AWS solutions documentation change
Summary
Updated cost tables to include more resources (e.g., Glue Catalog, Audit, encrypted buckets) and removed specific KMS cost references. Added detailed cost breakdowns for Basic Data Lake and Data Science setups.
Security assessment
The change highlights encryption at rest for Glue Catalog and encrypted data lake buckets, which are security features. However, there is no evidence of addressing a specific security vulnerability.
Diff
diff --git a/solutions/latest/modern-data-architecture-accelerator/cost.md b/solutions/latest/modern-data-architecture-accelerator/cost.md index 194eebd8b..f5d7d51ee 100644 --- a//solutions/latest/modern-data-architecture-accelerator/cost.md +++ b//solutions/latest/modern-data-architecture-accelerator/cost.md @@ -9 +9 @@ Example cost tables -You are responsible for the cost of AWS services used while running this solution. As of April 2025, costs primarily depend on the resources used, data processed, transferred, and stored. At minimum, the solution requires S3, IAM, and KMS. Only KMS has a monthly charge. +You are responsible for the cost of AWS services used while running this solution. As of April 2025, costs primarily depend on the resources used, data processed, transferred, and stored. @@ -25,17 +25,23 @@ The following samples are based on the options from the installer CloudFormation -### Option 1: Sample Basic Data Lake - -When deploying this solution using the CDK code, adding Transfer Family. - -AWS service | Hourly cost [USD] | Monthly cost [USD] ----|---|--- -Amazon KMS | N/A | $1.00 -Total | **N/A** * | **$1.00** * - -### Option 2: Data Science setup - -AWS service | Hourly cost | Monthly cost [USD] ----|---|--- -Amazon KMS | N/A | $1.00 -Total | **N/A** * | **$1.00** * - -*Your final cost depends the usage of the resources. For example, the table does not include KMS request costs, or data transfer costs for S3 or for VPC. +### Basic Data Lake + +Resources | Monthly cost [USD] +---|--- +**Glue Catalog** \- Configures the Encryption at Rest settings for Glue Catalog at the account level. Additionally, configures Glue catalogs for cross account access required by a Data Mesh architecture. | $0.90 +**Audit** \- Configures and deploys Audit resources to use as target for audit data and for querying audit data via Athena | $0.90 +**Datalake KMS and Buckets** \- Configures and deploys a set of encrypted data lake buckets and bucket policies. Bucket policies are suitable for direct access via IAM and/or federated roles, as well as indirect access via LakeFormation/Athena. | $0.90 +**Athena Workgroup** \- Configures and deploys Athena Workgroups for use on the Data Lake | $0.90 +**Data Science Team/Project** \- Deploys resource to support a team’s Data Science activities | $0.90 +**Total** | **$4.50** * + +### Data Science setup + +Resources | Monthly cost [USD] +---|--- +**Glue Catalog** \- Configures the Encryption at Rest settings for Glue Catalog at the account level. Additionally, configures Glue catalogs for cross account access required by a Data Mesh architecture. | $0.90 +**Audit** \- Configures and deploys Audit resources to use as target for audit data and for querying audit data via Athena | $0.90 +**Datalake KMS and Buckets** \- Configures and deploys a set of encrypted data lake buckets and bucket policies. Bucket policies are suitable for direct access via IAM and/or federated roles, as well as indirect access via LakeFormation/Athena. | $0.90 +**Athena Workgroup** \- Configures and deploys Athena Workgroups for use on the Data Lake | $0.90 +**Data Science Team/Project** \- Deploys resource to support a team’s Data Science activities | $0.90 +**Total** | **$5.40** * + +*Your final cost depends the usage of the resources. Estimates above does not account for customer’s workloads.