Update AWS Account Automatically

When your AWS account failed to be added to FortiCNP, you can update the AWS account on FortiCNP to re-add the account. It also gives you a chance to add or delete the optional permissions to the existing account. For more details, see AWS Permission and Resource Requirements

Update AWS Account - Part 1

1. From the FortiCNP navigation pane, go to ADMIN > Cloud Accounts, click the account Action button and select Update Account.
2. In Update AWS Account selection, select Update this Account Automatically and click Update AWS Account.



3. Edit the account name, and select or unselect the optional permissions to be granted to FortiCNP.



4. In CloudTrail section, select "Yes" to allow FortiCNP to create a CloudTrail for the account, or "No" if you already created one.
5. Click Next to continue to the next page.
6. Click Go to AWS CloudFormation Guide to be re-directed to AWS CloudFormation guide to clean up the previous configurations.



7. A new page will pop up with AWS CloudFormation Guide, click Next at the bottom of each page until the last page, and click Create Stack.



8. Refresh the stack status page and until the FortiCNPClean stack status shows "CREATE_COMPLETE".



9. Go back to FortiCNP add account page, and click Next to continue.

Update AWS Account - Part 2

After part 1 is completed, a status update will show that the cleanup stack have removed the old CloudFormation, roles, and policies.

1. Click Next Steps to continue with the rest of the configuration.
2. Click Go to AWS CloudFormation Guide again to create new stack for the AWS account.



3. A new page will pop up with AWS CloudFormation Guide, click Next at the bottom of each page until the last page, and click Create Stack.



4. Refresh the stack status page until the FortiCNP stack status shows "CREATE_COMPLETE".



5. Go back to FortiCNP update account page, and click Update AWS Account to complete.