What is the Isolation Feature Set
The isolation feature set combines our Cloud Hosted Platform with client-managed AWS resources to provide a solution that satisfies the most stringent security and privacy requirements. Clients retain control of their sensitive content without having to host Shotgun on their infrastructure.
Leveraging the isolation feature set has the following advantages over the Standard offering:
- Media Isolation by hosting of assets and attachments in a client-owned S3 Bucket
- Web Traffic Isolation from the public internet
- Media Traffic Isolation from the public internet
- Media Replication allowing you to replicate media in two different AWS Regions
- Access to fully managed Shotgun Cloud Services
- Automatic and continuous version upgrades
- Ephemeral compute + in-memory segration between clients
In a nutshell, this means that with the isolation features, your Shotgun site and the data related to it cannot be reached by anyone outside of your studio network.
The isolation feature set is a solution that requires less upkeep, as well as less IT/System Administrator knowledge and skills, than hosting Shotgun on-premise. The list of advantages compared to on-premise includes, but is not limited to:
- No Shotgun specific knowledge required
- No manual Shotgun updates required
- Very low level of maintenance required for the AWS components
Media isolation feature
Media Isolation allows your studio to keep the ownership and control of the media and attachments that you upload to Shotgun. With Media Isolation, all the content that you upload to Shotgun can be store in your studio private S3 bucket. Access to the media is provided to the Shotgun service only, using AWS AssumeRole keyless Security Token Service. Your studio remains in control of the assets and the access to the assets, access that you can revoke at will.
Traffic isolation features
Media and Web traffic isolation features can be enabled to prevent your traffic from being routed on the public internet, limiting it to the AWS backbone and your studio network. The traffic between Shotgun Services and your studio stays in closed network, never going outside AWS or your Studio network.
What the Isolation Feature Set is not
The isolation feature set is not a completely isolated solution. Both the compute services and the database services are shared amongst clients, and managed by Shotgun. From a hardware standpoint, the isolation features does not guarantee complete physical isolation. However, Shotgun services are guaranteeing isolation at the memory level. Processes are never reused to answer requests from different clients during their lifetime. Client metadata is stored in different databases. Client media is individually stored on S3.
High Level Architecture
The Shotgun cloud service can be decoupled at a high level in 3 parts:
Compute Stack: The part of the Shotgun Service that handles client requests and serves data to the client.
Data Stack: Metadata storage (databases).
Media Storage: Where the client’s attachments, media, and assets are stored. Shotgun uses AWS S3 to store client content.
Please read Securing Studio IP in AWS: Cloud-based VFX Project Management with Autodesk Shotgun for more details about the architecture.
Ephemeral compute and memory isolation
Even if clients share the same infrastructure, Shotgun guarantees a complete memory isolation, both in transit and at rest, of client data. This makes Shotgun less prone to data leaking due to architecture flaws or software vulnerabilities exploiting memory, like buffer overflow.