Skip to main content

​
Overview

All resources live in your AWS account, and data never leaves your cloud. With Managed On-Premise, Paragon deploys, configures, and manages the Paragon installation in your AWS account. You own the infrastructure and resources. Paragon access to your environment is on-demand for support requests only, via a secure bastion. Other resources in your AWS account remain inaccessible.

​
Security

We use a least-privilege access model through AWS Organizations:
  • A new AWS account for Paragon resources, separate from other accounts
  • A sandboxed account for Paragon deployment and management
You maintain full control over infrastructure access, can view all created resources, split billing, and audit all Paragon activity through AWS CloudTrail. To run Paragon on your AWS account, use AWS Organizations so new accounts have sandboxed resources, policies, and billing.

​
Setup

Time required: 5 minutes
  1. Visit the AWS Organizations accounts dashboard and log in with an admin account.
  2. Click Add account.
  3. Click Create account.
  4. Fill in the details:

​
Next Steps

Provide the account details and we’ll set up the installation. If you have questions, email enterprise@useparagon.com.