AWS sap documentation change
Summary
Restructured documentation to add new sections (Security Extension, AI), expand archiving options, and update AWS service integrations. Added details about mTLS, AWS Verified Access, and compliance-focused archiving with S3 Object Lock.
Security assessment
The changes introduce documentation for security features like mutual TLS authentication (mTLS) via ALB and AWS Verified Access, which improve access control but do not address a specific vulnerability. Archiving sections emphasize compliance/data retention but lack evidence of patching security flaws.
Diff
diff --git a/sap/latest/general/extensions-rise.md b/sap/latest/general/extensions-rise.md index ca53223ab..a598978b8 100644 --- a//sap/latest/general/extensions-rise.md +++ b//sap/latest/general/extensions-rise.md @@ -5 +5 @@ -PerformanceData lakeApplication integrationDocument managementDevelopment and extension +Archiving and Document Management @@ -11 +11 @@ You can extend RISE with SAP by using AWS services to improve performance, secur - Category | Use case | AWS services +Category | Use case | AWS services @@ -13,5 +13,8 @@ You can extend RISE with SAP by using AWS services to improve performance, secur -Performance | SAP Fiori launchpad and global access | [Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Introduction.html) -Data lake | Analytics | [Amazon AppFlow](https://docs.aws.amazon.com/appflow/latest/userguide/what-is-appflow.html), [AWS Glue](https://docs.aws.amazon.com/glue/latest/dg/what-is-glue.html), and [Amazon QuickSight](https://docs.aws.amazon.com/quicksight/latest/user/welcome.html) -Application integration | Integration | [AWS Lambda](https://docs.aws.amazon.com/lambda/latest/dg/welcome.html) and [Amazon API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/welcome.html) -Document management | Archiving | [Amazon S3 Glacier](https://docs.aws.amazon.com/amazonglacier/latest/dev/introduction.html), [Amazon S3 File Gateway](https://docs.aws.amazon.com/filegateway/latest/files3/what-is-file-s3.html), and SAP BTP - Document Management Service -Development and extension | Development | [AWS SDK for SAP ABAP](https://docs.aws.amazon.com/sdk-for-sapabap/latest/developer-guide/home.html) +[Performance](./rise-performance.html) | SAP Fiori and SAP GUI access with proactive observability | [Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Introduction.html), [Accelerated Site-to-Site VPN](https://docs.aws.amazon.com/vpn/latest/s2svpn/accelerated-vpn.html), [AWS Internet Monitor](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-InternetMonitor.html) +[Data Integration](./data-integration.html) | Data Extraction and Data Federation | [Amazon Appflow](https://docs.aws.amazon.com/appflow/), [AWS Glue for SAP OData](https://docs.aws.amazon.com/glue/latest/dg/connecting-to-data-sap-odata.html), [AWS SDK for SAP ABAP](https://docs.aws.amazon.com/sdk-for-sapabap/latest/developer-guide/home.html), [Amazon Athena](https://docs.aws.amazon.com/athena/latest/ug/what-is.html) +[Data Analytics](./data-analytics.html) | Data Lakes and Data Warehouse | [AWS Lake Formation](https://docs.aws.amazon.com/lake-formation/latest/dg/what-is-lake-formation.html), [Amazon S3](https://docs.aws.amazon.com/AmazonS3/latest/userguide/Welcome.html), [Amazon QuickSight](https://docs.aws.amazon.com/quicksight/latest/user/welcome.html), [Amazon Redshift](https://docs.aws.amazon.com/redshift/) +[Application integration](./application-integration.html) | Application Integration | [AWS Lambda](https://docs.aws.amazon.com/lambda/latest/dg/welcome.html) and [Amazon API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/welcome.html) +Archiving and Document Management | Archiving and Document Management | [Amazon S3](https://docs.aws.amazon.com/AmazonS3/latest/userguide/Welcome.html), [AWS S3 File Gateway](https://docs.aws.amazon.com/filegateway/latest/files3/what-is-file-s3.html), [Amazon