#1 AWS Marketplace - Setup Guide

Bookstack supports two authentication methods: standard and Google.

The following table compares the two methods. Choose the one that best fits your needs and click the “Go to AWS Marketplace” button.

Feature	Standard Authentication	Google Authentication (OIDC)
Login Method	Local username & password	Google Single Sign-On (SSO)
User Management	Managed within BookStack	Users managed via Google Workspace
Security Level	Standard password-based security	OAuth 2.0 authentication with Google
Ease of Use	Requires manual user management	Seamless login with Google account
Setup Complexity	No additional configuration required	🚨 Requires a one-time modificationlogin as the default admin ofto .envenable onuser registration with the EC2Admin instancerole. This step is needed only once to switchensure fromthat standardfuture toGoogle-authenticated oidcusers automatically receive admin privileges.
Multi-Factor Authentication (MFA)	Not built-in, but can be configured	Supports Google MFA
Best For	Small teams, personal use	Enterprises using Google services

⚠ Important Notice! At this time, BookStack does not support simultaneous use of both Standard Authentication and Google Authentication (OIDC).

To switch authentication methods, you must manually update the .env file and restart the BookStack docker container.container (detailed instructions will be provided below). 

📌 Deploying BookStack via AWS CloudFormation

Follow these steps to deploy BookStack in your AWS infrastructure:

1️⃣ Go to AWS Marketplace

1. Open the BookStack page on AWS Marketplace - we need to change the link to our product.

2. Click View purchase options, in appeared page Subscribe to this software review the terms, pricing information and accept the agreement.

3. The subscription is now Pending.

4. Wait until the subscription is active and click on Continue to Configuration.

5. Continue with selecting fulfillment option, version, and region.

We provide three Fulfillment options:

Fulfillment option	Description	Architecture
1. Bookstack infra without Cognito, default VPC, RDS AutoBackup Off, Single-AZ, EC2. ≈$45.40	Cost-efficient BookStack deployment utilizing an existing VPC and RDS Single-AZ. AWS Cognito is excluded, but the setup retains EFS Backup, Secrets Manager, Systems Manager, EC2, and CloudWatch Logs for security and monitoring.	Open Diagram
2. Bookstack infra enabled Cognito, default VPC, RDS AutoBackup Off, Single-AZ, EC2. ≈$51.40	Balanced BookStack deployment utilizing an existing VPC with AWS Cognito for authentication. RDS Single-AZ with AutoBackup disabled ensures cost efficiency, while EFS Backup, Secrets Manager, Systems Manager, EC2, and CloudWatch Logs provide security and monitoring.	Open Diagram
3. Bookstack infra enabled Cognito, new VPC, RDS AutoBackup Off, Single-AZ, EC2.  ≈$84.25	Optimized BookStack deployment with Cognito authentication, new VPC, and RDS Single-AZ.  Includes EC2 instance, EFS Backup, Secrets Manager, Systems Manager, and CloudWatch Logs for enhanced security, scalability, and monitoring	Open Diagram

2️⃣ Deployment via CloudFormation

📌 Choosing Parameters

1. Go to CloudFormation Stack Launch and select the AWS region where you want to deploy BookStack.

2. Click Continue to Launch → select Launch CloudFormation.

3. Click Launch to proceed to AWS CloudFormation.

4. You are getting redirected to CloudFormation.