=== Confirm your AWS account configuration

. Sign in to your AWS account at https://aws.amazon.com with an IAM user role that has the necessary permissions. For details, see link:#_planning_the_deployment[Planning the deployment] earlier in this guide.
. Make sure that your AWS account is configured correctly, as discussed in the link:#_technical_requirements[Technical requirements] section.

// Optional based on Marketplace listing. Not to be edited
ifdef::marketplace_subscription[]
=== Subscribe to the {partner-product-short-name}

This Quick Start requires a subscription to the SaaS offering for {partner-product-short-name} in AWS Marketplace.

. Sign in to your AWS account.
. Open the page for the {partner-product-short-name} SaaS offering in https://aws.amazon.com/marketplace/pp/prodview-g232pyu6l55l4[AWS Marketplace^], and then choose *Continue to Subscribe*.
. Choose the contract duration, provide the renewal settings, select the contract options to be activated with your contract, and choose *Create contract*.
+
image::../images/software_contract.png[Software Contract]

. You are prompted to confirm the contract. If you agree to the pricing, choose *Pay Now*. You are redirected to the {partner-product-short-name} portal.
. In the {partner-product-short-name} portal, continue to create your account. Choose the Region in which to host your data. Most organizations choose the Region closest to the majority of their workloads. Some other organizations may have compliance requirements that affect their Region choice.
. After your account is created, log in. On the {partner-product-short-name} home page, choose the *Conformity* tile. Skip the wizard that prompts you to add your first AWS account; the AWS Control Tower integration adds the account for you.
+
image::../images/conformity_tile.png[{partner-product-short-name} tile]

NOTE: The process of adding current and future AWS Control Tower accounts to the {partner-product-short-name} console is automated. 

[start=7]
. In the {partner-product-short-name} console, choose the arrow next to your name in the top-right corner. Then choose *User settings > API Keys"* from the left navigation and create a new API key. Be sure to save this string, as it cannot be retrieved later. This key is used to authenticate the automation from the AWS Control Tower management account to the {partner-product-short-name} API. For more information about generating an API key, see the https://cloudconformity.atlassian.net/wiki/spaces/HELP/pages/77463659/Public+API+-+API+Keys[{partner-product-short-name} documentation^].

endif::marketplace_subscription[]
// \Not to be edited

=== Launch the Quick Start

The deployment takes about {deployment_time} to complete.

. Sign in to your AWS Control Tower management account as an administrator, and choose the following options to launch the AWS CloudFormation template.
+
[cols="1,1"]
|===
^|https://fwd.aws/G5pGn?[Deploy {partner-product-short-name} on AWS^]
^|https://fwd.aws/RAjp8?[View template^]
|===
. Check the AWS Region that’s displayed in the upper-right corner of the navigation bar, and change it if necessary. Be sure that the selected Region is where AWS Control Tower is deployed. 
. On the *Create stack* page, keep the default setting for the template URL, and then choose *Next*.
. On the *Specify stack details* page, change the stack name if needed. Review the parameters for the template. Provide values for the parameters that require input. For all other parameters, review the default settings and customize them as necessary. For details on each parameter, see the link:#_parameter_reference[Parameter reference] section of this guide. When you finish reviewing and customizing the parameters, choose *Next*.
. Provide the two required parameters. The first parameter is the API key that is generated in the *Subscribe to the Cloud One Conformity AMI* section, and the second parameter is the Region you selected when creating your {partner-product-short-name} account.