Create a VMware Cloud on AWS cloud account in VMware Aria Automation in the workflow

You can create a VMware Cloud on AWS cloud account in VMware Aria Automation based on a source VMware Cloud on AWS SDDC.

For general information about VMware Cloud on AWS, see VMware Cloud on AWS documentation.

Prerequisites

Use this procedure only if your VMware Cloud on AWS SDDC resides outside a US region. If your VMware Cloud on AWS SDDC resides within a US region, instead see Create a VMware Cloud on AWS cloud account in VMware Aria Automation for an SDDC within a US region.

Note: If you are creating a VMware Cloud on AWS cloud account in a VMware Aria Automation on AWS GovCloud (US) environment, see Getting Started with VMware Aria Automation on AWS GovCloud (US). Documentation about related products is available at the VMware vRealize Cloud Universal on AWS GovCloud (US) product documentation landing page.

• Verify that you have the required administrator credentials, including VMware Cloud on AWS CloudAdmin credentials for the target SDDC in vCenter and that you have enabled HTTPS access on port 443. See Credentials required for working with cloud accounts in VMware Aria Automation.
• Verify that you have the cloud administrator user role. See What are the VMware Aria Automation user roles.
• To facilitate the needed connection between your existing VMware Cloud on AWS host SDDC in vCenter and a VMware Cloud on AWS cloud account in VMware Aria Automation, you must provide a network connection, and firewall rules, by using a VPN or similar networking means. See Prepare your VMware Cloud on AWS SDDC to connect with VMware Cloud on AWS cloud accounts in VMware Aria Automation.
• Create and deploy a cloud proxy. See Configure and use a cloud proxy for a VMware Cloud on AWS cloud account in VMware Aria Automation.
• To support the cloud proxy, define a management rule on the VMware Cloud on AWS console to allow inbound access of the cloud proxy URLs. See Prepare your VMware Cloud on AWS SDDC to connect with VMware Cloud on AWS cloud accounts in VMware Aria Automation.
• Verify that the cloud proxy VM is powered on and that the cloud proxy service is connected and running. See Verify that a cloud proxy is running on a target virtual machine.

Procedure

1. Select Infrastructure > Connections > Cloud Accounts.
2. Click Add Cloud Account and select the VMware Cloud on AWS tile.
3. As prompted, enter a name and description for the cloud account.
4. For the API token setting, create a new token or use an existing token for your organization by using the linked API Tokens page as described below.

   Note: Copy, download, or print the token that is generated by this workflow. After you leave the API token page you cannot retrieve the generated token information.

   1. Click the i help icon at the end of the VMC API token line and click API Tokens page in the help text box to open the API Tokens tab on your organization's My Account page.
   2. Click Generate Token to display the Generate a New API Token options.
   3. Enter a new token name, for example myinitials_mytoken.
   4. Set the Token TTL to never expire.

      If you create a token that is set to expire, then the VMware Cloud on AWS operations from VMware Aria Automation will stop working when the token expires and continue to not work until you update the cloud account with a new token.

   5. In the Define Scopes section, select All Roles.
   6. Click Generate.
   7. In the generated token page, click Copy and click Continue.
   8. Return to the New Cloud Account page, paste the copied token into the VMC API token row, and click Apply API token.

      

   In the Define Scopes section, the minimum required roles for the API token are:

   • Organizational Roles
     • Organization Member
     • Organization Owner
   • Service Roles - VMware Cloud on AWS
     • Administrator
     • NSX Cloud Administrator
     • NSX Cloud Auditor

   Apply the generated or supplied token to connect to the available SDDC environment in your organization's VMware Cloud on AWS subscription and populate the list of SDDC names. If the VMware Aria Automation and VMware Cloud on AWS services are in different organizations, you should switch to the VMware Cloud on AWS organization and then generate the token. For more information about API tokens, see Generate API Tokens.

5. Click Apply API token to apply the API token and display the SDDC name option.
6. In the SDDC name drop-down menu, select an SDDC from the list of available SDDCs. The list of available SDDCs is derived from your VMware Cloud on AWS subscription.

   The selected SDDC name auto-populates the vCenter and NSX FQDN entries.

7. In the vCenter Server IP address/FQDN drop-down menu, enter the IP address or FQDN of the vCenter in the specified SDDC.

   The address auto-populates based on your SDDC selection. It defaults to the private IP address. Based on the type of network connectivity used to access your SDDC, the default address might be different than the IP address of the vCenter in the specified SDDC.

8. In the NSX Manager IP address/ FQDN drop-down menu, enter the IP address or FQDN of the NSX Manager in the specified SDDC.

   The address auto-populates based on your SDDC selection. It defaults to the private IP address. Based on the type of network connectivity used to access your SDDC, the default address might be different than the IP address of the NSX Manager Server in the specified SDDC. VMware Cloud on AWS cloud accounts support NSX.

   If you are creating a VMware Aria Automation on AWS GovCloud (US) cloud account in a VMware Aria Automation environment, do not use the default NSX Manager IP address/FQDN setting. Instead, you must specify the NSX Manager IP address that is identified in the VMware Aria Automation on AWS GovCloud (US) SDDC.

9. As prompted, enter your vCenter user name and password for the specified SDDC if it's different than the default.

   The specified user requires CloudAdmin credentials. The user does not require CloudGlobalAdmin credentials.

   The data centers that are available for provisioning in your specified VMware Cloud on AWS SDDC environment are listed. The list is read-only.

10. If prompted, enter the name of a new or existing cloud proxy. See Configure and use a cloud proxy for a VMware Cloud on AWS cloud account in VMware Aria Automation.

    If a cloud proxy was already deployed to the SDDC, the cloud proxy value auto-populates.

11. Click Validate.

    The Validate option confirms your access rights to the vCenter server and NSX Manager and checks that the specified vCenter is running.

    If you receive an Error updating endpoint <Name>: Endpoint already exists, a cloud account has already been associated to that SDDC.

12. In the Configuration section of the page, specify the SDDC data center that you wish to provision to and optionally create a new cloud zone for provisioning within that data center.
13. In the Capabilities section of the page, optionally specify capability tags for the cloud account.
    Use tags according to your organization's tag strategy. See How do I use tags to manage Automation Assembler resources and deployments and Creating a tagging strategy.
14. Click Add to create the cloud account.

Results

Resources such as machines and volumes are data-collected from the VMware Cloud on AWS SDDC data center and listed in the Resources section of the VMware Aria Automation Infrastructure tab.

What to do next

Create a cloud zone for VMware Cloud on AWS deployments in VMware Aria Automation.