Add guide - How to install mod in Gov Cloud. Closes #344

docs/guides/configuring-guardrails/index.md

@@ -10,6 +10,7 @@ This section provides how-to guides for common tasks that will help you effectiv
 | - | -
 | [Workspace Activity Retention](guides/configuring-guardrails/activity-retention) | Learn how to set up Workspace activity retention in Guardrails console
 | [Install Mod](guides/configuring-guardrails/install-mod) | Learn how to install mod in Guardrails console
+| [Install Mod via CLI](guides/configuring-guardrails/install-mod-using-cli) | Learn how to install mod using Guardrails CLI (useful for GovCloud, automation, and restricted environments)
 | [Update Mod](guides/configuring-guardrails/update-mod) |  Learn how to uninstall mod in Guardrails console
 | [Uninstall Windows](guides/configuring-guardrails/uninstall-mod) | Learn how to update mod in Guardrails console
 | [Change Windows](guides/configuring-guardrails/change-window) | Learn about Guardrails' Change Window mechanism

docs/guides/configuring-guardrails/install-mod-using-cli/index.md

@@ -0,0 +1,89 @@
+---
+title: Install Mod via CLI
+sidebar_label: Install Mod via CLI
+---
+
+# Install a Mod using Guardrails CLI
+
+In this guide, you will:
+- Install a mod in a Guardrails workspace using the CLI.
+- Validate successful installation using the Guardrails UI.
+
+Guardrails supports installing [Mods](/guardrails/docs/reference/glossary#mod) via [Guardrails CLI](https://turbot.com/guardrails/docs/reference/cli) for various scenarios where command-line installation is preferred or required, including Government Cloud environments (e.g., AWS GovCloud) where UI-based interactions may be limited, automated deployment workflows and CI/CD pipelines, scripted installation processes for consistent deployments or restricted environments where direct web access is limited, and bulk mod installations across multiple workspaces.
+
+> [!IMPORTANT]
+> This CLI-based approach is particularly important for AWS GovCloud environments, where direct access to Turbot's mod registry is restricted because the registry is hosted in commercial AWS accounts.
+
+## Prerequisites
+
+- [Turbot CLI installed and configured](https://turbot.com/guardrails/docs/reference/cli/installation) with appropriate credentials
+- Valid **Turbot/Owner** permissions in the target Guardrails [workspace](https://turbot.com/guardrails/docs/reference/glossary#workspace)
+- **Mod registry access**: Registration at [guardrails.turbot.com](https://guardrails.turbot.com) with approved mod download permissions
+- Network access to download mods from **guardrails.turbot.com**
+- One of the following access methods:
+  - Access to a bastion host in your GovCloud environment, or
+  - Direct network access from your local environment to the hosted workspace
+
+> [!NOTE]
+> **Mod Download Permissions**: Even with a guardrails.turbot.com account, you may not have permissions to download mods. If you encounter permission errors during mod download, contact [Turbot Support](https://support.turbot.com) to request access to allow to download mods.
+
+## Step 1: Access Your Environment
+
+> [!NOTE]
+> If a bastion host is not available in your environment, you can create one using this guide: [Turbot Bastion Host](https://github.com/turbot/guardrails-samples/tree/main/enterprise_installation/turbot_bastion_host#turbot-bastion-host)
+
+### For GovCloud Environments
+
+Log into the AWS account associated with your GovCloud production environment and connect to the main bastion host.
+
+![Bastion Host](./aws-connect-bastion-host.png)
+
+### For Commercial Cloud Environments
+
+Ensure you have CLI access to your target environment with the [Turbot CLI](/guardrails/docs/reference/cli) properly configured.
+
+
+
+## Step 2: Download Mod
+
+Navigate to your desired directory for downloading the mod package, for example: `cd /turbot/mods`
+
+Download the desired mod package using this Guardrails CLI command. This fetches the specified mod from the Guardrails registry, e.g., @turbot/aws-iam.
+
+```
+turbot download @turbot/aws-iam
+```
+
+![Download Mod](./aws-download-mod.png)
+
+## Step 3: Install Mod to Workspace
+
+Upload and install the downloaded mod into your target workspace by executing the command below with the appropriate CLI profile.
+
+```
+turbot up --zip-file turbot_aws-iam --profile <profile-name>
+```
+
+![Install Mod](./aws-install-mod.png)
+
+## Step 4: Review
+
+- [ ] Verify successful installation by checking the Guardrails UI after approximately 20 minutes. Ensure the mod appears under **Admin > Mods**, the version matches the one uploaded (e.g., 5.43.x), and the mod status displays a green checkmark.
+
+![Review Mod Installation](./guardrails-verify-installation.png)
+
+## Next Steps
+
+Please see the following resources to learn more about Turbot Guardrails Enterprise:
+
+- Learn more about [Turbot Guardrails Enterprise - Architecture](/guardrails/docs/enterprise/architecture).
+- Learn about [Updating Mod](/guardrails/docs/enterprise/updating-stacks/mod-update).
+
+## Troubleshooting
+
+| Issue                                      | Description                                                                                                                                                                                                 | Guide                                |
+|----------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-----------------------------------------------------|
+| Login Authentication Error | If you receive `Failed to login to guardrails mod registry: Incorrect username or password` error, verify your credentials by logging into [guardrails.turbot.com](https://guardrails.turbot.com/). If you've forgotten your password, use the password reset option. |  |
+| Mod Download Permissions | If you receive `Failed to download mod: You do not have the necessary permissions to download @turbot/<mod-name> from guardrails.turbot.com` error, you need to request mod access through Turbot Support. | [Open Support Ticket](https://support.turbot.com) |
+| Mod Dependency               | If the mod installation fails due the dependent/parent mod not installed.                                           | [Troubleshoot Mod Peer Dependency Error](/guardrails/docs/guides/hosting-guardrails/troubleshooting/peer-mod-dependency-error#peer-mod-dependency-error)                            |
+| Further Assistance                       | If you continue to encounter issues, please open a ticket with us and attach the relevant information to assist you more efficiently.                                                 | [Open Support Ticket](https://support.turbot.com)   |

docs/sidebar.json

@@ -229,6 +229,7 @@
         "items": [
           "guides/configuring-guardrails/activity-retention",
           "guides/configuring-guardrails/install-mod",
+          "guides/configuring-guardrails/install-mod-using-cli",
           "guides/configuring-guardrails/update-mod",
           "guides/configuring-guardrails/uninstall-mod",
           "guides/configuring-guardrails/auto-mod-update",