Glossary

ARTESCA cluster

A group of interconnected nodes that work together to form a unified computing environment. It consists of multiple nodes, each contributing resources and services, and is managed as a single entity, enabling high availability, scalability, and fault tolerance for applications and workloads.

ARTESCA Instance ID

A unique identifier assigned to each ARTESCA deployment for operational telemetry. The ARTESCA Instance ID is not linked to any customer name, email address, or other personal information. For more information, refer to Operational Telemetry Collection.

AssumeRole

The IAM AssumeRole is used to delegate access to AWS resources, allowing services to perform actions on behalf of authenticated ARTESCA users. Assuming an IAM role involves a temporary transfer of permissions allowing the entity to carry out tasks and use resources with the authorized permissions. Once the session token for the assumed role expires, the additional permissions are revoked.

Backup Capacity Tier

A storage tier or repository used for storing backup data in a backup and recovery system providing long-term storage for backups, typically optimized for cost-effective retention and archival purposes.

Bucket Cross-Origin Resource Sharing (CORS)

A setting that allows you to manage cross-origin requests to your S3 buckets.

Canned Access Control List (ACL)

The predefined grants provided by Amazon S3 for managing access control lists simplifying the process of managing access to buckets and objects. Each object and bucket has an ACL attached as a subresource that defines which account or group has granted access and its type.

Certificate Authority Certificate (CA Certificate)

A digital certificate issued by a trusted authority that verifies the authenticity and integrity of other certificates issued. This term both encompasses Root CA certificates and Intermediate certificates.

Command Line Interface (CLI)

A text-based interface used to interact with a computer program or operating system.

Compatible application

A partner application that has been identified as compatible. It has been analyzed to ensure that it meets the API requirements, and can be integrated successfully with ARTESCA product.

Container

A software unit that packages code and all its dependencies virtually, to deploy applications quickly from one computing environment to another.

Control Plane (CP)

The CP manages network behavior, configuration, routing, and management. By default, the CP is used to host Management services.

Digital Certificate

An electronic document used to cryptographically link a public key to the entity of the certificate’s subject (e.g., a server, a user, …). It allows you to authenticate a remote identity as well as enabling the establishment of a secure and encrypted connection. It contains the subject’s identity information, its public key, the digital signature of the issuing CA, and the certificate’s validity period. Its validity is established through the Chain of Trust, a hierarchical path where the Leaf Certificate is signed by an Intermediate Certificate Authority, which is ultimately traceable and verifiable back to a trusted Root CA Certificate stored in a client’s trust store.

Environment variable

A dynamic-named value that is used to configure various aspects of ARTESCA, such as database connections and service endpoints.

Functional certified application

A partner application that has undergone thorough testing with ARTESCA product. It has been tested with near real-world use cases and data to ensure a predictable integration for the solution.

Graphical User Interface (GUI)

A screen interface present on most computers featuring menus and icons that can be controlled by a mouse.

Hardware appliance

An ARTESCA software pre-installed on hardware.

Identity Provider (IdP)

An IdP is a trusted service that authenticates users and provides identity information to other applications or services. It issues security tokens or assertions to enable SSO and user authentication in federated identity systems.

Immutable bucket

A bucket designed to prevent modification or deletion of stored objects, ensuring data integrity and compliance. This immutability is based on S3 Object-lock capability.

Incompatible application

A partner application with known incompatibilities including those with non-implemented APIs, API behavior that does not meet the S3 standard, or an incompatible architecture. ARTESCA does not provide support for applications or specific options of some applications that have been identified as incompatible.

Inline policy

An IAM policy that you embed directly into a single IAM user, group, or role. It is used to grant fine-grained access control to AWS resources.

Interface

The interaction and connection occurring between the software, the hardware, and the user on a computer.

Intermediate Certificate Authority

A certificate that sits between the Root CA Certificate and the Leaf Certificate in the Chain of Trust. It is issued and signed by the Root CA acting as a security buffer between the highly protected Root CA and the certificates issued to end-entities. It also establishes the link that allows the Leaf Certificate’s authenticity to be traced back to the trusted Root CA.

