This document outlines Emind's architecture for integrating enterprise systems with AWS. The key goals are to reduce wait times, enable easy scaling of computational pipelines, and provide access to cloud services. The architecture covers integrating billing, identity management, networking, security, applications, monitoring, and automation between on-premise systems and AWS. It also describes managed services and self-service options.

1. Emind’s Architecture for
Enterprise & AWS Integration
Lahav Savir, Architect & CEO
Emind - Your Cloud Experts

2. ● Reduce wait time in queues.
● Access to endless computation resources.
● Easy scale-out of existing computational pipelines.
● Collaboration of projects with external research institutions.
● Enable access to the rich variety of cloud services.
● Combined Self & Managed Service.
● Reduce CAPEX.
Goals

3. Global References
● Harvard University - http://huit.harvard.edu/services/harvard-
cloud-services
● University of Chicago - https://aws.amazon.
com/solutions/case-studies/university-of-chicago/
● University of New York - https://aws.amazon.
com/solutions/case-studies/new-york-university/

4. Scope
● Advanced
Computing
● Data Platforms
● HPC Clusters
● Web Hosting

5. Integrations
● Billing and Accounting
● Networking
● Security
● Compliance
● Identity
● Applications stack
● Monitoring
● Usage analytics
● Automation

6. Managed Services Self Service

7. Billing & Accounting
● Allow “Pre-Paid / Budget” payment
○ Controlled budget
○ Pay per use
○ Automated alerts and actions
● Integration of the AWS billing with the organization’s
internal billing
○ Seamless ordering / allocating budget
○ Seamless usage / consumption information

8. Identity
Remote Resources:
● AWS Console
● AWS API
● AWS Network
● EC2 Instances
SSO (Single-Sign-On)
integration with
Organization’s Idp
● Authentication
● Role Inheritance

9. Network & Connectivity
● Seamless experience - ONE Network
○ Extend organization’s network to AWS
as an integrated data center
○ Full routable network
● Redundant and Scale
○ Direct-Connect
○ Highly Available VPN
○ IPSec Tunnels

10. Security
● Unified Policy
Enforcement
○ Controlled network
○ Monitored in/out traffic
○ Network IPS
○ Role based resource access
● Host Protection
○ Vulnerability Scanning
○ Host based IDS and FIM
● Events Correlation and
Alerting
● Comprehensive Audit

11. Application Stack
● Seamless access to
organization’s tools library
○ Shared scripts and modules
○ Shared data sets
● Predefined instances
○ Integrated tools
○ Integrated authentication
● HPC Framework
○ StarCluster
http://star.mit.edu/cluster/

12. Monitoring
● Central Monitoring
Platform
● Dynamic Provisioning
● Predefined Templates
● Integrated Data Sources
○ Compute instances
○ AWS resources metrics

13. Usage Reports and Analytics
● Analyse HPC resources
consumption
● Periodically collect
metrics
● Group by Cluster
● Report Hours vs. Jobs

14. Automation
● Zero touch deployment
● CloudFormation
● AWS Service Catalog
● Auto Provisioning
● Just-in-time setup

15. Thank you.
lahavs@emind.co
@lahavsavir