AZ
Availability Zone
EC2
Amazon Elastic Compute Cloud
HIPAA
Health Insurance Portability and Accountability Act
PCI DSS
Payment Card Industry Data Security Standard
FAQs for As-a-Service in the cloud
Availability
Yes. Teradata will use commercially reasonable efforts to make Vantage on AWS systems generally available 7 x 24 x 365. Teradata targets a Service Level Agreement (SLA) (excluding planned downtime) of 99.9% measured monthly. Please consult the Cloud Service Description for more details.
Teradata Vantage is configured to use Fallback protection on all tables. Fallback provides a layer of protection that extends beyond just a loss of redundant hardware. With Fallback, a secondary copy of data exists on a different node. The system will go through a restart and once the failed infrastructure is replaced or restored, Vantage will rebuild using the Fallback data copies.
Some scaling operations may be accomplished immediately with no downtime (e.g., using Elastic Performance on Demand, or EPOD), and other scaling operations require just a brief restart and no data redistribution.
For permanent system expansion, Teradata systems are available for read-only operations during which users cannot load or change data but can continue to run queries and reports. When the new resources are ready, there will be a few minutes of scheduled downtime to transition from the former to new resources.
Your as-a-service systems are backed up daily by default. The two most recent backup copies are replicated to a secondary storage environment, typically Amazon S3.
Yes. The “sysback” user in Vantage is used to perform backups. To change passwords for the “sysback” account, users must coordinate with Teradata Cloud Operations via a change management ticket in the Console to ensure uninterrupted backups.
Simply place a request for restore (either at table, database, or full system level) via the Console.
Connectivity
Choose from several methods for connecting to a Vantage on AWS system. Teradata recommends AWS Transit Gateway, which enables users to access their as-a-service account privately and securely. Customers may also use AWS PrivateLink, AWS Direct Connect and Virtual Private Network (VPN).
Yes. Please follow the steps you see when you click the "i" icon on the PrivateLink widget in the Console. The steps need to be performed in the AWS Account via the AWS console.
Yes. Included in the as-a-service subscription price is a 100Mbps site-to-site VPN configuration via publicly-routable IP addresses. This method can be used to connect the as-a-service system and a corporate network using a VPN in which an on-premises firewall/router is used to terminate the IPsec site-to-site tunnel connection, which encrypts all data.
Along with the 100Mbps site-to-site VPN, also included in the price is 1% (of system size) for data transfer out of the AWS region / VPC. Additional transfers incur additional costs (a pass-through of the AWS egress charges).
Whether or not a workload will need more bandwidth than 100Mbps depends on how much data is expected to be moving into or out of the as-a-service system. Follow this link for a simple calculator to help understand data transfer bandwidth needs better.
Please also note that while site-to-site VPN connections over the Internet are secure, actual bandwidth will vary. For guaranteed bandwidth, users will need to use a dedicated private circuit as described above.
A Teradata site-to-site VPN form must be submitted to Teradata Cloud Operations before a VPN tunnel can be established. This form is given to customers by the Teradata team upon order placement. Two global public IPs are required for routing return traffic on the site-to-site VPN.
Upon provisioning an as-a-service Vantage system, instructions will be provided on how to access the environment. Users receive a list of IP addresses to their database system(s), Viewpoint server, and utilities server along with instructions on how to access each one. The Viewpoint and utility servers will be preconfigured to access database system(s) from within the user’s Vantage system.
External IP addresses will be provided to access database systems directly from servers or desktops within an internal network, and download Teradata Tools & Utilities.
Database access to Teradata is available through any of the following drivers and utilities:
Console
The Console is an easy-to-use web interface for monitoring and managing as-a-service systems. There is no additional charge for the Console and all as-a-service deployment types and regions are supported.
Console credentials will be sent to users via email once an as-a-service account is created. Upon receiving and changing credentials per the instructions in the email, users can log in to the Console using a Chrome web browser.
You can find information about the Console right in the Console itself. Just click the "i" icons.
