> For the complete documentation index, see [llms.txt](https://docs.panther.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.panther.com/~/changes/Dd8nx2iqd1Pp2OzWJaWk/system-configuration/panther-deployment-types.md). # Panther Deployment Types Choose between Panther SaaS or CPaaS ## Overview Panther currently offers two deployment models: [Software as a Service (SaaS)](#saas) and [Cloud Premises as a Service (CPaaS)](#cpaas). The primary difference between SaaS and CPaaS deployments is the owner of the AWS account in which your Panther instance is deployed. With SaaS, the AWS account is owned by Panther; in CPaaS, it is owned by your organization. In both SaaS and CPaaS deployments, Panther manages the instance, including performing version upgrades. Panther previously offered a [Self-Hosted](#self-hosted-legacy) deployment model, but it is no longer available to new customers. If you have additional questions about either SaaS, CPaaS, or the deployment type of your Panther instance, reach out to your Panther support team. ## SaaS In the SaaS deployment model, Panther owns and manages the AWS account in which your Panther instance is deployed. In the SaaS model, you can use either a [Panther-managed](https://docs.panther.com/system-configuration/snowflake-setup#panther-managed-snowflake) or [customer-configured](https://docs.panther.com/system-configuration/snowflake-setup#customer-configured-snowflake) Snowflake instance. ## CPaaS In the CPaaS deployment model, your organization owns the AWS account in which your Panther instance is deployed, but Panther staff manages initial deployments and upgrades. Panther performs this work by assuming an IAM role called `PantherDeploymentRole`, after you have created it using a CloudFormation template provided by Panther. Learn how to work with Panther to set up CPaaS in [Preparing for Initial CPaaS Deployment](/~/changes/Dd8nx2iqd1Pp2OzWJaWk/system-configuration/panther-deployment-types/preparing-for-initial-cpaas-deployment.md). When a CPaaS instance is deployed, Panther self-monitoring is enabled, meaning your Panther instance will automatically ingest audit logs produced by your AWS account. This allows you to monitor actions taken by the `PantherDeploymentRole` (as well as any other IAM role). Panther may use third-party software in your Panther instance to monitor application performance and collect user and product analytics. For more information, reach out to your Panther support team. In the CPaaS model, you can use either a [Panther-managed](https://docs.panther.com/system-configuration/snowflake-setup#panther-managed-snowflake) or [customer-configured](https://docs.panther.com/system-configuration/snowflake-setup#customer-configured-snowflake) Snowflake instance. ## Self-Hosted (Legacy) Panther no longer offers the Self-Hosted deployment model. If you are existing Self-Hosted customer, see [Self-Hosted Deployments (Legacy)](/~/changes/Dd8nx2iqd1Pp2OzWJaWk/system-configuration/self-hosted-deployments.md) for more information. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.panther.com/~/changes/Dd8nx2iqd1Pp2OzWJaWk/system-configuration/panther-deployment-types.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.