Key

A unique identifier used to find associated data.

Leaf Certificate

A digital certificate issued to the end-entity (e.g., a web server, …) used to prove the identity of a server to a client and enable secure exchange of data. A client’s verification process begins with the Leaf Certificate and works its way up the chain, validating each certificate’s signature until it reaches a trusted Root CA Certificate.

Lifecycle Expiration

The process of determining when an object or resource has reached the end of its useful life and should be removed or deleted. This aims to optimize the storage space thus reducing costs. It is implemented by setting a lifecycle policy on your S3 bucket.

metadata

The industry standard term metadata is defined as data about the data. Some examples of metadata are: author, date created, date modified, geolocation, and file size. File metadata may be used for unstructured data such as images, video, web pages, and spreadsheets. Defining metadata makes finding, sorting and working with data easier by allowing the user to classify and locate specific files.

Multi-Factor Authentication (MFA)

A security process that requires users to provide at least one additional verification factor beyond their credentials to access ARTESCA.

Net Storage

The total storage capacity stored on disks. Net storage value is often superior to protected data as it includes the overhead induced by network and local data protection and it also includes data that has not been relocated.

Node DiskPressure state

A state that indicates high disk usage or low disk space on a node in the cluster, which can impact performance.

Non-immutable bucket

A bucket that allows for regular modification and deletion of objects. This immutability is based on S3 Object-lock capability.

Object immutability

A characteristic of an ARTESCA object based on the S3 Object-lock capability that prevents its modification or alteration once it is created or stored.

OpenID Connect (OIDC)

An open authentication protocol that extends OAuth 2.0 to add an identity layer. OIDC allows clients to confirm an end-user’s identity through an authorization server.

OpenTelemetry Protocol (OTLP)

An open standard protocol for transmitting telemetry data such as metrics, traces, and logs. ARTESCA uses OTLP over an encrypted HTTPS connection to transmit operational telemetry to Scality.

Operating system

A software controlling the execution of programs and providing services such as scheduling, resource allocation, and data management.

Performance certified application

A partner application that has undergone testing with real-world workloads to ensure predictable performance for the solution.

Policy Amazon Resource Name (ARN)

A unique identifier for an IAM policy in AWS used to specify and manage permissions within the IAM system. It provides a standardized way to reference and control access to resources based on the defined policy.

Protected data

The capacity used by the application pushing data to ARTESCA.

Root Certificate Authority (Root CA Certificate)

The highest-level certificate in the Chain of Trust that is self-signed using its own private key. It serves as the trust anchor for all certificates in the chain.

Scale-Out Backup Repository (SOBR)

A storage architecture used in backup and recovery (mostly used in Veeam) systems allowing for the aggregation of multiple storage devices or repositories into a single logical unit, providing scalability, load balancing, and improved performance for backup operations.

Scality Guardian

The Scality AI-assisted support agent. Guardian uses operational telemetry from your deployment to provide context-aware support, correlate observed behavior with known issues, and suggest tailored remediation. For more information, refer to Operational Telemetry Collection.

Software appliance

The ARTESCA pre-configured software package that is designed to run physical servers.

Sosreport tool

A diagnostic tool that collects system information and logs on Linux systems.

sproxyd

The RING sproxyd connector can be used as an external ARTESCA storage location. It can be used in very specific use cases and requires Scality review.

Storage server

A physical server hosting nodes.

Task

A basic component program that is controlled by an operating system.

Telemetry agent

A component running within an ARTESCA deployment that collects operational and infrastructure metrics and sends them to Scality using the OpenTelemetry Protocol (OTLP). For more information, refer to Operational Telemetry Collection.

Validated design

The highest level of certification for partner applications at Scality. These applications undergo comprehensive testing with ARTESCA product to ensure a predictable performance for the solution. Additionally, product enhancements can be implemented to deliver the needed performance.

Virtual appliance

An ARTESCA pre-configured OVA image that is designed ready to run on a hypervisor (VMware vSphere 8.0 or higher).

Workload Plane (WP)

The WP network carries communications between Kubernetes pods. By default, the WP is used to host data services.