EFS](https://docs.aws.amazon.com/efs/latest/ug/whatisefs.html) +[Development and Extension](./development-extension.html) | Development, Compatibility packs and alternatives | [AWS SDK for SAP ABAP](https://docs.aws.amazon.com/sdk-for-sapabap/latest/developer-guide/home.html), [AWS Marketplace](https://docs.aws.amazon.com/marketplace/) +[Security Extension](./security-extension.html) | Single Sign On, Zero Trust Access | [mTLS Authentication through Amazon ALB](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/mutual-authentication.html), [AWS Verified Access for SAP](https://docs.aws.amazon.com/verified-access/latest/ug/what-is-verified-access.html) +[Artificial Intelligence](./artificial-intelligence.html) | Generative AI | [Amazon Q for Business](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/what-is.html), [Amazon Q in QuickSight](https://docs.aws.amazon.com/quicksight/latest/user/quicksight-gen-bi.html), [Amazon Bedrock](https://docs.aws.amazon.com/bedrock/latest/userguide/what-is-bedrock.html) @@ -19 +22 @@ Development and extension | Development | [AWS SDK for SAP ABAP](https://docs. -## Performance +###### Topics @@ -21 +24 @@ Development and extension | Development | [AWS SDK for SAP ABAP](https://docs. -Deploy [Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Introduction.html) in your VPC to increase performance and reduce latency of SAP Fiori launchpad in RISE with SAP. CloudFront create a cache for the static content and accelerates dynamic content through edge computing. For more information, see [Improving SAP Fiori Performance with Amazon CloudFront and AWS Global Accelerator](https://aws.amazon.com/blogs/awsforsap/improving-sap-fiori-performance-with-amazon-cloudfront-and-aws-global-accelerator/). + * [Performance](./rise-performance.html) @@ -23 +26 @@ Deploy [Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/D -**Optimize performance for SAP Fiori** + * [Data integration](./data-integration.html) @@ -25 +28 @@ Deploy [Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/D -You can create a CloudFront distribution in your AWS account, and connect it via Transit Gateway to the SAP systems. In addition, you can attach AWS WAF to strengthen the security at edge. The following image shows this scenario. + * [Data analytics](./data-analytics.html) @@ -27 +30 @@ You can create a CloudFront distribution in your AWS account, and connect it via - + * [Application integration](./application-integration.html) @@ -29 +32 @@ You can create a CloudFront distribution in your AWS account, and connect it via -**User flow** + * Archiving and Document Management @@ -31 +34 @@ You can create a CloudFront distribution in your AWS account, and connect it via - 1. User accesses SAP Fiori launchpad via Internet browser or mobile device. + * [Development and extension](./development-extension.html) @@ -33 +36 @@ You can create a CloudFront distribution in your AWS account, and connect it via - 2. The request is routed through Amazon CloudFront. + * [Security Extension](./security-extension.html) @@ -35 +38 @@ You can create a CloudFront distribution in your AWS account, and connect it via - 3. The request is filtered by AWS WAF to prevent passage of malicious traffic, before it is processed by Amazon CloudFront. + * [Artificial Intelligence](./artificial-intelligence.html) @@ -37 +39,0 @@ You can create a CloudFront distribution in your AWS account, and connect it via - 4. SAP Fiori launchpad is served from RISE with SAP VPC and presented to the user via AWS Transit Gateway. @@ -40,0 +43 @@ You can create a CloudFront distribution in your AWS account, and connect it via +## Archiving and Document Management @@ -42 +45 @@ You can create a CloudFront distribution in your AWS account, and connect it via -**Optimize performance with accelerated VPN connections** +SAP Data Archiving and Document Management System (DMS) plays a crucial role both before and after migrating to RISE with SAP. It helps businesses effectively manage database