You can configure network isolation for your VMware Cloud on AWS deployment needs by specifying and using an on-demand security group in a network profile.
You can specify an isolated network by using a security group or by using on-demand network settings. In this example, you configure network isolation by specifying an on-demand security group in the network profile. Later, you specify the network in a cloud template and use the cloud template in a VMware Cloud on AWS deployment.
Unless otherwise indicated, the step values that you enter in this procedure are for this example workflow only.
- Complete the Configure a basic VMware Cloud on AWS workflow in vRealize Automation Cloud workflow.
- Review Configure an isolated network in VMware Cloud on AWS workflow in vRealize Automation Cloud.
- This procedure assumes that you have the required administrator credentials, including VMware Cloud on AWS CloudAdmin credentials for the target SDDC in vCenter. See Credentials required for working with cloud accounts in vRealize Automation Cloud.
- This procedure assumes that you have the cloud administrator user role. See What are the vRealize Automation Cloud user roles.
- Open the network profile that you used in the basic VMware Cloud on AWS workflow, for example vmc-network1. See Configure network and storage profiles for VMware Cloud on AWS deployments in vRealize Automation Cloud .
- Select the existing network that you used in the basic VMware Cloud on AWS workflow, for example sddc-cgw-network-1. See Configure network and storage profiles for VMware Cloud on AWS deployments in vRealize Automation Cloud.
- Click the Network Policies tab.
- Select the Create an on-demand security group option.
- Click Save.
When you use this network profile, machines are deployed to the selected network and are isolated by a new security group policy. The new security policy allows private or outbound network access.