Amazon Web Services - FAQs
Introduction
These FAQs provide an overview of the CSUN AWS Cloud Platform (CSUN AWS).
CSUN Information Technology has embarked on a hybrid cloud strategy that enables CSUN to transition to the cloud. The CSUN AWS Cloud Platform provides the necessary baseline infrastructure for utilizing AWS cloud services while securely integrating with CSUN’s on-premise data centers.
CSUN AWS is an extension of CSUN’s on-premise network and datacenter. Users have the ability to seamlessly integrate and access resources between the on-premise and CSUN AWS environments. Users already familiar with AWS will not notice a difference after logging in to their CSUN AWS account. Lastly, users will not have to agree to AWS Terms and Conditions when the account is created.
Requesting a CSUN AWS account is easy! CSUN AWS is integrated with CSUN's standard procurement process using purchasing orders (POs). Users need to have an approved PO from their respective department/college before a new CSUN AWS account can be requested. CSUN IT will work with the user to estimate cost and provide a quote that will be used to issue a PO. Once the PO is approved, navigate to the account request.
CSUN AWS is integrated with CSUN's single sign-on (SSO) process. Users can log in to their CSUN AWS account by going to account login page. Users are requested to enter their CSUN issued user ID and password to log in.
Users can navigate to the guest access page and select ‘Guest Access’ to grant others access to their CSUN AWS account. Access can only be granted to valid CSUN accounts.
The user who requested the account (account owner) has access to the account. Additionally, anyone the account owner shares access with will gain access to the account. CSUN IT does not have access to your AWS account unless explicit permission is granted.
CSUN AWS is integrated with CSUN’s single sign-on platform (SSO) for authentication. Users are not allowed to create or log in through local user account created within CSUN AWS account. CSUN AWS security audit logs (CloudTrails logs) are sent to central security account for auditing purposes if/when required.
Each CSUN AWS Account comes pre-configured with four subnets. These subnets are split across two availability zones (AZ, refers to AWS datacenter). Two subnets are labeled ‘public’ – meaning these subnets have access to the internet (outbound), while two subnets are labeled ‘private’ – meaning these subnets have access to campus datacenter network, but not internet access.
From an end user console experience, CSUN AWS is identical to an AWS account. However, several key differences are listed below:
- By default, users can use services under the Oregon region. If other regions are required, please contact the IT Help Center.
- Users are not allowed to create local users (IAM user) or to create custom roles or policies. If the default access does not meet the needs, please contact the IT Help Center.
- Users have limited access to network services under AWS. For example, users are not allowed to modify/delete/create VPCs, subnets, internet gateways (IGWs) etc. If the default network configuration does not meet your needs, please contact the IT Help Center.
- CSUN AWS allows for ease of payment and cost tracking.
- Tied to CSUN's purchasing department using POs. No P Card or credit card needed.
- CSUN AWS has pre-established security and technical configurations consistent with CSU guidelines.
- CSUN AWS users can contact CSUN IT to estimate costs or help architect the environment.
- Connected to CSUN's in-campus network.
- No need to agree to AWS Terms and Conditions.
Yes! The account can be used as soon as the CSUN AWS account is created. Users receive a notification email with their account details. At that point, The CSUN AWS account is ready for use. If there are any questions or issues, please contact the IT Help Center.
CSUN AWS is integrated with CSUN's standard procurement process using purchasing orders (POs). During the account creation process, the CSUN AWS account is linked to a CSUN issued PO. Every month, the respective CSUN Accounts Payable department will receive a bill. The respective accounts payable team will charge the PO tied to a particular CSUN AWS account.
Yes. Users can view and track their CSUN AWS charges directly under their CSUN account by going to the ‘Billing’ service. Users are able to create budgets, set-up notifications and run reports.
Purchase Order questions should be directed to your department or Contact Purchasing & Contracts Administration at (818) 677-2301 or via email at purch@csun.edu for assistance with Purchase Order (PO) creation and processing.