Control Plane

The control plane, or the Ahana SaaS Console, is hosted by Ahana in an Ahana-owned AWS account. The control plane in Ahana's AWS account communicates to a Compute Plane in the user's AWS account through an authenticated EKS API connection by assuming the Ahana Provisioning Role.

The illustration shows the VPC that contains the Ahana Console control plane in Ahana's AWS account in the top pane, and the VPC containing the Compute Plane in your AWS account in the bottom pane. The line between the two VPCs represents the data separation of the control plane and the compute plane.

Use the control plane to provision your Compute Plane and Presto clusters into your Compute Plane in your AWS account. For more information see Set Up the Ahana Compute Plane and Presto Cluster Overview.

The control plane is also used to manage data source connectors for data sources, and Presto users. For more information see Data Sources Overview and Presto Users Overview. Both the data source connector configurations and the Presto user definitions are managed in your Ahana account in the control plane.

By separating the management of the data source connectors and Presto users in the control plane from the Presto clusters in the Compute Plane, you do not have to re-create the data source connector definitions and Presto users separately for each Presto cluster. When you delete the Presto cluster, the data source configurations and Presto users are available for use with other Presto clusters.

Configurations for authorization services such as Apache Ranger or AWS Lake Formation, or Open ID Connect (OIDC) providers such as Okta, are also managed in the control plane.