growth and optimize overall costs. Before migrating to S/4HANA, archiving reduces migration expenses, minimizes downtime, and lowers risk by decreasing data volume. After moving to S/4HANA, it helps control operational costs and ensures optimal system performance. Additionally, businesses can decommission legacy SAP ECC systems, eliminating unnecessary expenses while retaining access to historical data @@ -44 +47 @@ You can create a CloudFront distribution in your AWS account, and connect it via -To improve user experience in the application, you can use [Accelerated Site-to-Site VPN connections](https://docs.aws.amazon.com/vpn/latest/s2svpn/accelerated-vpn.html). Traffic is routed from your on-premises network to an AWS edge location that is closest to your gateway device. AWS Global Accelerator optimizes the network path, using the AWS global network to route traffic to the endpoint that provides the best application performance. +Data archiving for structured data. Data archiving is about moving closed business transactions data from a live SAP systems to an offline or secondary storage. The key aspect of data archiving is to set a process and strategy to reduce manual efforts while ensuring compliance with legal data retention requirements. @@ -46 +49 @@ To improve user experience in the application, you can use [Accelerated Site-to- -## Data lake +Document management for unstructured data. The difference between data and document archiving is the type of data that you are archiving. Document archiving relates to unstructured data likes invoices, sales orders, delivery notes, and others, which usually come in the format such as pdf, words, excels. This archiving occurs in real-time and it can be stored on any content server and linked to the related SAP transactions. @@ -48 +51 @@ To improve user experience in the application, you can use [Accelerated Site-to- -Deploy [Amazon AppFlow](https://docs.aws.amazon.com/appflow/latest/userguide/what-is-appflow.html) to extract data out of SAP S/4HANA via `OData` protocol which can also be based ODP framework. The extraction result is stored in Amazon S3 data lake. This data can be further processed with [AWS Glue](https://docs.aws.amazon.com/glue/latest/dg/what-is-glue.html), Amazon Redshift, and Amazon Athena. Users can consume this data with Amazon QuickSight. The following image shows this scenario. +We shall discuss on the available options for your data archiving and document management systems within SAP. @@ -50 +53 @@ Deploy [Amazon AppFlow](https://docs.aws.amazon.com/appflow/latest/userguide/wha - +**Option 1 : SAP Content Server running on MaxDB** @@ -52 +55 @@ Deploy [Amazon AppFlow](https://docs.aws.amazon.com/appflow/latest/userguide/wha -**Data flow** +Many customers migrating to RISE with SAP choose to keep their SAP Content Server on AWS until they transition to [SAP BTP Document Management System](https://help.sap.com/docs/document-management-service?locale=en-US) or [OpenText Archiving solution](https://www.sap.com/documents/2015/08/5217be37-427c-0010-82c7-eda71af511fa.html). [SAP Content Server](https://help.sap.com/docs/document-management-service/sap-document-management-service/content-server) is a standalone component designed to store large volumes of electronic documents in various formats. These documents can be securely saved in one or more SAP MaxDB instances or within the file system. Common examples of documents stored in SAP Content Server include sales invoices, purchase orders, salary slips, emails, agreements, and others. This approach ensures seamless document management integrated into SAP business processes while maintaining accessibility and compliance. @@ -54 +57 @@ Deploy [Amazon AppFlow](https://docs.aws.amazon.com/appflow/latest/userguide/wha - 1. RISE with SAP VPC is connected to your AWS account not managed by SAP, via AWS Transit Gateway and Network Load Balancer. + @@ -56 +59 @@ Deploy [Amazon