Integrating Research and Engineering Studio in Trusted Research Environments built on AWS

This article discusses integrating Research and Engineering Studio (RES) into Trusted Research Environments (TREs) on AWS, providing a comprehensive guide for securely managing sensitive research data and compute resources.

• TREs provide secure, controlled spaces for researchers to access and analyze sensitive data while maintaining privacy and compliance
• RES enables administrators to create logically separated projects with controlled user access, data isolation, and compute environments
• Key deployment considerations include:
  • Setting up identity management
  • Configuring global permissions to restrict data egress
  • Implementing project-level resource isolation
• Security features include:
• Restricting desktop sharing
• Controlling file browser access
• Managing SSH access
• Projects can be configured with separate S3 buckets, file systems, security groups, and software stacks

The solution provides flexible, customizable infrastructure for researchers to securely collaborate and analyze sensitive data in cloud environments.