Existing as-a-service customers can use their Teradata Support credentials to log in to the management web console via Chrome. New customers are provided with credentials once their systems have been set up and are ready to use.
Available features include:
Service owners and access managers are able to assign users to specific roles with limited access.
Yes, users may use both options to open/update/monitor support tickets. The Console provides a more filtered, simpler view of tickets; for detailed views, click on a ticket to open it in ServiceNow.
Customers can leverage existing Teradata Support channels or open a new request using the Support ticketing section of the Console.
Most system and database metrics are received and aggregated in 5-minute intervals.
The Backup section displays all registered backup jobs as well as the ability to edit the parameters of the backups. The most recent backup event logs are also available from this view. Backups can have weekly reports sent every Wednesday to the email assigned to the Technical Contact role registered in ServiceNow; submit a new service ticket to opt in to this weekly backup report.
Data Loading
Data loads are accomplished in the following ways:
Portable storage devices from AWS can be used to transfer large amounts of data into an as-a-service environment. Please review the Cloud Import/Export document available from the Cloud Service Desk for further details. Teradata Parallel Transporter can load data files in delimited or fixed width formats.
General
Yes, Teradata Vantage on AWS is a managed cloud service for analytics at scale. It provides secure, scalable, single-tenant environments in which Teradata provisions and maintains the Vantage system in Amazon Web Services so that customers can focus on answers, not IT. Consuming as-a-service enables users to get going quickly while scaling as they evolve.
As-a-service consumption of Vantage was designed from the ground up to deliver business benefits in four critical areas:
Teradata Vantage on AWS features are comprehensive:
For a complete explanation of what comes with Vantage on AWS, refer to the Cloud Service Description.
Customers use Teradata as-a-service offers for Vantage for all the same use cases as other Teradata deployment options:
Go to the Customers section to read success stories and watch customer testimonials.
By default, Vantage on AWS is deployed in a Teradata-owned AWS account dedicated to the customer. Teradata provisions and manages the AWS compute and storage resources as part of the complete as-a-service solution. By exception, Vantage can be deployed as an AWS Managed Application in a customer-owned AWS account as described in this document.
Vantage on AWS is available from many AWS regions across the globe:
Australia
Bahrain
Canada
France
Germany
Hong Kong
Ireland
Japan
Korea
Singapore
Sweden
United Kingdom
United States
Vantage on AWS has Limited Availability from these Azure regions:
Brazil
India
Italy
South Africa
United States
As-a-service delivery of Teradata Vantage offers the most performant and secure analytics platform in the cloud, enabling users to get going quickly and scale as they evolve. Because Teradata manages the environment and guarantees system availability, internal teams can save time, focus on delivering actionable insights, and get the most value from the organization’s investment. Plus, customers have the option to pay only for what they provision with flexible capacity pricing or pay only for what’s used with Consumption (pay-as-you-go) pricing.
When contemplating alternatives for enterprise analytics in the cloud, it’s easy to become distracted by bold claims about cloud benefits yet lose sight of the original business requirement: getting answers from data leading to better business outcomes. Teradata recommends selecting a portable solution that can support both current and future hybrid cloud needs and does not require internal teams to re-code, re-train, or re-orient the company’s entire analytic ecosystem.
Operations
The Cloud Operations team performs activities such as:
Cloud Operations continually monitors and administers the as-a-service environments to help ensure security, availability, backups, and data recovery.
No. Database Administrator services are typically the responsibility of the customer, but, customers are welcome to engage with Teradata Services to perform DBA and other value-add activities.
The Console is the web-based interface for monitoring and adjusting resource allocation for a system at the account level. Teradata Viewpoint is the primary operational view for monitoring and managing cloud systems. This instance of Viewpoint can only monitor as-a-service based systems.
The Console enables users to:
To learn more about the Console, consult the Console section in these FAQs.
Cloud Operations monitors platform availability, backups, and security of the as-a-service environment.
