Prerequisites
This page outlines the requirements for deploying AI/Run CodeMie On VM. Ensure all prerequisites are met before proceeding.
AWS Account Requirements
Required Access and Permissions
- Active AWS Account with a region that supports Amazon Bedrock
- IAM permissions to create an IAM deployer role (one-time setup)
- Sufficient quota for: 1 EC2 instance, 1 VPC, 1 S3 bucket, 1 KMS key, 1 EIP
The deployment uses a dedicated IAM role with scoped permissions. You only need broad IAM access to create this role once — subsequent deployments use the role.
Network Requirements
- Outbound internet access from EC2 (to pull Docker images, access Bedrock API)
- Optional: Route 53 hosted zone (if using a custom domain with ALB + ACM)
Deployment Machine Tools
The following tools must be installed on the machine where you run ./deploy.sh:
| Tool | Version | Purpose |
|---|---|---|
| Terraform | 1.15.x | Infrastructure provisioning |
| AWS CLI | latest | AWS resource management |
| Session Manager Plugin | latest | SSH access via AWS SSM |
| jq | latest | JSON parsing |
| openssl | latest | Secret generation |
| envsubst | latest | Template rendering |
Enterprise profile only:
| Tool | Version | Purpose |
|---|---|---|
| nsc | latest | NATS key generation |
Verify Installation
terraform version # Should show 1.15.x
aws --version # AWS CLI v2
session-manager-plugin # Should print version info
jq --version
openssl version
envsubst --version
GCP Container Registry Access
CodeMie container images are hosted on europe-west3-docker.pkg.dev. You need a GCP service account key file (key.json) with read access to the registry.
Contact your CodeMie administrator or EPAM delivery team to obtain the key.json file for registry access.
Repository Access
Clone the deployment repository:
git clone https://gitbud.epam.com/epm-cdme/codemie-on-vm.git
cd codemie-on-vm
The repository structure:
| Directory | Purpose |
|---|---|
compose/ | Docker Compose files and service configuration |
deploy.sh | Deployment script |
terraform/aws/codemie-on-vm-aws-iam/ | IAM deployer role Terraform module |
terraform/aws/remote-backend/ | S3 Terraform state bucket |
terraform/aws/platform/ | EC2, VPC, ALB, S3, KMS infrastructure |
Next Steps
After verifying all prerequisites, review the Architecture to understand what will be deployed.