The multi-tenant nature of SaaS solutions requires a heightened focus on ensuring that every effort is made to isolate tenant resources. The multi-architecture model you choose, the AWS services that you're employing, the nature of your domain—they all can shape and influence your approach to isolation. Understanding which strategies to employ and which AWS services can help is essential to constructing secure SaaS solutions on AWS.
SaaS Tenant Isolation Architectures
This paper covers the different SaaS deployment models and the combination of AWS services and AWS Partner Network (APN) partner solutions that can be used to achieve a scalable, available, secure, performant, and cost-effective SaaS offering. AWS now offers a structured AWS SaaS Partner Program to help you build, launch, and grow SaaS solutions on AWS. As your business evolves, AWS will be there to provide the business and technical enablement support you need.
Modeling SaaS Tenant Profiles on AWS
This blog post examines some of the considerations that go into capturing data on your tenants with an emphasis on identifying some of the key areas that could shape your system’s architecture. The landscape of possibilities here is broad, with the goal of to providing a glimpse of some of the factors that you may include in a broader assessment of your tenant profile.
AWS SaaS Factory Architecture Track: Tenant Isolation
The goal of this course is to examine the competing forces that influence different isolation strategies, weighing the pros and cons of each approach. This highlights how each of these models are realized on AWS and outlines mechanisms that can be used to prevent cross-tenant access.