After downloading and extracting the tag collector agent terraform template, you
must deploy it in your AWS environment. The tag collector
architecture folder has three
subdirectories—tc_iam_project,
tc_project, and tgw_project.
The terraform templates must be deployed in the order shown below.
cd architecture
tgw_project
tc_project
tc_iam_project
If you selected New when setting your tag collector
Deployment Parameters, Prisma AIRS deploys a new TGW.
After you've deployed the tgw_project Terraform template,
you must add the TGW ID in the tc_projects.
tc_projecttgw = {
asn = "64512"
attachments = {
tc_attachment = {
name = "tc_vpc_tgw_attachment"
route_table = "from_tc_vpc"
vpc_subnet = "tc_vpc-tc_vpc_tgw_attach_"
}
}
create = false
create_ram_resource_share = false
id = "<new-tgw-unique-identifier>"
name = "test-template-tgw"
owner = true
ram_resource_share_name = null
route_tables = {
from_tc_vpc = {
create = true
name = "airs_tc_vpc_tgw_attachment"
}
}
shared_principals = {}
}
For new and existing TGW deployments, after deploying all three Terraform
templates, you need to set up TGW attachments and route tables allowing the tag
collector to communicate the your private cluster.
Create a TGW attachment and route table your private cluster. Add routes to
the route table for the tag collector CIDR.
Create a TGW route table for the tag collector TGW attachment. Add routes
to the route table for the private cluster CIDR.
Configure the tag collector security group and subnets to allow traffic
from the private cluster management CIDR.
Configure the private cluster security group and subnets to allow traffic
from the tag collector management CIDR.
