AWS reference architectureApache Superset on AWS
Deploy a fully-managed Apache Superset instance in your AWS account on EKS, backed by RDS PostgreSQL and ElastiCache Redis. D23 models your data, generates dashboards, wires up SSO, and handles zero-downtime upgrades — no data engineering headcount required.
AWSRuntime: Amazon EKS + RDS + ElastiCacheEntry point
One-click deploy from the D23 console or Terraform module
Cloud / AWS
D23 platform
Apache Superset
dashboards · datasets · SQL Lab
D23 Managed Layer
SSO · row-level security · upgrades
Compute & cache
Kubernetes cluster
Amazon EKS + RDS + ElastiCache
Data Modelling AI
managed by D23
Dashboard Generator
managed by D23
Row-Level Security Manager
managed by D23
Async Query Worker
managed by D23
Data sources
50+ supported databases
Your infrastructure
Amazon EKS
RDS PostgreSQL (metadata)
ElastiCache Redis
Amazon Redshift / Athena
How the deployment works
Starting point: One-click deploy from the D23 console or Terraform module
- 1
D23 provisions an EKS cluster in your AWS account and installs Apache Superset via the official Helm chart
- 2
RDS PostgreSQL is provisioned as the Superset metadata store; ElastiCache Redis backs Celery workers and query caching
- 3
IAM roles and PrivateLink endpoints are configured so Superset can query Redshift, Athena, and S3-backed data sources without traversing the public internet
- 4
D23 AI models your existing tables, suggests a semantic layer, and generates your first dashboards
- 5
Ongoing: D23 handles zero-downtime Superset upgrades, row-level security policies, SSO (Cognito / Okta), and async query workers
D23 managed services
- Data Modelling AI
- Dashboard Generator
- Row-Level Security Manager
- Async Query Worker
Connected data sources
50+ databases supported — Snowflake, BigQuery, Redshift, Postgres, ClickHouse, and more.
Infrastructure & data
Amazon EKS + RDS + ElastiCache
Amazon EKS
RDS PostgreSQL (metadata)
ElastiCache Redis
Amazon Redshift / Athena
Security & operational considerations
- All traffic stays inside your VPC via PrivateLink — no public endpoints
- IAM roles follow least-privilege; credentials are never stored in Superset config
- CloudTrail logs every query and schema change for SOC 2 / audit readiness
- Zero-downtime upgrades via rolling EKS deployments managed by D23
AWS deployment
Deployed in your AWS account on EKS, with PrivateLink to your data sources, IAM least-privilege roles, and CloudTrail for audit and observability. D23 manages upgrades and row-level security.
Turn every team into a data team.
Get managed Apache Superset, the dashboards your business needs, and AI on top, without hiring a data team.