OMOP Data Instances
server List
| Name | Subscription | Resource group | Region | Environment | Deployment date |
|---|---|---|---|---|---|
| i2rdc3-dev-postgres01 | I2 - RDC 2.0 Azure POC - Dev | i2rdc3-dev-rg-main | Central US | Development | TBD |
| i2rdc3-qa-postgres01 | I2 - RDC 2.0 Azure POC - QA | i2rdc3-qa-rg-main | Central US | Quality Assurence | TBD |
| i2rdc3-prod-postgres01 | I2 - RDC 2.0 Azure POC - Prod | i2rdc3-prod-rg-main | Central US | Production | TBD |
i2rdc3-dev-postgres01 reference
General Information
- Server Name:
postgresql.dev.i2rdc3.wustl.edu - Resource Group:
i2rdc3-dev-rg-main - Subscription:
I2 - RDC 2.0 Azure POC - Dev - Region:
Central US - Environment:
Development - Deployment Date:
~2020 - Owner:
Snehil Gupta (Data Warehousing Team) - Links: Azure Portal
Purpose and Description
- Purpose of this SQL Server:
- Hosts Dev OMOP v5.3 data model
- Hosts Dev Mars automation database
- Hosts Dev Databroker Audit database
- Altas CMS backend ???
Application/Service Dependencies
- Fluentbit
- Crontab
- Bash/Perl
- CIFS/SMBtools
Databases Hosted on this Server
| Database Name | Purpose | Impact | Sensitivity |
|---|---|---|---|
omop_dw |
Development OMOP DB | General | PHI |
mars_db |
MARS automation db | Low | PHI |
databroker |
Databroker auditing db | Low | PHI |
local user dbs |
Individual User dev dbs | General | PHI |
postgres |
transient data objects for user tasks | General | PHI |
Networking and Connectivity
-
Firewall Rules:
-
Allow Azure services:
Yes -
Public IPs Allowed:
Outbound rules
Rule Name Start IP End IP Description AllowTagCustom3443InboundApiManagementVirtualNetworkApi Management AllowTagContainerRegistryHTTPSInboundVirtualNetworkAzureContainerRegistryAzure container Registry AllowAnyPostgreSQLInbound-atlasAnyAnyAtlas CMS backend
-
-
Private Endpoint:
Disabled- VNet/Subnet:
i2rdc3-dev-vnet01 / vm-subnet
-
DNS Zone Integration:
- DNS Zone:
prod.i2rdc3.wustl.edu
- DNS Zone:
Authentication and Access
- Authentication Mode:
Mixed - Host Active Directory Admin:
azureuser - SQL Admin Login:
posstgres - Key Vault: i2rdc3-dev-kv
Access Control Policies
- privileges assigned to groups (no expiration)
- user account provided membership to roles no direct privileges (annually expired)
- service account assigned direct privileges (no expiration)
Security Configuration
Auditing
- Auditing Enabled:
Yes - Destination:
Storage Account - Retention:
90 Days
Performance and Sizing
- Tier:
Memory Optimized - vCores:
20 - Storage Size (per DB):
160 GB - I/O Throughput Tier:
Premium SSD LRS
Backup and Restore
- Automated Backups:
Enabled- OS snapshot Retention:
30 days
- OS snapshot Retention:
- Data disk Snapshots:
- Configured for DB:
Yes - Retention Duration:
1/day retained for 2 days
- Configured for DB:
- Transaction logs (WAL files)
- storage account: i2rdc3devwalblob
- Geo-Backup:
Enabled - Restore Tested:
Yes – last tested on ~2023
Monitoring and Alerting
Monitoring Tools/Process
- Azure Monitor / Fluentbit
- Diagnostic Settings:
Enabled