AWS Services
The below table lists mandatory and optional managed AWS services that are used by by Usage Engine
...
| Excerpt |
|---|
When running in AWS, Usage Egnine stores data persistently in RDS, EFS and optionally MemoryDB. All these services support encryption at rest. The default Terraform templates provided as part of the product are configured to use encryption at rest. MemoryDB is configured by the customer. It is recommended to configure it with encryption at rest if sensitive information will be stored in it. |
...
Solutions that use disk persisted data is storing this on a mounted EFS disk resource. Using the provided Terraform template, the EFS resource is given the name "[EKS-CLUSTER-ANME]-efs-disk". It is mounted into the pods pods at the path "/opt/mz/persistent" which is the path where executing workflows can access the storage.
The following features features use or can use disk based storage to persist data:
Aggregation Aggregation (3.0)
Duplicate UDR Detection Duplicate UDR (3.0)
Inter Workflow Inter Workflow (3.0)
...
MemoryDB Redis database
Some features in can can use a Redis compatible database to store state. In AWS the MemoryDB for Redis service can be used for this. Access to this is configured in:
- Redis Profile Redis (3.0)
and can be consumed by:
...
The AWS infrastructure should be managed as IaC using Terraform, CloudFormation or similar tool. Usage Engine comes with templates written in Terraform that will setup a basic environment. The default configuration of these templates setup the following resources, which are sufficient to run a standard system Usage Engine system with solutions that are not particularly demanding on resources.
- EFS Mount Target
- EFS Security Group
- KMS Key
- KMS Alias
- RDS DB Instance (Postgres)
- RDS DB Subnet Group
- RDS DB Access Security Group
- SSM RDS Parameters
- DB User
- DB Password
- Route53 DNS Zone
- Route53 DNS NS Record
- ACM Certificate
- Route53 Cert Validation Record
- ACM Certificate Validation
- EKS Cluster
- VPC Cluster Endpoint
- Node Group
- Minimum three nodes m5.Large
- CloudWatch cluster logging
- MZ Platform Application Helm chart
- MZ ECD Solution Helm charts
...