Complete support for hardware and software is provided by the Teradata Cloud Operations team, which will inform customers when updates to Teradata software or operating systems are recommended. Cloud Operations will coordinate incidents and change control with users (for implementation of software updates) as required. Note: testing of software updates is the customer’s responsibility.
As-a-service system(s) will not be available when software maintenance is performed on systems during a planned maintenance window. Customers will receive ample notice prior to such planned maintenance taking place.
No. The Cloud Operations team does not have visibility or access to customer data or backups.
No. Customer data is never transferred across country borders.
Performance
Performance and storage limits for Vantage on AWS are as follows:
Fallback and compression are enabled by default for all user tables. Actual compression rates will vary depending on data demographics — however rates of 3X or higher are common.
All new as-a-service subscriptions support Teradata Vantage.
The minimum number of instances that can be specified in a single Vantage on AWS system is two.
Easy. As-a-service systems are elastic in that they can be scaled up and down (adjusting size of compute instances) and/or scaled out and in (adjusting number of compute instances) depending on resource availability. The Console is the web-based interface for monitoring and adjusting flexible system capacity.
Security
Security is the number one priority when it comes to the as-a-service environments that Teradata provisions and maintains for customers. Teradata delivers across-the-board support for every facet of cloud security including physical security, network security, data protection, monitoring, and access controls.
The Teradata service architecture was designed to comply with – and is successfully audited annually for – strict international standards including:
The Information Security Management System gets annual third-party verification to ensure compliance with standards. These audit reports and the latest certifications are available upon request.
Yes. Teradata invests in rigorous third-party audits of our as-a-service offerings to demonstrate compliance with industry security regulations and industry best practices such as GDPR, PCI, HIPAA, ISO 27001, and SOC 1 and 2.
Please visit the Cloud Security page for more information. Read the press release on 3rd party audits for security and compliance.
As-a-service systems are LDAP ready. By default, systems will use a native database authentication method.
In Teradata Vantage, users DBC (superuser), SYSDBA (database management), and SECADM (security administration) are provided with TD2 authentication and default passwords. It is important for users to change passwords as soon as they can access the system. User SYSBACK is created on all Teradata systems and its password is secured by Cloud Operations. The SYSBACK user’s password should not be changed because it is used to execute daily backup operations on the system.
No. The Teradata Cloud Operations team does not have visibility or access to customer data.
No. Customer data is never transferred across country borders.
Support
Teradata provides easy-to-follow documentation for understanding, getting started, and using Vantage on AWS on the following pages:
Teradata provides Cloud Service Desk services 7 x 24 x 365 at 1-877-MY-TDATA (1-877-698-3282).
The Console and the Teradata Cloud Service Portal are also available 7 x 24 x 365 for the submission of incidents, changes, and requests for information.
Business Day: Monday-Friday 9:00 AM EST-8:00 PM EST.
Next Business Day: Example: If a S2 or S3 incident is opened in the Teradata Cloud Service Portal after 8:00 PM EST on Friday, Teradata Staff will respond to this incident on Monday at 9:00 AM EST.
Up to five (5) customer users will be provided with access to the Console and Teradata Cloud Service Portal for submitting requests for information and tracking incidents and changes.
TCore-Hours
If a Block of TCore-Hours is drawn down to zero, Teradata will suspend the relevant system for 30 days, after which that site will be deleted. During the time that the system is suspended, users can reinstate it by ordering more TCore-Hours. After that 30-day period, customers will have to order a new as-a-service system and reload the data.
AZ
Availability Zone
EC2
Amazon Elastic Compute Cloud
HIPAA
Health Insurance Portability and Accountability Act
PCI DSS
Payment Card Industry Data Security Standard
CDS
Customer Data Space
EDP
Enterprise Discount Program
IAM
Identify and Access Management
S3
Amazon Simple Storage Service
EBS
Amazon Elastic Block Store
GDPR
General Data Protection Regulation
ISO
International Organization for Standardization
VPC
Virtual Private Cloud