Deployment Guide - Install Change Manager

1. Locate Change Manager

Open the AWS Console in your Master Account.

Search for "Change Manager" and select "Set up organization."

Note: If you have already set up your AWS Organization, you can skip to

Setup Change Manager

2. Quick Setup

On the "Quick Setup" page, click "Create" under Change Manager.

3. Assign Delegated Account:

From your accounts list, choose one to act as the central account for executing changes.

Note: The Master/Payer account cannot be used..

1. Locate Change Manager

Open the AWS Console in your Master Account.

Search for "Change Manager" and select "Set up organization."

Note: If you have already set up your AWS Organization, you can skip to

Setup Change Manager

2. Quick Setup

On the "Quick Setup" page, click "Create" under Change Manager.

3. Assign Delegated Account:

From your accounts list, choose one to act as the central account for executing changes.

Note: The Master/Payer account cannot be used.

4. Configure Permissions:

In the "Permissions to request and make changes" section, create a temporary permission set:

Use the following JSON Policy

JSON

{
 "Version": "2012-10-17",
 "Statement": [
   {
     "Effect": "Allow",
     "Action": "ssm:*",
     "Resource": "*"
   }
 ]
}

Now locate CloudShell on the bottom left of the screen.

When CloudShell opened run these commands

Before running the commands, ensure that you specify the correct region where you want to deploy.

aws iam create-service-linked-role --aws-service-name ssm.amazonaws.com --region <region>

aws iam create-service-linked-role --aws-service-name changemanagement.ssm.amazonaws.com

If a command returns an error, first verify the region settings in both your environment and the command. If the region is correct, the error can be ignored.

5. Finalize Setup

Leave remaining fields blank (add tags if needed) and click "Create.

Wait for deployment to complete.

6. Setup Change Manager

Navigate to Change Manager, and select “Settings”

In the settings page click “Edit”

In the edit page, make sure the Change Template review & approval permission is unchecked & save the settings.

7. Save Organization IDs

Go to AWS Organizations, copy your Organization ID and Root ID, and save them for deploying the CloudFormation Template (CFT).

‍