=== Confirm your AWS account configuration . Sign in to your AWS account at https://aws.amazon.com with an IAM user role that has the necessary permissions. For more information, see link:#_planning_the_deployment[Planning the deployment], earlier in this guide. . Ensure that your AWS account is configured correctly, as discussed in the link:#_technical_requirements[Technical requirements] section. // Optional based on Marketplace listing. Not to be edited ifdef::marketplace_subscription[] === Subscribe to the {partner-product-short-name} AMI This Quick Start requires a subscription to the AMI for {partner-product-short-name} in AWS Marketplace. . Sign in to your AWS account. . Open the page for the {marketplace_listing_url}[{partner-product-short-name} AMI in AWS Marketplace^], and then choose *Continue to Subscribe*. . Review the terms and conditions for software usage, and then choose *Accept Terms*. A confirmation page loads, and an email confirmation is sent to the account owner. . When the subscription process completes, exit AWS Marketplace without further action. Do not provision the software from AWS Marketplace—the Quick Start deploys the AMI for you. endif::marketplace_subscription[] // \Not to be edited === Launch the Quick Start // Adapt the following warning to your Quick Start. WARNING: If you deploy {partner-product-short-name} into an existing VPC, ensure that your VPC has two private subnets in different Availability Zones for the workload instances and that the subnets are not shared. This Quick Start does not support https://docs.aws.amazon.com/vpc/latest/userguide/vpc-sharing.html[shared subnets^]. The subnets require https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html[NAT gateways^] in their route tables to allow instances to download packages and software without exposing the instances to the internet. Also ensure that the domain name in the DHCP options is configured, as explained in http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_DHCP_Options.html[DHCP options sets^]. Provide your VPC settings when you launch the Quick Start. Each deployment takes about {deployment_time} to complete. . Sign in to your AWS account, and choose one of the following options to launch the AWS CloudFormation template. For help with choosing an option, see link:#_deployment_options[Deployment options], earlier in this guide. + [cols="3,1"] |=== ^|https://fwd.aws/n4MQ9?[Deploy {partner-product-short-name} into new VPCs on AWS^] ^|https://github.com/aws-quickstart/quickstart-hitrust-csf[View templates^] |=== + . Check the AWS Region that's displayed in the upper-right corner of the navigation bar, and change it if necessary. This Region is where you build the infrastructure. The template launches in the {default_deployment_region} Region by default. For more information, see link:#_supported_aws_regions[Supported AWS Regions], earlier in this guide. . On the *Create stack* page, keep the default setting for the template URL, then choose *Next*. . On the *Specify stack details* page, change the stack name if needed. Review the parameters for the template. Provide values for any parameters that require input. For all other parameters, review the default settings, and customize them as necessary. When you finish reviewing and customizing the parameters, choose *Next*.