Amazon Web Services - FAQs

Introduction

These FAQs provide an overview of the CSUN AWS Cloud Platform (CSUN AWS).

CSUN Information Technology has embarked on a hybrid cloud strategy that enables CSUN to transition to the cloud. The CSUN AWS Cloud Platform provides the necessary baseline infrastructure for utilizing AWS cloud services while securely integrating with CSUN’s on-premise data centers.

CSUN AWS is an extension of CSUN’s on-premise network and datacenter. Users have the ability to seamlessly integrate and access resources between the on-premise and CSUN AWS environments. Users already familiar with AWS will not notice a difference after logging in to their CSUN AWS account. Lastly, users will not have to agree to AWS Terms and Conditions when the account is created.

To request an AWS account:

  1. Obtain departmental approval, generate an estimate of cost using AWS calculator and identify a valid funding source.
  2. Complete procurement requirements:
    • State-funded departments: Obtain a valid chartfield to be used with the Chancellors Office via Interdepartmental Financial Transaction (IFT).
    • Auxiliary organizations: Obtain a purchase order (PO) through your department.
  3. Submit a request through the IT service portal.
  4. Upon approval and account provisioning, configure and use AWS services in accordance with CSUN policies and data classification requirements.

For assistance, contact the IT Help Center or CSUN IT Cloud Systems team as needed.

The user who requested the account (account owner) has access to the account. Additionally, anyone the account owner shares access with will gain access to the account. CSUN IT has access to your CSUN AWS account, however, not to the data hosted on the AWS services.

Users can navigate to the Guest Account Access form and fill out the form to grant others access to their CSUN AWS account. Access can only be granted to valid CSUN AWS accounts and by the account administrator.

The user who requested the account (account owner) has access to the account. Additionally, anyone the account owner shares access with will gain access to the account. CSUN IT does not have access to your AWS account unless explicit permission is granted.

CSUN AWS is integrated with CSUN’s single sign-on platform (SSO) for authentication. Users are not allowed to create or log in through local user account created within CSUN AWS account. CSUN AWS security audit logs (CloudTrails logs) are sent to central security account for auditing purposes if/when required.

Each CSUN AWS Account comes pre-configured with four subnets. These subnets are split across two availability zones (AZ, refers to AWS datacenter). Two subnets are labeled ‘public’ – meaning these subnets have access to the internet (outbound), while two subnets are labeled ‘private’ – meaning these subnets have access to campus datacenter network, but not internet access.

From an end user console experience, CSUN AWS is identical to an AWS account. However, several key differences are listed below:

  • By default, users can use services under the Oregon region. If other regions are required, please contact the IT Help Center.
  • Users are not allowed to create local users (IAM user) or to create custom roles or policies. If the default access does not meet the needs, please contact the IT Help Center.
  • Users have limited access to network services under AWS. For example, users are not allowed to modify/delete/create VPCs, subnets, internet gateways (IGWs) etc. If the default network configuration does not meet your needs, please contact the IT Help Center. 
  • CSUN AWS allows for ease of payment and cost tracking.
  • Tied to CSUN's IFT and/or purchasing department using POs. No P Card or credit card needed. 
  • CSUN AWS is tied to the Chancellors Office Enterprise Discount Program and CSUN AWS accounts enjoy a 15% discount on most AWS services.
  • CSUN AWS has pre-established security and technical configurations consistent with CSU guidelines.
  • CSUN AWS users can contact CSUN IT to estimate costs or help architect the environment. 
  • Connected to CSUN's in-campus network. 
  • No need to agree to AWS Terms and Conditions.

Yes! The account can be used as soon as the CSUN AWS account is created. Users receive a notification email with their account details. At that point, The CSUN AWS account is ready for use. If there are any questions or issues, please contact the IT Help Center. 

View AWS services pricing information on the Amazon website. 

 

CSUN AWS billing is integrated with the university’s standard procurement and financial processes. Each AWS account must be associated with an approved funding source at the time of request.

For state-funded departments, AWS charges are applied to the designated chartfield through an Interdepartmental Financial Transaction (IFT). For auxiliary organizations, AWS accounts are linked to a purchase order (PO), and charges are billed accordingly.

AWS usage is tracked and billed monthly. However, the CSU Chancellor’s Office recovers AWS costs on a quarterly basis. Departments are responsible for monitoring usage and ensuring sufficient funds are available to cover ongoing costs.

Yes. Users can view and track their CSUN AWS charges directly under their CSUN account by going to the ‘Billing’ service. Users are able to create budgets, set-up notifications and run reports.

Please submit a request to the IT Help Center.

 

Request AWS Assistance

Purchase Order questions should be directed to your department or Contact Purchasing & Contracts Administration at (818) 677-2301 or via email at purch@csun.edu for assistance with Purchase Order (PO) creation and processing.