ERP Cloud Hosting Architecture
February 13, 2026
|
ERP
Cloud Hosting
HA
Reference architecture for ERP on AWS.
ERP Cloud Hosting Architecture
Hosting an ERP system in the cloud requires a reference architecture that addresses high availability, performance, security, and disaster recovery. Whether you're running SAP, Oracle, Microsoft Dynamics, or a custom ERP, these architectural patterns ensure reliable production operation.
Reference Architecture
Internet
↓
CloudFront (CDN) + WAF
↓
Application Load Balancer (Multi-AZ)
↓
ERP Application Tier (EC2 Auto Scaling Group)
├── App Server 1 (AZ-1)
├── App Server 2 (AZ-2)
└── App Server 3 (AZ-1) [auto-scaled]
↓
Database Tier (Multi-AZ)
├── Primary RDS/Aurora (AZ-1)
└── Standby RDS/Aurora (AZ-2) [automatic failover]
↓
Shared Storage
├── EFS (shared file system for documents)
└── S3 (backups, archives, reports)Compute Tier
- Instance types: Memory-optimized (r6i, r6g) for ERP workloads
- Auto Scaling: Scale based on CPU and active sessions
- Placement groups: Cluster placement for low-latency inter-tier communication
- AMI management: Golden AMI with ERP software pre-installed, updated monthly
Database Tier
- Aurora PostgreSQL: 5x throughput of standard PostgreSQL, automatic storage scaling
- Multi-AZ: Automatic failover with <30 second RTO
- Read replicas: Offload reporting queries to read replicas
- Storage: Aurora auto-scales up to 128TB; io1/io2 for peak IOPS requirements
High Availability Design
| Component | HA Strategy | RTO |
|---|---|---|
| Application | Multi-AZ ASG, min 2 instances | <1 minute |
| Database | Multi-AZ Aurora, automatic failover | <30 seconds |
| File storage | EFS (Multi-AZ by default) | 0 (always available) |
| Load balancer | ALB (Multi-AZ by default) | 0 (always available) |
Security Architecture
- Network isolation: Private subnets for app and database tiers
- WAF protection: SQL injection, XSS, bot protection on ALB
- Encryption: EBS, RDS, EFS, S3 all encrypted with KMS
- Access control: VPN or Direct Connect for admin access; no public SSH/RDP
- Audit logging: CloudTrail, VPC Flow Logs, ERP application audit logs to CloudWatch
Performance Optimization
- ElastiCache: Cache frequently accessed data (user sessions, lookup tables)
- CloudFront: Cache static assets (CSS, JS, images) at edge locations
- Database tuning: Optimize queries, add read replicas for reporting
- Storage optimization: Use gp3 with provisioned IOPS for database volumes
Backup and DR
- Automated backups: RDS automated backups with 35-day retention
- Point-in-time recovery: Restore database to any second within retention period
- Cross-region replication: Aurora Global Database for DR in another region
- Application backup: AMI snapshots + EFS backup to S3 Glacier
Eazy SaaS Tip: We size ERP infrastructure based on concurrent user counts and transaction volumes, not just application requirements. Our experience shows that most ERP cloud deployments are over-provisioned by 40%. We right-size from day one and use auto-scaling to handle peak periods.