Altostra Docs

    ›Technical Reference

    Getting Started

    • Welcome to Altostra
    • Connect your accounts
    • Install the developer tools
    • Log in from the CLI

    Tutorials

    • Create a Static Website
    • Create a Scalable Webhook
    • Create a Simple API Project
    • Try Altostra without connecting cloud accounts
    • CI/CD with Altostra CLI and Github Actions

    How To

      Working with projects

      • Create a new project
      • Deploy a project
      • Manage a project

      Working with environments

      • Manage an environment
      • Configure instances expiration for an environment

      Working with the Editor

      • Grant access to vendor services
      • Use the Parameter Store
      • Use a custom CloudFormation resource
      • Attach a custom policy to a Function
      • Connect a Function to VPC
      • Add filter policy to SNS subscription

      Organization account settings

      • Set General Settings
      • Connect a Git account
      • Connect Cloud Accounts
      • Manage log aggregation accounts

    CLI

    • Altostra CLI
    • Commands

      • templates
      • new
      • init
      • push
      • deploy
      • sls-deploy
      • sync
      • invalidate
      • domains
      • console
      • environments
      • images
      • instances
      • build
      • config
      • import
      • projects
      • tasks
      • activity-log
      • login
      • logout
      • account
      • whoami
      • api-key
      • docs

      Options

      • --debug
      • --verbose
      • Scripting options
    • Configuration files

    Errors And Solutions

    • Autnentication Required

    Technical Reference

    • Environments
    • Playground Environment
    • Instances
    • Project image
    • Image Repository
    • Log Shipping
    • Deployment Modes
    • Altostra Cloud Integration

    Integrations

      CI/CD

      • CircleCI

      Git

      • Git integration
      • Connect a GitHub account
      • Connect a Bitbucket account

    Altostra Cloud Integration

    Overview

    Our goal at Altostra is to streamline cloud development, deployment and management for developers. We want our users to enjoy and use all the cloud infrastructure advantages with as little as possible hurdles and configuration while keeping maximum security.

    Once you integrate your AWS account, Altostra can deploy, manage and monitor your projects on your behalf. To ensure you're fully protected, we follow and adhere to the AWS best practices and security guidelines on providing access to AWS accounts owned by third parties.

    How it works

    For Altostra to operate within your AWS account on your behalf, AWS requires several things:

    1. An IAM Role in your account that can be assumed by Altostra
    2. An appropriate policy for the Role
    3. An explicit permission on that role that it can be used only by Altostra (by specifying Altostra's account ID)
    4. A secret token called externalId that is known only to Altostra and yourself and is used to prevent the "Confused Deputy" attack.

    This process is safe yet cumbersome. So instead of asking you to perform these steps manually when you connect your account to Altostra, we generate a CloudFromation template for you, with all the relevant parameters preset.

    Once you run the template, it generates all of the required resources and sends a notification to Altostra. You can then use Altostra to deploy projects to your account.

    You can read a detailed technical post on how the mechanism works on our blog

    Resources created by the template

    Logical IDResource TypeDescription
    AltostraS3BucketAWS::S3::BucketThis is where Altostra will store all your project images and account related data
    CrossAccountRoleAWS::IAM::RoleThis is the IAM role Altostra assumes when it stores and deploys your projects
    PhoneHomeCustomResourceCustomThis one-time resource is used to send the connections details to Altostra - namely, the newly generated IAM Role ARN
    ← Deployment ModesCircleCI →
    • Overview
    • How it works
    • Resources created by the template
    © 2021 Altostra, Inc.