> ## Documentation Index
> Fetch the complete documentation index at: https://docs.abbyy.com/llms.txt
> Use this file to discover all available pages before exploring further.

# AWS requirements

The AWS chart, `fineparser-enterprise`, runs on Amazon EKS and is billed through AWS Marketplace.

## Cluster

| Requirement | Details |
| - | - |
| Amazon EKS | A standard or EKS Auto Mode cluster, with Helm 3.8 or later, or Helm 4. |
| `amd64` nodes | x86-64 instance types. FineParser has no `arm64` images. |
| IAM OIDC provider | Associated with the cluster, for IRSA. |
| A default block StorageClass | For the orchestrator's state, or name one in `storageClass.name`. |
| A node autoscaler | Karpenter, EKS Auto Mode, or Cluster Autoscaler. |

The default requests reserve about 2 vCPU before any recognition runs. Each worker adds 1 vCPU and 1 GB, up to `scaling.maxWorkers` (20).

```bash theme={null}
eksctl utils associate-iam-oidc-provider --cluster <cluster> --region <region> --approve
```

## Add-ons

| Add-on | For |
| - | - |
| Amazon EFS CSI driver | The in-process volume. See [EFS file system](https://docs.abbyy.com/fine-parser/enterprise/aws/efs.md). |
| Mountpoint for Amazon S3 CSI driver | The output volume. See [S3 output bucket](https://docs.abbyy.com/fine-parser/enterprise/aws/s3.md). |
| Amazon EBS CSI driver | The orchestrator's state. Not needed on EKS Auto Mode. |

EKS Auto Mode does not include the EFS or Mountpoint for Amazon S3 drivers.

## AWS resources

* An [EFS file system](https://docs.abbyy.com/fine-parser/enterprise/aws/efs.md) with mount targets in your nodes' Availability Zones.
* An [S3 bucket](https://docs.abbyy.com/fine-parser/enterprise/aws/s3.md) for results.
* An [IAM role and service account](https://docs.abbyy.com/fine-parser/enterprise/aws/iam-and-billing.md) for billing.
* An AWS Marketplace subscription to FineParser Enterprise, in the account that runs the cluster.

## Network access

| From | To | Purpose |
| - | - | - |
| Nodes | EFS mount targets, TCP 2049 | The in-process volume. |
| Nodes | Amazon S3 | The output volume. |
| Nodes | `709825985650.dkr.ecr.us-east-1.amazonaws.com` | Pulling the images. |
| Workers | `sts.<region>.amazonaws.com`, `metering.marketplace.<region>.amazonaws.com` | Billing. |
| Ingest, workers | The orchestrator, TCP 50051 | Inside the cluster. |

Workers trust only Amazon's certificate authorities for billing calls. If a proxy inspects TLS, exempt `*.amazonaws.com`.