メインコンテンツまでスキップ

BYOC on AWS: Cloud Resource Preparation

This guide is a reference for cloud administrators preparing the AWS resources a VeloDB Cloud BYOC warehouse needs. How much you prepare depends on the deployment option:

  • New VPC: You run a VeloDB-provided CloudFormation template in your own AWS account that creates the VPC and all other resources. You only need an AWS account with the IAM permissions to create the stack, so you can skip these pages.
  • Existing VPC: You run the same template into a VPC you already have, and the template creates the remaining resources. You do not prepare credentials, networks, or other resources. You only need to confirm that your VPC and subnets meet the network requirements in VPC and subnets.
  • Custom Infrastructure: You prepare and manage all of the resources yourself, then register them in the console as a Credential configuration, a Network configuration, and, optionally, an Encryption key configuration.

Configurations​

The console's Cloud Resources page has one tab for each configuration type. Prepare the AWS resources behind each, then register the configuration:

  • Credential configuration: the S3 bucket and IAM roles a warehouse uses to read and write storage, and the cross-account role that lets VeloDB Cloud deploy compute in your account.
  • Network configuration: the VPC, subnets, security groups, and private endpoints where the warehouse runs.
  • Encryption keys configuration: the AWS KMS keys for TDE and EBS encryption. Encryption keys apply only to the Custom Infrastructure option.

Two ways to prepare cloud resources​

For Custom Infrastructure, you create these configurations in either of two ways:

  • Create the configurations ahead of time from the Cloud Resources page.
  • Create the configurations while creating a warehouse with the Custom Infrastructure option. Select an existing configuration or add a new one on the spot.

Either way, the configuration is saved and can be reused by other warehouses.

Open the Cloud Resources page​

The console has two navigation scopes, each with its own left-hand menu: an organization view and a warehouse view. The Cloud Resources page is in the organization view.

  1. In the upper-left corner, click your organization name (for example, velodb20) to switch to the organization view. In this view, the warehouse selector shows All Warehouses.
  2. In the left navigation, click Cloud Resources.
  3. Use the Credential Configuration, Network Configuration, and Encryption Keys Configuration tabs to view existing configurations, or click Add New Configuration to add one.

The Cloud Resources page is available to organization administrators.