AWS installation

You can install authentik to run on AWS with a CloudFormation template.

Prerequisites

• An AWS account.
• An AWS Certificate Manager certificate. Take note of the ARN of the certificate.

Installation

Log in to your AWS account and create a CloudFormation stack with our template.

Under the Certificate ARN input, enter the previously created certificate ARN. You can also configure other settings if needed. You can follow the prompts to create the stack.

This stack will create the following resources:

• AWS SSM secrets for the PostgreSQL user and the authentik secret key
• A VPC for all other resources
• A RDS PostgreSQL Multi-AZ cluster
• An ECS cluster with two tasks:
  • One for the authentik server
  • One for the authentik worker
• An ALB (Application Load Balancer) pointing to the authentik server ECS task with the configured certificate
• An EFS filesystem mounted on both ECS tasks for file storage

The stack will output the endpoint of the ALB that to which you can point your DNS records.

Access authentik from AWS CloudFormation

To launch authentik, in your browser go to:

http://<domain_you_configured>/if/flow/initial-setup/

:::info Initial setup in browser You will get a Not Found error if initial setup URL doesn't include the trailing forward slash /. Also verify that the authentik server, worker, and PostgreSQL database are running and healthy. Review additional tips in our troubleshooting docs. :::

Further customization

If you require further customization, we recommend you install authentik via Docker Compose or Kubernetes.