Konnect allows you to host and operate your cloud instance in a geographic region that you specify. This is important for data privacy and regulatory compliance for you organization.
Geographic regions allow you to also operate Konnect in a similar geo to your users and their infrastructure applications.
Certain objects, like Consumers and Gateway Services, inside your Konnect instance are geo-specific. This means that if you create one of these objects in an instance of Konnect that is deployed in a particular geo, that object won’t exist in a different geo.
Only authentication, billing, and usage is shared between Konnect geos.
The following objects are geo-specific:
Konnect Control Planes support the following geos:
SG (Singapore) (beta)
Note: A Konnect org admin must opt-in to the Singapore region by selecting the geo in the region picker and then opting in.
Konnect Dedicated Cloud Gateways support the following geos:
us-east-2)us-west-2)us-east-1)us-west-1)ca-central-1)eu-central-1)eu-west-1)eu-west-2)eu-west-3)eu-central-2)ap-northeast-1)ap-southeast-1)ap-southeast-2)ap-south-1)ap-south-2)ap-northeast-2)me-central-1)Dedicated Cloud Gateways support the following AWS regions and Availability Zones (AZ) for AWS resource endpoints:
|
Region |
Supported Availability Zones |
|---|---|
Ohio (us-east-2)
|
|
Oregon (us-west-2)
|
|
N. Virginia (us-east-1)
|
|
N. California (us-west-1)
|
|
Montreal (ca-central-1)
|
|
Frankfurt (eu-central-1)
|
|
Ireland (eu-west-1)
|
|
London (eu-west-2)
|
|
Paris (eu-west-3)
|
|
Tokyo (ap-northeast-1)
|
|
Seoul (ap-northeast-2)
|
|
Mumbai (ap-south-1)
|
|
Singapore (ap-southeast-1)
|
|
Sydney (ap-southeast-2)
|
|
eastus2)westus2)germanywestcentral)uksouth)northeurope)francecentral)australiaeast)us-east1)us-central1)us-west1)northamerica-northeast1)europe-west1)europe-west2)europe-west3)asia-northeast1)asia-southeast1)asia-south1)australia-southeast1)Konnect supports Customer-Managed Encryption Keys (CMEK), allowing you to use your own symmetric key stored in AWS Key Management Service (KMS) to encrypt a pre-determined set of sensitive data.
A CMEK must be replicated to all AWS regions that make up a Konnect region.
The following table describes which AWS regions map to each Konnect geo:
|
Konnect geo |
AWS region |
|---|---|
| AU (Australia) |
|
| EU (Europe) |
|
| ME (Middle East) |
|
| US (United States) |
|
| IN (India) |
|
| SG (Singapore) (beta) |
|