Follow the procedure detailed here to create a change request to open ports for AWS and Azure Instances. 

Requirements

• AWS and Azure PowerShell Modules are installed on the Commander Server
• AWS Account must be added with IAM Credentials (not Assume Role)
• Cloud Credentials require read permission on the cloud Account as a minimum.
• Snow Commander the Advanced Property embotics.workflow.script.credentials must be set to True.
• In some cases the Execution Policy on the Commander Server must be set to “Unrestricted”

PowerShell Modules

On the Commander Server if you don’t have the AWS or Azure PowerShell modules installed it can be easily installed by running:

"Install-Module -Name AWSPowerShell.NetCore -AllowClobber -Force"
"Install-Module -Name AZ -AllowClobber -Force"

If you receive a Security error you may need to run this and try again:

[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

Steps

1. Download the appropriate workflow for the Cloud Accounts you wish to target:
   • AWS Instance Open Port
   • Azure Instance Open Port (used in this procedure as an example)
2. In the Commander Admin console navigate to Configuration > System > Advanced and search for embotics.workflow.script.credentials and set the value to True.
3. Navigate to Configuration > Self Service > Completion in the Commander Admin console. Click Import and select the AWS_Azure_Instance_Open_Port_CR.json downloaded in Step 1. Click Import.

6. With the workflow installed, navigate to Configuration > Custom Attributes. 

7. Here we need to create 3 form-based attributes for the change request form:

• List Attribute on Change request form: TCP/UDP
• Text attribute with Regex for CIDR on Change Request Form: ^([0-9]{1,3}\.){3}[0-9]{1,3}($|\/(0|16|24|32))$
• Text Attribute with Regex for Port Value: ^\d+$

8. Navigate to Configuration > Self Service > Change Requests in the Commander Admin console. Click Add Change Request and provide a meaningful name. Set the Target Type to Inventory and set the Completion Workflow to the imported workflow from Step 5.