Attachment J1 - Library Business Managament System Architecture.pdf

PDF 325 KB Posted

Attached to
Process Application Development IDIQ
Solicitation number
030ADV26R0003
Issued by

View the file

Other files

Show all 20

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

VPC

Route 53

AWS Systems Manager

CloudWatch

CloudTrail

S3

Inspector

Config

SES

Standby RDS Multi-AZ Prod DB Server

SQL Server 2022

RDS Single-AZ Test DB Server SQL Server 2022

Prod Server Stage Server Test Server

Security Group Allow HTTPS from LOC Deny all other traffic other than known exceptions

(ABIS, RMS)

LOC HQABIS

RMS

Date: 05/02/25

*** Application Server Information SBM: v12.2 OS: Windows Server 2022 Datacenter CPU: Intel Xeon Platinum @2.5GHz 4 Cores, 8 Logical Processors

RAM: 32 GB

C: 64 GB free out of 100 GB D: 167 GB free of 199 GB

The Library's Human Capital Business Management platform shall be hosted on an AWS Government Cloud Platform-as-a-Service (PaaS) EC2 instance running Windows Server 2022 Datacenter operating system with SQL Server 2022 as the database server. The platform runs in 1 AWS availability zone which implies no failover capability. It shall be a web-based system that uses a standard Web browser on each end-user’s workstation/personal computer. The system shall connect to a database server to save and retrieve end user information. The database server contains the Library's data stored in the business management system database and its tables. The end-user’s browser is the main interface that shall be used in the business management system software.

The LOC end-user’s browser shall interface with the business management system software over HTTPS port 443. This shall be accomplished using the internet over an encrypted channel direct from LCDN and the Library business management platform GovCloud Virtual Private Cloud (VPC) VPN gateway. Access shall not be authorized from the public internet. The VPC, Operating System and the business management platform shall be the responsibility of vendor from a security authorization viewpoint.

The workflows and data shall be the responsibility of the Library. Network controls are partially inherited from LCDN and AWS Gov Cloud, and the vendor shall be responsible for configuration and operations. LCUCE shall be responsible for the user workstations.

The Library users shall authenticate using an Identity provider with access to Active Directory with account details. Roles and privileges are provided via groups into business management system groups which enforces role-based -access-control (RBAC). The privileges inherited from the groups will determine workflows to which the user will have access.

Attachment J1 - Library Business Management System Architecture 6/23/2025

LoC - SBM Cloud Architecture Diagram_050225 SCRUBBED.vsdx
Page-1

File details come from the government source that posted it. Updated .