Target architecture - AWS Prescriptive Guidance

Target architecture

Although you can choose the appropriate instance types for your specific workload needs, for SAS Grid Manager on SAS 9.4, SAS recommends Amazon EC2 I3en instances. We also recommend using Amazon VPC, which provides increased isolation control, customization, and security.

The following diagram shows SAS Grid on AWS with data, metadata, middle tier, and server tiers. This high-availability architecture is deployed on two Availability Zones for an active-active disaster recovery failover strategy.


          SAS Grid architecture on AWS with high availability and warm standby

This architecture includes the following components:

  • Virtual private cloud (VPC) – A virtual network dedicated to your AWS account. This is logically isolated from other virtual networks in the AWS Cloud. You can also create a hardware virtual private network (VPN) connection between your corporate data center and your VPC, and use the AWS Cloud as an extension of your corporate data center. The VPC is configured with two Availability Zones, public subnets, and private subnets to provide the network infrastructure for SAS Grid on AWS.

  • Internet gateway – This gateway is attached to your VPC. By default, it comes with a security group that allows no inbound traffic and all outbound traffic to the internet.

  • NAT gateway – The network address translation (NAT) gateways enable instances in private subnets to connect to the internet.

  • Linux bastion host – Provides secure access to Linux instances located in the private and public subnets of your VPC.

  • Remote Desktop gateway – Provides remote administration. This gateway uses remote desktop protocol (RDP) over HTTPS to establish a secure, encrypted connection between remote users on the internet and Windows-based EC2 instances.

  • Amazon EC2 Auto Scaling – Ensures that the number of bastion hosts and Remote Desktop gateway instances always matches the capacity you specify during launch.

  • FSx for Lustre – Integrates with Amazon S3 and makes it easy to process cloud datasets using the Lustre high-performance file system.

  • Amazon S3 – Enables you to store and retrieve any amount of data at any time, from anywhere on the web.