Home > Data Protection > PowerProtect Data Manager > White Papers > Dell PowerProtect Data Manager: Deployment and Configuration on Amazon Web Services > Basic architecture overview
The following diagram represents the basic architecture of Data Manager on AWS. The diagram shows a possible distribution of Data Manager and DDVE in one private subnet, and application hosts in another.
The Data Manager lockbox is in a secure Elastic Block Store (EBS) volume, where sensitive data, such as passwords, is encrypted and stored. Backup data is stored in a Simple Storage Services (S3) bucket, and the backup metadata is stored on a DDVE EBS volume.
For more details about the different architecture models, see Dell PowerProtect Data Manager Amazon Web Services Deployment Guide.