AppFlow](https://docs.aws.amazon.com/appflow/latest/userguide/wha - 2. Amazon AppFlow extracts data out of SAP S/4HANA via `OData` protocol. +Architecture Description @@ -58 +61 @@ Deploy [Amazon AppFlow](https://docs.aws.amazon.com/appflow/latest/userguide/wha - 3. _Raw_ data is stored in an Amazon S3 bucket. + 1. RISE with SAP VPC is connected to an AWS account which you managed via AWS Transit Gateway. @@ -60 +63 @@ Deploy [Amazon AppFlow](https://docs.aws.amazon.com/appflow/latest/userguide/wha - 4. AWS Glue performs transformation and cleansing of data. + 2. [SAP Content Server](https://help.sap.com/docs/SLTOOLSET/31c5526375554d1b9f4b339fc9012685/2548be9ba8fd4e8eb55ae6ae53b76782.html?version=CURRENT_VERSION) is setup in your AWS account and [configured](https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-US/4d/002cc784ed5c4be10000000a42189e/content.htm?no_cache=true) to serve as the destination for data archiving. @@ -62 +65 @@ Deploy [Amazon AppFlow](https://docs.aws.amazon.com/appflow/latest/userguide/wha - 5. _Transformed_ results are stored in another Amazon S3 bucket. + 3. SAP MaxDB is setup in your AWS account and [configured](https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-US/4d/002cc784ed5c4be10000000a42189e/content.htm?no_cache=true) to run on AWS EC2 instance. @@ -64 +67 @@ Deploy [Amazon AppFlow](https://docs.aws.amazon.com/appflow/latest/userguide/wha - 6. Amazon Redshift is used to further process the data through its data warehousing capability. + 4. [SAP Content Server High Availability](https://aws.amazon.com/blogs/awsforsap/sap-content-server-high-availability-using-amazon-efs-and-suse/) using Amazon EFS. You can consider [EFS Infrequent Access](https://aws.amazon.com/efs/features/infrequent-access/) for documents which are not frequently accessed. @@ -66 +68,0 @@ Deploy [Amazon AppFlow](https://docs.aws.amazon.com/appflow/latest/userguide/wha - 7. Amazon Athena is used to query the _transformed_ data in Amazon S3. @@ -68 +69,0 @@ Deploy [Amazon AppFlow](https://docs.aws.amazon.com/appflow/latest/userguide/wha - 8. User accesses data through Amazon QuickSight. @@ -70,0 +72 @@ Deploy [Amazon AppFlow](https://docs.aws.amazon.com/appflow/latest/userguide/wha +**Option 2: SAP Content Server on Amazon S3** SAP Content Server, along with [Amazon S3](https://aws.amazon.com/s3/) can both meet SAP Data Archiving needs by providing scalable and secure storage for archived data. They offer features like versioning, access control, immutability, and integration with SAP systems. This section is relevant for customers experiencing SAP database growth, seeking performance improvements, aiming to reduce storage costs, or needing to meet compliance requirements for long-term data retention in their SAP environment. @@ -71,0 +74 @@ Deploy [Amazon AppFlow](https://docs.aws.amazon.com/appflow/latest/userguide/wha +The following image shows an SAP Content Server integrated with Amazon S3. @@ -73 +76 @@ Deploy [Amazon AppFlow](https://docs.aws.amazon.com/appflow/latest/userguide/wha -For more information, see [Guidance for DataLake with SAP and non-SAP data on AWS](https://aws.amazon.com/solutions/guidance/datalake-with-sap-and-non-sap-data-on-aws/). + @@ -75 +78 @@ For more information, see [Guidance for DataLake with SAP and non-SAP data on AW -## Application integration +Architecture Description @@ -77 +80 @@ For more information, see [Guidance for DataLake with SAP and non-SAP data on AW -Deploy [Amazon API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/welcome.html) to extract data out of SAP S/4HANA via `HTTP` API. API Gateway can consume data from IDOC, BAPI, and RFC. These need to be translated to a web service call. For more information, see [AWS blogs](https://aws.amazon.com/blogs/awsforsap/category/application-services/amazon-api-gateway-application-services/). The following image shows this scenario. + 1. RISE with SAP VPC is connected to an AWS account which you managed via AWS Transit