Panther Deployment Types
Choose between Panther SaaS or CPaaS
Panther currently offers two deployment models: Software as a Service (SaaS) and Cloud Premises as a Service (CPaaS).
The primary difference between SaaS and CPaaS deployments is the owner of the AWS account in which your Panther instance is deployed. With SaaS, the AWS account is owned by Panther; in CPaaS, it is owned by your organization. In both SaaS and CPaaS deployments, Panther manages the instance, including performing version upgrades.
Panther previously offered a Self-Hosted deployment model, but it is no longer available to new customers. If you have additional questions about either SaaS, CPaaS, or the deployment type of your Panther instance, reach out to your Panther support team.
In the SaaS deployment model, Panther owns and manages the AWS account in which your Panther instance is deployed.
In the CPaaS deployment model, your organization owns the AWS account in which your Panther instance is deployed, but Panther staff manages initial deployments and upgrades. Panther performs this work by assuming an IAM role called
PantherDeploymentRole, after you have created it using a CloudFormation template provided by Panther. Learn how to work with Panther to set up CPaaS in Preparing for Initial CPaaS Deployment.When a CPaaS instance is deployed, Panther self-monitoring is enabled, meaning your Panther instance will automatically ingest audit logs produced by your AWS account. This allows you to monitor actions taken by the
PantherDeploymentRole (as well as any other IAM role).Panther may use third-party software in your Panther instance to monitor application performance and collect user and product analytics. For more information, reach out to your Panther support team.
Panther no longer offers the Self-Hosted deployment model. If you are existing Self-Hosted customer, see Self-Hosted Deployments (Legacy) for more information.
Last modified 13d ago