# Syslog AWS Setup Checklist

## Phase 1: Account Creation & Hardening
- [ ] Create AWS Account: Sign up at [AWS Console](https://aws.amazon.com/) using `jerome@sysloggh.com`.
- [ ] Root Security:
  - [ ] Set a strong, unique password.
  - [ ] Enable MFA (Multi-Factor Authentication) on the root account immediately.
  - [ ] Configure `billing_alert_email` as `jerome@sysloggh.com` for account alerts.

## Phase 2: Administrative Access
- [ ] IAM Setup: Create an IAM user (e.g., `syslog-admin`) with `AdministratorAccess`.
- [ ] CLI Access: Download and store the Access Key / Secret Key for this `syslog-admin` user.

## Phase 3: Local Environment Setup
- [ ] Configure Profile: Run your local machine configuration:
    ```bash
    aws configure --profile syslog-business
    ```
- [ ] Verify: Confirm connectivity:
    ```bash
    aws sts get-caller-identity --profile syslog-business
    ```

## Phase 4: Infrastructure Automation (Terraform)
- [ ] Initialize Terraform:
    - `cd ~/syslogsolution/infrastructure/aws-org/`
    - `terraform init`
- [ ] Configure Variables:
    - `cp terraform.tfvars.example terraform.tfvars`
    - Edit `terraform.tfvars` with your business details.
- [ ] Deploy: 
    - `terraform plan`
    - `terraform apply`

## Phase 5: Post-Deployment
- [ ] Accept Invites: Check `dev` (`jerome+dev@sysloggh.com`) and `staging` (`jerome+staging@sysloggh.com`) email inboxes for AWS invitations and accept them.
- [ ] Identity Center/SSO: Configure IAM Identity Center in the AWS console.