1. Preparation for using AMI -Open an account at GMO Aozora Net Bank. -Create an account at the API Account Portal (https://api.gmo-aozora.com/ganb/developer/ ) -Apply for API connection to GMO Aozora Net Bank (https://gmo-aozora.com/pfbank/api-cooperation/api-application.html ) -Obtain your own domain name -Prepare an SSL certificate that supports your own domain

2. Create an instance via AMI -Configure Elastic IP Since API access is restricted by IP address, set the Elastic IP to the IP address you specified when you applied for API connection.

-Route 53 Settings Please configure other settings according to your situation.

3. Configure the server application settings -Necessary environment variables For manual changes, the environment file can be found at env/settings.env.local when running on a local environment and env/settings.env.dev when running development/production configurations. The necessary environment variables for execution are the following:

• CLIENT_ID: The auth ID provided by GMO Aozora Net Bank when API access is granted.
• CLIENT_SECRET: The auth secret key provided by GMO when API access is granted.
• REDIRECT_URI: The redirect URI specified by your company to be used when authorization is successful.
• AUTH_METHOD: basic or post. Refer to the information provided by GMO Aozora Net Bank when API access granted.
• CORS_HEADER: For exchanges between the frontend and backend.
• CRYPTOCODE_KEY: A key of format XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX (base 16) for Flask.

Note : the GMO Auth API does not allow redirects to http://localhost  . Therefore, once the authorization process is complete and you have the code and state written in your URL, rewrite it as follows:

http://localhost/?code=xxxxxxxxxxxxx&state=yyyyyyyyyyyyyy 

Note 2: this app uses reverse-proxy with NGINX to host frontend and backend under the same domain. Because of this, app-customary port numbers are omitted. When using the frontend app, please refer to http://localhost/app  instead of http://localhost:3000  and when using the backend for tests, please refer to http://localhost/  instead of http://localhost:5500 .

AWS Parameter Store settings Instead of manual settings, the app comes with an automatic script that uses the AWS Parameter Store parameters when available. For the parameters mentioned above, use the following paths when registering:

• CLIENT_ID: /ichibar/app/va/auth_client_id
• CLIENT_SECRET: /ichibar/app/va/auth_client_secret
• REDIRECT_URI: /ichibar/app/va/auth_method
• AUTH_METHOD: /ichibar/app/va/cors_header
• CORS_HEADER: /ichibar/app/va/cryptocode_key
• CRYPTOCODE_KEY: /ichibar/app/va/redirect_uri Also, for easy SSL certificate settings, if you set the following flags, certbot will obtain a certificate for your domain:
• /ichibar/app/va/easy_setup_flag : true
• /ichibar/app/va/easy_setup_email : email address used for emergencies
• /ichibar/app/va/easy_setup_domain : domain name (example.com)

Note 3: The GMO DEV API can only be accessed from specific IP addresses. Please make sure you are done with the following steps before starting the app in dev mode:

• The frontend app (browser) can only be accessed from a machine with the IP address you specified in the "Global IP Address for test site" item in the application form for the API connection. Please use a VPN or access the machine directly and open the browser from it.
• The backend API calls only succeed when the backend is hosted in the IP address you specified in the "API connection info / Connection parameters" item in the application form for the API connection. Make sure this repository is cloned to the machine with the correct IP address.