Gateway. @@ -79 +82 @@ Deploy [Amazon API Gateway](https://docs.aws.amazon.com/apigateway/latest/develo - + 2. [SAP Content Server](https://help.sap.com/docs/SLTOOLSET/31c5526375554d1b9f4b339fc9012685/2548be9ba8fd4e8eb55ae6ae53b76782.html?version=CURRENT_VERSION) is setup in your AWS account and [configured](https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-US/4d/002cc784ed5c4be10000000a42189e/content.htm?no_cache=true) to serve as the destination for data archiving. @@ -81 +84 @@ Deploy [Amazon API Gateway](https://docs.aws.amazon.com/apigateway/latest/develo -**Data flow** + 3. The SAP Content Server integrates with [Amazon S3 File Gateway](https://aws.amazon.com/storagegateway/file/s3/), which acts as a storage gateway to facilitate file-based storage. [S3 File Gateway](https://aws.amazon.com/storagegateway/file/s3/) enables mounting of [Amazon S3](https://docs.aws.amazon.com/filegateway/latest/files3/GettingStartedAccessFileShare.html) as Network File System (NFS). @@ -83 +86 @@ Deploy [Amazon API Gateway](https://docs.aws.amazon.com/apigateway/latest/develo - 1. RISE with SAP VPC is connected to your AWS account not managed by SAP, via AWS Transit Gateway. + 4. An Amazon S3 bucket stores the necessary archive files. You can use [S3 Lifecycle configuration](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lifecycle-mgmt.html) to manage lifecycle of the objects. For enhanced data protection or regulatory compliance, you can implement [retention policies using S3 Object Lock](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock.html). You can move files to different S3 storage classes using automated Lifecycle Management. For more information, see [Using Amazon S3 storage classes](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-class-intro.html). @@ -85 +87,0 @@ Deploy [Amazon API Gateway](https://docs.aws.amazon.com/apigateway/latest/develo - 2. Amazon API Gateway is configured to route the authentication to AWS Lambda and Amazon Cognito @@ -87 +88,0 @@ Deploy [Amazon API Gateway](https://docs.aws.amazon.com/apigateway/latest/develo - 3. Amazon Cognito authenticates the session. @@ -89 +89,0 @@ Deploy [Amazon API Gateway](https://docs.aws.amazon.com/apigateway/latest/develo - 4. Once authenticated, Amazon API Gateway routes the package to AWS Lambda. @@ -91 +91 @@ Deploy [Amazon API Gateway](https://docs.aws.amazon.com/apigateway/latest/develo - 5. AWS Lambda stores the data in an Amazon S3 bucket. +SAP Content Server, in conjunction with Amazon S3, provides a mechanism for transferring archived data to long-term S3 storage such as [Amazon S3 Glacier](https://aws.amazon.com/s3/storage-classes/glacier/). This archived data can then be accessed using SAP’s standard archive read programs. @@ -92,0 +93 @@ Deploy [Amazon API Gateway](https://docs.aws.amazon.com/apigateway/latest/develo +However, if you require more extensive integration with SAP, third-party solutions like [Syntax CxLink](https://www.syntax.com/software/cxlink/) or [OpenText](https://www.sap.com/documents/2015/08/5217be37-427c-0010-82c7-eda71af511fa.html) offer additional libraries. These enhance the integration capabilities, providing more advanced functionalities for managing and accessing archived data directly within the SAP environment. For organizations employing SAP Information Lifecycle Management (ILM) to manage data retention and governance, see how [Syntax Cxlink for ILM](https://aws.amazon.com/blogs/apn/syntax-cxlink-for-ilm-simplify-sap-data-lifecycle-management-on-aws/) can enhance your ILM strategy by using Amazon S3 as a secondary storage solution for SAP ILM. This approach leverages the scalability and cost-effectiveness of cloud storage while maintaining the robust data management capabilities of SAP ILM. @@ -93,0 +95 @@ Deploy [Amazon API Gateway](https://docs.aws.amazon.com/apigateway/latest/develo +**Option 3: SAP OpenText Archiving in RISE** @@ -94,0 +97 @@ Deploy [Amazon API