Status
Owner	The person responsible for driving this decision and documenting it. Type @ to mention people by name
Stakeholders	The business stakeholders involved in making, reviewing, and endorsing this decision. Type @ to mention people by name
LeanIX Link	Insert the name of the LeanIX Application Factsheet and hyperlink to the factsheet.

Introduction

Purpose

The purpose of this document is to outline the application architecture of SAP Cloud Integration as deployed by SyWay

Scope & Objectives

This document will describe the high-level architecture of the SAP Cloud Integration application.

Out of Scope:

Since SAP Cloud Integration is a SaaS application, network and infrastructure architecture will NOT be covered.
Product documentation and information that can be found online will not be documented here, but referenced using hyperlinks.
Implementation details such as Integration Design or API Management Design may have different architectures.

Requirements

Below table provides the list of non-functional requirements.

Requirement Identifier	Requirement Description

Application Architecture

Overview

Application Architecture Design
Insert the Architecture design below. Architecture can be designed in either Visio or word or another format.

Application Architecture Components

API Management, Cloud Integration

Application Security

Classification

Security configuration or hardening depends on the classification and the associated risks. Security controls are implemented depending on the classification of the data per IT policy and risk management policy.

Authentication

Cloud Integration is configured to perform SAML SSO with Syensqo Entra ID. The use of SSO is mandatorily enforced via configuration, and users cannot bypass SSO to log in with a password.

Authorisation

Application Controlled

Communication Security

Provide the details of the communication security controls implemented based on the classification

Data Security

SAP data centers are certified to comply with global security standards, such as ISO/IEC 27001 and SOC 2. We implement stringent security measures including encryption, 24/7 monitoring, and regular audits.

Other Controls

System Availability SLA is 99.7% (documented in SAP Trust Center - Service Level Agreement for Cloud Services).

System Landscape

Development Environment

https://syw-itg-dev-eu20.authentication.eu20.hana.ondemand.com

Project Test Environment

TBA. FIGAF composite

Quality Environment

TBA FIGAF composite

Production Environment

TBA

Operation Architecture

Change and Configuration Management

This section will include the details related to change and configuration management of SAP and non-SAP systems.

Transport Management

FIGAF TBA.

Release Management

SAP controllled

Monitoring

Standard Monitoring TBA.

FIGAF TBA.

Application Monitoring

Provide the details of application monitoring configuration

System Monitoring

SAP System Monitoring

Sizing

SAP monitors system load and utilization, and proactively scales up capacity during release deployment.

High Availability

deployed across multiple availability zones with the following SLA:

RPO - 4h
RTO - 24h

Disaster Recovery

SAP data centers are designed with redundancy and disaster recovery plans to help ensure business continuity. In the event of an outage, data and services are automatically rerouted to other operational centers.

Backup/Restore

SAP performs full backups with the following schedule to meet SAP's recovery point objective.

T1	Hourly	8 Days
T2	Daily	35 Days
T3	Every Sunday	120 Days

Maintenance Plan

Weekly Maintenance Windows for SAP Cloud Services – Standard Windows SAP weekly standard maintenance windows are scheduled as listed below for the Cloud Services in this section: Start Time in UTC per region MENA FRI 7 pm UTC APJ SAT 3 pm UTC Europe: SAT 10 pm UTC Americas SUN 4 am UTC The above-mentioned maintenance windows define the maximum scheduled downtime from which certain cloud services consume only partially

SAP Cloud Platform API Management SAP Cloud Platform Integration 2 Hours

Major Maintenance

Up to 4 times per year: APJ: FRI 2 pm – FRI 6 pm UTC Europe: FRI 10 pm – SAT 2 am UTC Americas: SAT 4 am – SAT 8 am UTC

Service Introduction

Application Category

Provide the details of application category based on application classification. Application category is defined based on RPO, RTO requirements

Support Team

Provide the details of support team that may be required to support the application

Skill required

SAP SCPI Developers, Architects

Checklist

Provide the checklist for support organization to support the application

Exceptions

This section covers any exceptions to the reference architecture. Some Applications may have limitations and may not meet the Enterprise Architecture, Reference Architecture and IT Policy guidelines. All exceptions should be included in this section.