Web IDE Question for Public Sector Defense Customer

[ChrisMahoney01]

Public Sector / Regulated Industries - Defense Customer

We do not have a certified FedRAMP environment option in the NS2 environment at this time with HANA Cloud Integration (HCI) or SAP Cloud Platform

Question from Defense Customer team – “Web IDE is a development tool for Fiori/HTML5 development which is supposed to make Fiori development significantly faster than the traditional tools such as NWDS/Eclipse. Web IDE is what our developers are trained on and this is what SAP is really promoting as the development tool for all Fiori/HTML5 development but the problem is that the use of this tool requires us to connect to SAP Cloud Connector (previously called HANA Cloud Connector) even for on-premise applications. This SAP Cloud Connector is in the SAP commercial cloud and from what I could glean from SAP sites, Web IDE would store our any of our custom source code in this commercial cloud and that's what our concern is. We do not know at this point if there is a secure NS2 Cloud environment that federal gov is allowed to use or if there any kind of waiver/MOA in place between DOD and SAP to allow use of Cloud Connector.

I am attaching an FAQ on Web IDE and here is a link as that should provide some additional info.

https://help.sap.com/viewer/cca91383641e40ffbe03bdc78f00f681/Cloud/en-US/e6c7616abb5710148cfcf3e75d9...” End of Question

I am reading information from here - https://www.sap.com/developer/topics/sap-webide.html and when I scroll down to the summary matrix I see a Web IDE for HANA , but the different between the two columns is the word Fiori – I only see it show up on the SAAP Cloud Platform column – they really interested in Fiori and Mobile and obviously on-premise –

Can you provide insight, or anyone you can point me to on how I can provide guidance back to this customer?

[ChrisMahoney01]

Found out some additional insight from a colleague from the SAP RIG (Regional Implementation Group) -

Javier Baltazar

1. “…problem is that the use of this tool requires us to connect to SAP Cloud Connector (previously called HANA Cloud Connector) even for on-premise applications. This SAP Cloud Connector is in the SAP commercial cloud…”

Cloud Connector is an On-premise software component, it is not hosted in any cloud landscape, in fact all customers that use this component usually have a dedicated on-premise server to host this software. The purpose of Cloud Connector is to connect on-premise systems to the cloud, think of it as a reverse proxy that exposes certain webservices to the cloud. To generate this connection, cloud connector uses a secure SSL tunnel via a reverse invoke approach.

See attached whitepaper and presentation ->

https://d.dam.sap.com/a/nJnXn7/SAP%20HANA%20Cloud%20Connector%20security%20whitepaper.pdf

2. “…Web IDE would store our any of our custom source code in this commercial cloud and that's what our concern is…”

Yes, all custom code or app extensions are stored in WebIDE. However, WebIDE is a service available per SAP Cloud Platform account and the persistence service is based on Git, hence you could commit all code to a remote Git repository to store all data in a secure location.

https://blogs.sap.com/2017/02/14/using-git-in-sap-web-ide-with-multiple-developers/

https://help.hana.ondemand.com/webide/frameset.htm?4037d227ebd34baaaa4a5b435a341bd3.html

Additionally, each Cloud Platform account is a separate “tenant” in the cloud infrastructure, meaning that no information is shared between accounts and SCP complies with several certifications, see attached presentation (SCP Infrastructure).

3. “…I see a Web IDE for HANA , but the different between the two columns is the word Fiori…”

There are two separate WebIDE, WebIDE for HANA is only useful when you have created a Hana Database in SCP and wish to develop Hana artifacts (XS OData services, stored procedures, etc). WebIDE for Fiori is only useful to develop UI5 and javascript code to extend or create a new Fiori based app.

Some other SAP Cloud Platform information for reference ->

https://blogs.sap.com/2016/04/04/invitation-sapsysarchs-sap-hana-cloud-platform-architecture-call-we...