Gateway](https://docs.aws.amazon.com/apigateway/latest/develo +SAP OpenText Archiving is enabling secure document storage, compliance, and cost-efficient data management for RISE with SAP. SAP OpenText Archiving is a cloud-based document management and archiving solution that integrates with SAP to store, retrieve, and manage unstructured content (e.g., invoices, contracts, purchase orders). It ensures compliance with regulatory requirements, reduces database footprint, and optimizes SAP S/4HANA performance. Within RISE with SAP, OpenText is included as an optional component in the RISE BOM. @@ -96 +99 @@ Deploy [Amazon API Gateway](https://docs.aws.amazon.com/apigateway/latest/develo -## Document management +**Option 4: OpenText infoArchive for RISE** @@ -98 +101 @@ Deploy [Amazon API Gateway](https://docs.aws.amazon.com/apigateway/latest/develo -Deploy an SAP Content Server that is integrated with Amazon S3, to archive SAP documents and data. The following image shows this scenario with AWS services. +OpenText InfoArchive is a modern archive solution and cloud-based service for compliant archiving of both structured and unstructured information that is highly-accessible, scalable, and economical. It’s a centralized platform which enables flexible storage options for unstructured content, including storage on [Amazon Simple Storage Service (Amazon S3)](https://aws.amazon.com/s3/). InfoArchive Cloud Edition on AWS is offered as [customer-deployed](https://aws.amazon.com/blogs/apn/manage-your-business-complete-data-with-opentext-infoarchive-and-aws/) or as a managed solution by OpenText running on AWS. @@ -100 +103 @@ Deploy an SAP Content Server that is integrated with Amazon S3, to archive SAP d - +OpenText infoArchive is a general-purpose archiving platform designed to retire legacy SAP applications and store structured and unstructured data from multiple systems. This beyond supports SAP ECC, CRM, HR, and industry-specific systems (Healthcare, Banking, etc.) OpenText infoArchive can be used to Archive inactive data and decommission retired SAP legacy applications. This comes with pre-built SAP views. @@ -102 +105 @@ Deploy an SAP Content Server that is integrated with Amazon S3, to archive SAP d -**Data flow** +Key Features @@ -104 +107 @@ Deploy an SAP Content Server that is integrated with Amazon S3, to archive SAP d - 1. RISE with SAP VPC is connected to your AWS account not managed by SAP, via AWS Transit Gateway. + 1. Application Decommissioning – Retires legacy applications while keeping data accessible. @@ -106 +109 @@ Deploy an SAP Content Server that is integrated with Amazon S3, to archive SAP d - 2. SAP Content Server is installed in SAP S/4HANA as target storage for document and data archiving. + 2. Structured and Unstructured Data Archiving – Stores documents, emails, records, and databases. @@ -108 +111 @@ Deploy an SAP Content Server that is integrated with Amazon S3, to archive SAP d - 3. Amazon FSx File Gateway enables Amazon S3 to be mounted as NFS on SAP Content Server. + 3. Multi-System Support – Works with SAP, Oracle, Salesforce, Microsoft, and custom applications. @@ -110 +113 @@ Deploy an SAP Content Server that is integrated with Amazon S3, to archive SAP d - 4. Amazon S3 bucket stores the required archive files. + 4. Advanced Search & Analytics – Uses AI/ML for insights into archived data. @@ -112 +115 @@ Deploy an SAP Content Server that is integrated with Amazon S3, to archive SAP d - 5. You can move files to different Amazon S3 storage classes. For more information, see [Using Amazon S3 storage classes](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-class-intro.html). + 5. Regulatory Compliance – HIPAA, GDPR, SEC 17a-4, etc. @@ -117 +120 @@ Deploy an SAP Content Server that is integrated with Amazon S3, to archive SAP d -You can also deploy SAP BTP - Document Management Service on AWS to archive documents and data. The following image depicts this scenario: +You can deploy an OpenText infoArchive