Installing DSG on AWS

This section describes the process for launching a DSG instance on Amazon Web Services (AWS).

AWS is a cloud-based computing service. It provides several services, such as, computing power through Amazon Elastic Compute Cloud (EC2), storage through Amazon Simple Storage Service (S3), and so on. The AWS stores Amazon Machine images (AMIs), which are templates or virtual images containing an operating system, applications, and configuration settings.

Prerequisites

This section describes the prerequisites for launching and installing the DSG on AWS. It also includes the information for the audience, network prerequisites, and hardware and software requirements for the DSG.

Ensure that the following prerequisites are met before launching the DSG on AWS:

• Ensure that an ESA v10.1.x is installed.

  For more information about installing the ESA v10.1.x, refer to the sections Installing Appliance On-Premise and Installing Appliances on Cloud Platforms.

• Ensure that Policy Management (PIM) has been initialized on the ESA. The initialization of PIM ensures that cryptographic keys for protecting data and the policy repository have been created.
  For more information about initializing the PIM, refer to section Initializing the Policy Management.

• Ensure that the FIPS mode is disabled on the ESA.
  For more information about diabling the FIPS mode, refer to the section Disabling the FIPS Mode

• Ensure that Analytics component is initialized on the ESA. The initialization of Analytics component is required for displaying the Audit Store information on Audit Store Dashboards.
  For more information about initializing Analytics, refer Initializing Analytics on the ESA.

• An Amazon account for using AWS is available with the following information:

  • Login URL for the AWS account
  • Authentication credentials for the AWS account

Audience

This section contains information for stakeholders who are interested in understanding how to create, launch, and install a DSG instance on AWS.

It is recommended that you understand and use Amazon Web Services and its related concepts.

For more information about the Amazon Web Services concepts, refer to the AWS documentation at https://docs.aws.amazon.com.

Hardware Requirements

This section describes the hardware requirements for the DSG.

As the Protegrity appliances are hosted and run on AWS, the hardware requirements are dependent on the configurations provided by Amazon.

For reference, the following list describes the minimum hardware requirements for the DSG:

• CPU: 4 Cores
• RAM: 16 GB
• Disk Size: 64 GB
• Network Interfaces: 2

The hardware configuration required might vary based on the actual usage or amount of data and logs expected.

Network Requirements

This section describes the network requirements for a DSG instance on AWS.

It is recommended that the DSG on AWS must be installed in the Amazon Virtual Private Cloud (VPC) networking environment.

For more information about the Amazon Virtual Private Cloud, refer to the documentation at: http://docs.aws.amazon.com.

Ensure that two Network Interface Cards (NICs) are added during the DSG instance creation on AWS.

For more information about the network interface requirements, refer to the section Network Planning.

The Data Security Gateway must be configured with the following two network interfaces:

• Management Interface - This interface is used for communication between the ESA and the DSG, and accessing the DSG Web UI.
• Service Interface - This interface is used for handling the network traffic traversing through the DSG.

Installing the DSG on AWS

This section provides information for the steps required to launch and install the Data Security Gateway (DSG) instance from an AMI provided by Protegrity.

Ensure that the installation order provided in the table is followed.