Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=ZTNA-AWS-CFT-update

Update your Amazon Web Services CloudFormation template

To update your CloudFormation Template (CFT), you must do as follows:

  1. Verify your Kubernetes version.
  2. Update your CloudFormation template.
  3. Verify your Kubernetes version again, to make sure it's updated.

Verify your Kubernetes version

You must verify your Kubernetes version before and after the CloudFormation template update.

To verify your Kubernetes version, do as follows:

  1. In AWS, go to Cloudformation > Stacks, then go to your AWS gateway's root Cloud Formation stack.
  2. Click Parameters, then copy the EKSClusterName.
  3. Go to Elastic Kubernetes Service > Clusters.
  4. Click the Elastic Kubernetes Service cluster name you copied earlier.
  5. Check the Kubernetes version. Example: 1.22.

After you update the CloudFormation template, you'll see the Kubernetes version updated too. Example: 1.23.

Update your CloudFormation template

To update your CloudFormation template, do as follows:

  1. In Central, go to ZTNA > Gateways > Gateway details and click the gateway name.

    You'll see the Cloud gateway release version.

  2. Under Gateway summary, click the version link.

    Note

    If there's an update available, you'll see a green arrow next to the version link.

    Gateway cloud release version

    Software update appears.

    Gateway software update

  3. Select the version you want to update to, and the time you want to update.

  4. Click Copy to copy the AWS S3 URL.

    Note

    If you're running the latest version of the CloudFormation template, Copy isn't shown.

  5. Click Save.

    Tip

    If you want to update the CloudFormation template without updating the gateway version, click Cancel.

  6. In AWS, go to Cloudformation > Stacks. Under Stack info, click Update.

    This replaces the current CloudFormation template.

    Note

    Make sure you update the root stack.

  7. Under Update stack, select Replace current template.

    Update stack

  8. Under Amazon S3 URL, paste the URL you copied from Central, then click Next.

  9. Under Specify stack details, click Next.

  10. Under Configure stack options, click Preserve successfully provisioned resources, then click Next.

  11. Under Review, verify your stack details, accept the conditions, then click Submit.

    Your CloudFormation stack will update. This will take approximately 45 minutes to complete.

    On the Stacks > Event info tab, you'll see "Update in progress". When the update is completed, you'll see "Update complete".

    Stack update in progress

  12. In Central, go to ZTNA > Gateways > Gateway details.

    You'll see the Cloud gateway release version is updated.