Merge pull request #14 from aws-samples/ckp/update-step-0

Ckp/update step 0

Author: matteofigus

docs/step-0.md

@@ -1,6 +1,8 @@
 # Step 0 - Deploy the Cloudformation Stacks
 
-To run the lab, you will need to deploy the [WAF Security Automations Solution](https://aws.amazon.com/solutions/aws-waf-security-automations/) and a sample Web App that we'll use for testing.
+In this step, you will deploy two CloudFormation templates required for the workshop.
+
+You will deploy the [WAF Security Automations Solution](https://aws.amazon.com/solutions/aws-waf-security-automations/) and a sample Web Application. The Sample Web Application template contains an EC2 instance containing the [OWASP Juice Shop](https://www2.owasp.org/www-project-juice-shop/). It is exposed by an Application Load Balancer. The sample Web Application will be protected by the WAF. The OWASP Juice Shop is an example web application containing many common vulnerabilities found in Web Applications.
 
 > **Note**  
 You are responsible for the cost of the AWS services used while running these CloudFormation stacks. There is no additional cost for using them. For full details, see the pricing pages for each AWS service you will be using in these CloudFormation stacks. Prices are subject to change.
@@ -9,22 +11,17 @@ You are responsible for the cost of the AWS services used while running these Cl
 
 |Region|Launch Template|
 |------|---------------|
-|**US East (N. Virginia)** (us-east-1) | [![Deploy AWS WAF Security Automations Solution](deploy-to-aws.png)](https://console.aws.amazon.com/cloudformation/home?region=us-east-1#/stacks/new?stackName=AWSWAFSecurityAutomations&templateURL=https://s3.amazonaws.com/solutions-reference/aws-waf-security-automations/v2.3.0/aws-waf-security-automations.template)|
-|**US East (Ohio)** (us-east-2) | [![Deploy AWS WAF Security Automations Solution](deploy-to-aws.png)](https://console.aws.amazon.com/cloudformation/home?region=us-east-2#/stacks/new?stackName=AWSWAFSecurityAutomations&templateURL=https://s3.amazonaws.com/solutions-reference/aws-waf-security-automations/v2.3.0/aws-waf-security-automations.template)|
-|**US West (Oregon)** (us-west-2) | [![Deploy AWS WAF Security Automations Solution](deploy-to-aws.png)](https://console.aws.amazon.com/cloudformation/home?region=us-west-2#/stacks/new?stackName=AWSWAFSecurityAutomations&templateURL=https://s3.amazonaws.com/solutions-reference/aws-waf-security-automations/v2.3.0/aws-waf-security-automations.template)|
-|**EU (Ireland)** (eu-west-1) | [![Deploy AWS WAF Security Automations Solution](deploy-to-aws.png)](https://console.aws.amazon.com/cloudformation/home?region=eu-west-1#/stacks/new?stackName=AWSWAFSecurityAutomations&templateURL=https://s3.amazonaws.com/solutions-reference/aws-waf-security-automations/v2.3.0/aws-waf-security-automations.template)|
-|**EU (London)** (eu-west-2) | [![Deploy AWS WAF Security Automations Solution](deploy-to-aws.png)](https://console.aws.amazon.com/cloudformation/home?region=eu-west-2#/stacks/new?stackName=AWSWAFSecurityAutomations&templateURL=https://s3.amazonaws.com/solutions-reference/aws-waf-security-automations/v2.3.0/aws-waf-security-automations.template)|
+|**US East (N. Virginia)** (us-east-1) | [![Deploy AWS WAF Security Automations Solution](deploy-to-aws.png)](https://console.aws.amazon.com/cloudformation/home?region=us-east-1#/stacks/create/review?stackName=AWSWAFSecurityAutomations&templateURL=https://s3.amazonaws.com/solutions-reference/aws-waf-security-automations/v2.3.0/aws-waf-security-automations.template&param_ActivateHttpFloodProtectionParam=yes%20-%20AWS%20Lambda%20log%20parser&param_ActivateScannersProbesProtectionParam=yes%20-%20Amazon%20Athena%20log%20parser&param_EndpointType=ALB)|
+|**US East (Ohio)** (us-east-2) | [![Deploy AWS WAF Security Automations Solution](deploy-to-aws.png)](https://console.aws.amazon.com/cloudformation/home?region=us-east-2#/stacks/create/review?stackName=AWSWAFSecurityAutomations&templateURL=https://s3.amazonaws.com/solutions-reference/aws-waf-security-automations/v2.3.0/aws-waf-security-automations.template&param_ActivateHttpFloodProtectionParam=yes%20-%20AWS%20Lambda%20log%20parser&param_ActivateScannersProbesProtectionParam=yes%20-%20Amazon%20Athena%20log%20parser&param_EndpointType=ALB)|
+|**US West (Oregon)** (us-west-2) | [![Deploy AWS WAF Security Automations Solution](deploy-to-aws.png)](https://console.aws.amazon.com/cloudformation/home?region=us-west-2#/stacks/create/review?stackName=AWSWAFSecurityAutomations&templateURL=https://s3.amazonaws.com/solutions-reference/aws-waf-security-automations/v2.3.0/aws-waf-security-automations.template&param_ActivateHttpFloodProtectionParam=yes%20-%20AWS%20Lambda%20log%20parser&param_ActivateScannersProbesProtectionParam=yes%20-%20Amazon%20Athena%20log%20parser&param_EndpointType=ALB)|
+|**EU (Ireland)** (eu-west-1) | [![Deploy AWS WAF Security Automations Solution](deploy-to-aws.png)](https://console.aws.amazon.com/cloudformation/home?region=eu-west-1#/stacks/create/review?stackName=AWSWAFSecurityAutomations&templateURL=https://s3.amazonaws.com/solutions-reference/aws-waf-security-automations/v2.3.0/aws-waf-security-automations.template&param_ActivateHttpFloodProtectionParam=yes%20-%20AWS%20Lambda%20log%20parser&param_ActivateScannersProbesProtectionParam=yes%20-%20Amazon%20Athena%20log%20parser&param_EndpointType=ALB)|
+|**EU (London)** (eu-west-2) | [![Deploy AWS WAF Security Automations Solution](deploy-to-aws.png)](https://console.aws.amazon.com/cloudformation/home?region=eu-west-2#/stacks/create/review?stackName=AWSWAFSecurityAutomations&templateURL=https://s3.amazonaws.com/solutions-reference/aws-waf-security-automations/v2.3.0/aws-waf-security-automations.template&param_ActivateHttpFloodProtectionParam=yes%20-%20AWS%20Lambda%20log%20parser&param_ActivateScannersProbesProtectionParam=yes%20-%20Amazon%20Athena%20log%20parser&param_EndpointType=ALB)|
 
 Step by step instructions:
-* Provide your stack with a unique name. *Note: Be careful not to exceed the 64-character stack name limit*
 * Provide the following template parameters:
-  * **Activate HTTP Flood Protection** = "yes - AWS Lambda log parser"
-  * **Activate Scanner & Probe Protection** = "yes - Amazon Athena log parser"
-  * **Endpoint Type** = "ALB"
   * **Application Access Log Bucket Name** (must be all lower case to match regex) = `<enter a random bucket name here>`
   * Leave all other parameters set to their default values.
-* Continue through the remaining pages using the default values.
-* On the final page, check the box at the bottom allowing AWS CloudFormation to create IAM resources with custom names.
+* Check the box at the bottom allowing AWS CloudFormation to create IAM resources with custom names.
 * Click the orange "Create stack" button at the bottom-right of the page to deploy the stack into your account.
 
 ## Deploy the sample Web App