Attachment J1 - Library Business Managament System Architecture.pdf
PDF 325 KB Posted
- Attached to
- Process Application Development IDIQ
- Solicitation number
- 030ADV26R0003
- Issued by
-
Library of Congress
View the file
Other files
Show all 20
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
VPC
Route 53
AWS Systems Manager
CloudWatch
CloudTrail
S3
Inspector
Config
SES
Standby RDS Multi-AZ Prod DB Server
SQL Server 2022
RDS Single-AZ Test DB Server SQL Server 2022
Prod Server Stage Server Test Server
Security Group Allow HTTPS from LOC Deny all other traffic other than known exceptions
(ABIS, RMS)
LOC HQABIS
RMS
Date: 05/02/25
*** Application Server Information SBM: v12.2 OS: Windows Server 2022 Datacenter CPU: Intel Xeon Platinum @2.5GHz 4 Cores, 8 Logical Processors
RAM: 32 GB
C: 64 GB free out of 100 GB D: 167 GB free of 199 GB
The Library's Human Capital Business Management platform shall be hosted on an AWS Government Cloud Platform-as-a-Service (PaaS) EC2 instance running Windows Server 2022 Datacenter operating system with SQL Server 2022 as the database server. The platform runs in 1 AWS availability zone which implies no failover capability. It shall be a web-based system that uses a standard Web browser on each end-user’s workstation/personal computer. The system shall connect to a database server to save and retrieve end user information. The database server contains the Library's data stored in the business management system database and its tables. The end-user’s browser is the main interface that shall be used in the business management system software.
The LOC end-user’s browser shall interface with the business management system software over HTTPS port 443. This shall be accomplished using the internet over an encrypted channel direct from LCDN and the Library business management platform GovCloud Virtual Private Cloud (VPC) VPN gateway. Access shall not be authorized from the public internet. The VPC, Operating System and the business management platform shall be the responsibility of vendor from a security authorization viewpoint.
The workflows and data shall be the responsibility of the Library. Network controls are partially inherited from LCDN and AWS Gov Cloud, and the vendor shall be responsible for configuration and operations. LCUCE shall be responsible for the user workstations.
The Library users shall authenticate using an Identity provider with access to Active Directory with account details. Roles and privileges are provided via groups into business management system groups which enforces role-based -access-control (RBAC). The privileges inherited from the groups will determine workflows to which the user will have access.
Attachment J1 - Library Business Management System Architecture 6/23/2025
| LoC - SBM Cloud Architecture Diagram_050225 SCRUBBED.vsdx |
| Page-1 |
File details come from the government source that posted it. Updated .