# SAProuter and SAP Solution Manager
<a name="overview-router-solman"></a>

The following sections describe options for SAProuter and SAP Solution Manager when running SAP solutions on Amazon.

## For SAP All-on-Amazon Architecture
<a name="overview-router-all-on-aws"></a>

When setting up an SAP environment on Amazon, you will need to set up an SAP Solution Manager system and SAProuter with a connection to the SAP support network, as you would with any infrastructure. See the all-on-Amazon architecture diagram ([Figure 3: SAP all-on-Amazon architecture](overview-sap-planning.md#figure-3)) for an illustration.

When setting up the SAProuter and SAP support network connection, follow these guidelines:
+ Launch the instance that the SAProuter software is installed on into a public subnet of the VPC and assign it an Elastic IP address.
+ Create a specific security group for the SAProuter instance with the necessary rules to allow the required inbound and outbound access to the SAP support network.
+ Use the Secure Network Communications (SNC) type of internet connection. For more information, see [SAP Remote Support & Connections](https://support.sap.com/en/tools/connectivity-tools/remote-support.html).

# For SAP Hybrid Amazon Architecture
<a name="overview-router-hybrid"></a>

When using Amazon as an extension of your IT infrastructure, you can use your existing SAP Solution Manager system and SAProuter that are running in your data center to manage SAP systems running on Amazon within a VPC. See the hybrid architecture diagram ([Figure 4](overview-sap-planning.md#figure-4)) for additional information.