Deployment Guide - Install Change Manager

1. Locate Change Manager

  • Open the AWS Console in your Master Account.
  • Search for "Change Manager" and select "Set up organization."
    Note: If you have already set up your AWS Organization, you can skip to Setup Change Manager

‍

2. Quick Setup

  • On the "Quick Setup" page, click "Create" under Change Manager.

‍

3. Assign Delegated Account:

  • From your accounts list, choose one to act as the central account for executing changes.
    Note: The Master/Payer account cannot be used.

‍

4. Configure Permissions:

  • In the "Permissions to request and make changes" section, create a temporary permission set:
JSON 
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "ssm:*",
      "Resource": "*"
    }
  ]
}
  • Now locate CloudShell on the bottom left of the screen.
  1. When CloudShell opened run these commands
    Before running the commands, ensure that you specify the correct region where you want to deploy.
Terminal
aws iam create-service-linked-role --aws-service-name ssm.amazonaws.com --region {region}
Terminal
aws iam create-service-linked-role --aws-service-name changemanagement.ssm.amazonaws.com
  • If a command returns an error, first verify the region settings in both your environment and the command. If the region is correct, the error can be ignored.

‍

5. Finalize Setup

  • Leave remaining fields blank (add tags if needed) and click "Create.
  • Wait for deployment to complete.

‍

6. Setup Change Manager

  • Navigate to Change Manager, and select “Settings”
  • In the settings page click “Edit”
  • In the edit page, make sure the Change Template review & approval permission is unchecked & save the settings.

‍

7. Save Organization IDs

  • Go to AWS Organizations, copy your Organization ID and Root ID, and save them for deploying the CloudFormation Template (CFT).
Table of content
Example H2
Styled JSON Code Block
JSON 
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "ssm:*",
      "Resource": "*"
    }
  ]
}