I have a saas product in my company where a user needs to upload his stl file. And we take that stl file and we do operations on it like finding blender-wall-thickness, material-anlaysis, complexity -analysis and save the stl in our database. Our server is hosted in ec2 and we are storing stls in s3. We are making docker containers then running this container in the ec2 while exposing one specific to each service.
Now one of our costomer does not want to upload his stl files in our s3 and ec2 instead they want to use their ec2 and s3 due to confidentiality reasons. How can we setup a system in their environment where their stl files does not leave their environment still uses our service. But We don't have to share our code .
If you are hosting your application on EC2, I think you can set up a cross-account role. https://repost.aws/knowledge-center/s3-instance-access-bucket
Hello, But our costomer does not want to upload his stl files in our ec2,s3 or in database due to confidentiality. They are saying they want to setup a server ,s3 and database on their own and use our service. But in any case we don't want to share the code. How to setup so that they call for the api to their ec2 and our source code does not get sacrificed.
You can set up something like PrivateLink to privately share APIs from your AWS account to your customers' AWS accounts. How about trying to deal with it here? https://docs.aws.amazon.com/vpc/latest/privatelink/what-is-privatelink.html