Claude + EMR How Data Stays Inside Our Infrastructure

Zero raw data egress • End-to-end SSH encapsulation • Read-only dev boundaries

Phase 0: Initializing | 0.0s / 10.0s
0s 10s+
1. Encrypted Transport SSH AES-256

Developer interactions route strictly through Bastion port forwarding. Direct ingress into private VPC subnet is disabled.

2. In-VPC Compute Sandbox Spark / Livy

PySpark execution occurs strictly inside cluster worker nodes. Heavy joins, filtering, and scans never leave internal memory.

3. Zero Raw Data Egress Metadata Only

Only aggregated scalar metrics, row counts, and structural schemas return back to the engineer prompt context.