This is an example solution of three account setup with Managed AD and domain join using UserData script (Password stored in Secrets Manager) and traffic connected with Transit Gateway between the VPCs.
git clone <repo>
npm install
Open and customize the following file mad-shared-accounts-with-cdk.ts
- Configure accounts and IP segmentation
- Deploy the NetworkingAccount Stack with
cdk deploy NetworkingAccount
- Use the CDK Output from
NetworkingAccount
and manually edit thetgw
object and theresolverID
object - Deploy the SharedAccount Stack with
cdk deploy SharedAccount
- Use the CDK Output from
SharedAccount
and manually edit theDomainForwarder
,secretArn
and thekmsArn
- Deploy the GenericAccount Stack with
cdk deploy GenericAccount
- Use the CDK Output from
GenericAccount
and manually edit themachineInstanceRoleArn
- Launch machine using the launchMachine() method