Set up a Kong Gateway Runtime with AWS
This feature is released as a tech preview (alpha-quality) and should not be deployed in a production environment.
Set up a AWS runtime instance through the Konnect Runtime Manager and configure your instance to accept configuration from Konnect. The Runtime Manager keeps track of all runtime instances associated with the Kong Konnect account.
Runtime Manager provides a pre-populated template for a runtime instance in AWS. This template creates the following resources in AWS:
- Amazon VPC along with internet gateway
- Secret
- Amazon EC2 instances (key pair, role, profile)
- Auto Scaling group
- Network Load Balancer
- Optional: CloudWatch log group
- Optional: Redis
Prerequisites
- An account with AWS that is already configured
- An account that can use IAM resources
Configure the AWS Gateway instance
-
Open the
Runtime Manager.
-
Select a runtime group.
-
Click New Runtime Instance.
-
Click AWS.
-
From AWS Region, select the region where you want to host the runtime instance.
-
Configure the fields on the page:
Field Description AWS Region The AWS region where the CloudFormation template should be created. Instance type for the gateway runtime instances A valid x86_64 EC2 instance type. You can edit this later in AWS. Create an ElastiCache Cluster This is used for rate limiting plugins. Selecting Yes creates an ElastiCache cluster. Enable Cloud Watch Logs collection Sets up CloudWatch logs for the Konnect access and error logs. Selecting Yes enables log collection. Existing VPC ID (Optional) Enter an existing VPC ID, or leave blank to generate a new VPC ID. Existing Subnet IDs (Optional) Enter an existing subnet ID, or leave blank to generate a new subnet ID. -
Click Deploy to AWS. This redirects you to the AWS Management Console where it pre-populates a CloudFormation template. If the cluster certificate and key are not populated in the AWS template, copy the values in Konnect.
Verify the AWS runtime instance configuration
-
In AWS CloudFormation on the Outputs tab, verify that the NetworkLoadBalancer DNS displays.
-
In Konnect, open the
Runtime Manager and select a runtime group. A new runtime instance should display with information about connection, when it was last seen, and the status.