:_mod-docs-content-type: ASSEMBLY
include::_attributes/attributes-openshift-dedicated.adoc[]
ifdef::openshift-rosa[]
:context: rosa-sts-aws-prereqs
[id="rosa-sts-aws-prereqs"]
= Detailed requirements for deploying {product-title} using STS

endif::openshift-rosa[]
ifdef::openshift-rosa-hcp[]
:context: rosa-hcp-prereqs
[id="rosa-hcp-prereqs"]
= Detailed requirements for deploying {product-title}
endif::openshift-rosa-hcp[]

toc::[]

[role="_abstract"]
To deploy a {product-title} cluster with {sts-first}, configure your AWS account with the required quotas, IAM permissions, and firewall egress rules, including an Amazon S3 gateway endpoint. Complete the requirements before deploying your cluster. 

include::modules/rosa-sts-aws-requirements-account.adoc[leveloffset=+1]

include::modules/rosa-sts-aws-requirements-support-req.adoc[leveloffset=+1]

include::modules/rosa-sts-aws-requirements-security-req.adoc[leveloffset=+1]

include::modules/rosa-sts-aws-requirements-association-concept.adoc[leveloffset=+1]

include::modules/rosa-sts-aws-requirements-creating-association.adoc[leveloffset=+1]

include::modules/rosa-sts-aws-requirements-creating-multi-association.adoc[leveloffset=+1]

include::modules/rosa-requirements-deploying-in-opt-in-regions.adoc[leveloffset=+1]

include::modules/rosa-setting-the-aws-security-token-version.adoc[leveloffset=+1]

include::modules/rosa-aws-provisioned.adoc[leveloffset=+1]

include::modules/rosa-security-groups-custom.adoc[leveloffset=+1]

include::modules/mos-network-prereqs-min-bandwidth.adoc[leveloffset=+1]

include::modules/osd-aws-privatelink-firewall-prerequisites.adoc[leveloffset=+1]

include::modules/rosa-hcp-firewall-prerequisites.adoc[leveloffset=+1]

include::modules/rosa-hcp-vpc-subnet-tagging.adoc[leveloffset=+1]


//Adding conditions around these in case the Additional resources don't get ported to HCP or have different file names / locations; keeping all included for now
[role="_additional-resources"]
[id="additional-resources_aws-prerequisites_{context}"]
== Additional resources

* xref:../rosa_architecture/rosa-sts-about-iam-resources.adoc#rosa-sts-operator-roles_rosa-sts-about-iam-resources[Cluster-specific Operator IAM role reference]
* xref:../rosa_architecture/rosa-sts-about-iam-resources.adoc#rosa-sts-account-wide-roles-and-policies_rosa-sts-about-iam-resources[Account-wide IAM role and policy reference]
ifdef::openshift-rosa[]
* xref:../rosa_planning/rosa-sts-ocm-role.adoc#rosa-sts-ocm-role[{product-title} IAM role resources]
endif::openshift-rosa[]
ifdef::openshift-rosa-hcp[]
* xref:../rosa_planning/rosa-hcp-prepare-iam-roles-resources.adoc#rosa-hcp-prepare-iam-roles-resources[Required IAM roles and resources]
endif::openshift-rosa-hcp[]
* xref:../support/remote_health_monitoring/about-remote-health-monitoring.adoc#about-remote-health-monitoring[About remote health monitoring]
* xref:../rosa_architecture/rosa_policy_service_definition/rosa-policy-process-security.adoc#rosa-policy-sre-access_rosa-policy-process-security[SRE access to all {product-title} clusters]
* xref:../applications/deployments/rosa-config-custom-domains-applications.adoc#rosa-applications-config-custom-domains[Configuring custom domains for applications]
ifdef::openshift-rosa[]
* xref:../rosa_architecture/rosa_policy_service_definition/rosa-service-definition.adoc#rosa-sdpolicy-instance-types_rosa-service-definition[Instance types]
endif::openshift-rosa[]
ifdef::openshift-rosa-hcp[]
* xref:../rosa_architecture/rosa_policy_service_definition/rosa-hcp-service-definition.adoc#rosa-sdpolicy-instance-types_rosa-hcp-service-definition[Instance types]
endif::openshift-rosa-hcp[]
* xref:../rosa_architecture/rosa_policy_service_definition/rosa-sre-access.adoc#rosa-sre-access[SRE and service account access]
//Omitted until Applications has been ported for HCP
//* xref ../applications/deployments/rosa-config-custom-domains-applications.adoc#rosa-applications-config-custom-domains[Configuring custom domains for applications]
* xref:../rosa_planning/rosa-sts-required-aws-service-quotas.adoc#rosa-required-aws-service-quotas_rosa-sts-required-aws-service-quotas[Review the required AWS service quotas]