Server integrated with Amazon S3 for SAP data decommissioning. The following image shows this scenario with AWS services. OpenText InfoArchive on AWS is deployed on [Amazon Elastic Kubernetes Service](https://aws.amazon.com/eks/) (EKS) for hosting its web application, OpenText Directory Service for authentication and authorization, and the InfoArchive server. Customers can also procure it through [AWS marketplace](https://aws.amazon.com/marketplace/pp/prodview-srfvrykqva2zo?sr=0-1&ref_=beagle&applicationId=AWSMPContessa). @@ -119 +122 @@ You can also deploy SAP BTP - Document Management Service on AWS to archive docu - + @@ -121 +124 @@ You can also deploy SAP BTP - Document Management Service on AWS to archive docu -**Data flow** +Architecture Description @@ -123 +126 @@ You can also deploy SAP BTP - Document Management Service on AWS to archive docu - 1. RISE with SAP VPC is connected to your BTP through Cloud Connector. + 1. RISE with SAP VPC is connected to your AWS account via AWS Transit Gateway. @@ -125 +128 @@ You can also deploy SAP BTP - Document Management Service on AWS to archive docu - 2. The cloud connector reaches the BTP public endpoint on AWS. + 2. OpenText InfoArchive on AWS is deployed on [Amazon Elastic Kubernetes Service (Amazon EKS)](https://aws.amazon.com/eks/) in your AWS account and [configured](https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-US/4d/002cc784ed5c4be10000000a42189e/content.htm?no_cache=true) to serve as the destination for data archiving. @@ -127 +130 @@ You can also deploy SAP BTP - Document Management Service on AWS to archive docu - 3. SAP BTP Document management stores the required archive files from RISE with SAP. + 3. OpenText InfoArchive integrates with [Amazon S3 File Gateway](https://aws.amazon.com/storagegateway/file/s3/), which acts as a storage gateway to facilitate file-based storage. [S3 File Gateway](https://aws.amazon.com/storagegateway/file/s3/) enables mounting of [Amazon S3](https://docs.aws.amazon.com/filegateway/latest/files3/GettingStartedAccessFileShare.html) as Network File System (NFS). @@ -128,0 +132 @@ You can also deploy SAP BTP - Document Management Service on AWS to archive docu + 4. An Amazon S3 bucket stores the necessary archive files. You can use [S3 Lifecycle configuration](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lifecycle-mgmt.html) to manage lifecycle of the objects. For enhanced data protection or regulatory compliance, you can implement [retention policies using S3 Object Lock](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock.html). @@ -129,0 +134 @@ You can also deploy SAP BTP - Document Management Service on AWS to archive docu + 5. Older documents can be moved to [Amazon S3 Glacier](https://aws.amazon.com/s3/storage-classes/glacier/) for long-term archival. @@ -131,16 +136 @@ You can also deploy SAP BTP - Document Management Service on AWS to archive docu - -## Development and extension - -Deploy AWS SDK for SAP ABAP on RISE with SAP VPC to avail AWS services using the ABAP language. For more information, see [What is AWS SDK for SAP ABAP?](https://docs.aws.amazon.com/sdk-for-sapabap/latest/developer-guide/home.html) - -You can authenticate AWS SDK for SAP ABAP with IAM access key. The following image shows this scenario. - - - -**Data flow** - - 1. AWS SDK for SAP ABAP is installed via a set of transports in SAP S/4HANA within RISE with SAP VPC. - - 2. SAP S/4HANA is configured with IAM access key for authenticating access to AWS services. For more information, see [Managing access keys for IAM users](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). - - 3. Access to AWS services with AWS SDK for SAP ABAP has been established. + 6. You can move files to different Amazon S3 storage classes using automated Lifecycle Management. For more information, see Using [Amazon S3 storage classes](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-class-intro.html). @@ -158,0 +149,2 @@ Reliability