ReadonlyappSecurity group ID controlling network access for application tier components (Lambda, API handlers).
Use cases: Application tier security; API handler access control; Lambda function networking
AWS: Amazon EC2 Security Group
Validation: Required; Must be valid security group ID (sg-xxx format)
ReadonlyappSubnet IDs for the application tier hosting Lambda functions, API handlers, and user-facing services.
Use cases: Lambda function placement; API handler networking; Application tier isolation; User-facing AI services
AWS: Amazon VPC subnets for application tier
Validation: Required; Array of valid subnet IDs; must be in the specified VPC
ReadonlydataSecurity group ID controlling network access to data tier components (databases, storage).
Use cases: Database access control; Backend service security; Data processing network rules
AWS: Amazon EC2 Security Group
Validation: Required; Must be valid security group ID (sg-xxx format)
ReadonlydataSubnet IDs for the data tier hosting databases (Aurora, DynamoDB) and backend AI services. These subnets should have no direct internet access for data security.
Use cases: Database subnet placement; Backend AI service networking; Data processing isolation; Secure data handling
AWS: Amazon VPC subnets for data tier
Validation: Required; Array of valid subnet IDs; must be in the specified VPC
ReadonlyvpcVPC identifier for hosting GAIA GenAI application components. All Lambda functions, databases, and endpoints will be deployed within this VPC.
Use cases: GenAI network isolation; VPC-bound AI workloads; Secure chatbot deployment; Network boundary definition
AWS: Amazon VPC
Validation: Required; Must be valid VPC ID (vpc-xxx format)
VPC networking configuration for GAIA GenAI infrastructure deployment. Defines network isolation boundaries with separate app and data tiers for secure AI workload hosting.
Use cases: GenAI network isolation; Multi-tier VPC deployment; Secure AI workload hosting; Network segmentation for chatbot infrastructure
AWS: Amazon VPC with app/data subnet tiers and security groups
Validation: Required; All IDs must reference existing VPC resources