v.2).

AWS Services	Content related to restrictions
Amazon VPC	VPC 1 Subnet 4 (1 for trial) Internet Gateway 1 NAT Gateweay 2 (0 for trial) Root Table 1 Security Group 5 https://docs.aws.amazon.com/ja_jp/vpc/latest/userguide/amazon-vpc-limits.html
Amazon EC2	EC2 Instance EC2 Instance 5~9 (1 for trial) Note that the service quota will vary depending on the instance type selected. https://docs.aws.amazon.com/ja_jp/general/latest/gr/ec2-service.html https://docs.aws.amazon.com/ja_jp/AWSEC2/latest/UserGuide/ec2-on-demand-instances.html#ec2-on-demand-instances-limits EBS 630GB~ https://docs.aws.amazon.com/ja_jp/general/latest/gr/ebs-service.html
Elastic Load Balancing	Network LoadBalancer 1 (only if enabled) https://docs.aws.amazon.com/ja_jp/elasticloadbalancing/latest/network/load-balancer-limits.html
Amazon Route53	Internal Zone 1 https://docs.aws.amazon.com/ja_jp/Route53/latest/DeveloperGuide/DNSLimitations.html
AWS IAM	IAM role 2 (1 for trial) IAM Policy 2 (1 for trial) https://docs.aws.amazon.com/ja_jp/IAM/latest/UserGuide/reference_iam-quotas.html
AWS Systems Manager Parameter Store	Number of parameters 48~ (15 for trial) https://docs.aws.amazon.com/ja_jp/general/latest/gr/ssm.html