SaaS Lens AWS Well-Architected Framework SaaS Lens AWS Well-Architected Framework SaaS Lens: AWS Well-Architected Framework Copyright © Amazon Web Services, Inc. and/or its affiliates. All rights reserved. Amazon's trademarks and trade dress may not be used in connection with any product or service that is not Amazon's, in any manner that is likely to cause confusion among customers, or in any manner that disparages or discredits Amazon. All other trademarks not owned by Amazon are the property of their respective owners, who may or may not be affiliated with, connected to, or sponsored by Amazon. SaaS Lens AWS Well-Architected Framework Table of Contents Abstract and Introduction ................................................................................................................... 1 Abstract .................................................................................................................................... 1 Introduction .............................................................................................................................. 1 Definitions ......................................................................................................................................... 2 Tenant ...................................................................................................................................... 2 Silo, Pool, and Bridge Models ...................................................................................................... 2 SaaS Identity ............................................................................................................................. 3 Tenant Isolation ......................................................................................................................... 3 Data Partitioning ........................................................................................................................ 3 Noisy Neighbor .......................................................................................................................... 4 Tenant Onboarding .................................................................................................................... 4 Tenant Tiers .............................................................................................................................. 4 Tenant Activity and Consumption ................................................................................................. 4 Metering and Billing ........................................................................................................... 4 Tenant-Aware Operations ............................................................................................................ 5 General Design Principles .................................................................................................................... 6 Scenarios ........................................................................................................................................... 8 Serverless SaaS .......................................................................................................................... 8 Preventing Cross Tenant Access ........................................................................................... 9 Layers Hide Tenant Details ................................................................................................ 10 Amazon EKS SaaS .................................................................................................................... 11 Full Stack Isolation ................................................................................................................... 14 Unified Onboarding, Management, and Operations ............................................................... 15 Hybrid SaaS Deployment ........................................................................................................... 16 Multi-Tenant Microservices ........................................................................................................ 17 Tenant Insights ........................................................................................................................ 18 The Pillars of the Well-Architected Framework ..................................................................................... 20 Operational Excellence Pillar ...................................................................................................... 20 Design Principles .............................................................................................................. 20 Definition ........................................................................................................................ 20 Best Practices .................................................................................................................. 21 Resources ........................................................................................................................ 26 Security Pillar .......................................................................................................................... 26 Design Principles .............................................................................................................. 26 Definition ........................................................................................................................ 26 Best Practices .................................................................................................................. 27 Resources ....................................................................................................................... 36 Reliability Pillar ........................................................................................................................ 37 Design Principles .............................................................................................................. 37 Definition ........................................................................................................................ 37 Best Practices .................................................................................................................. 37 Resources ........................................................................................................................ 41 Performance Efficiency Pillar ..................................................................................................... 41 Definition ........................................................................................................................ 41 Best Practices .................................................................................................................. 42 Resources ........................................................................................................................ 46 Cost Optimization Pillar ............................................................................................................ 46 Definition ........................................................................................................................ 47 Best Practices .................................................................................................................. 47 Resources ........................................................................................................................ 51 Conclusion ....................................................................................................................................... 52 Contributors .................................................................................................................................... 53 Document Revisions .......................................................................................................................... 54 Notices ............................................................................................................................................ 55 iii SaaS Lens AWS Well-Architected Framework Abstract SaaS Lens Publication date: December 3, 2020 (Document Revisions (p. 54)) Abstract This paper describes the SaaS Lens for the AWS Well-Architected Framework, which enables customers to review and improve their cloud-based architectures and better understand the business impact of their design decisions. We address general design principles as well as specific best practices and guidance in five conceptual areas that we define as the pillars of the Well-Architected Framework. Introduction The AWS Well-Architected Framework helps you understand the pros and cons of decisions you make while building systems on AWS. By using the Framework you will learn architectural best practices for designing and operating reliable, secure, efficient, and cost-effective systems in the cloud. It provides a way for you to consistently measure your architectures against best practices and identify areas for improvement. We believe that having well-architected systems greatly increases the likelihood of business success. In this “Lens” we focus on how to design, deploy, and architect your multi-tenant software as a service (SaaS) application workloads in the AWS Cloud. For brevity, we have only covered details from the Well- Architected Framework that are specific to SaaS workloads. You should still consider best practices and questions that have not been included in this document when designing your architecture. We recommend that you read the AWS Well-Architected Framework whitepaper.