Discover Neo4j Aura_ The Future of Graph Database-as-a-Service Workshop_3.13.24

Discover Neo4j Aura: The Future
of Graph Database-as-a-Service
Workshop
March 13, 2024

Neo4j Inc. All rights reserved 2024
Today’s Agenda
1. What is Aura?
2. Architecture
3. Sizing
4. Data Ingestion
5. Data Monitoring
6. Security
7. SSO
8. Roadmap
9. Demo/Start Aura Free
New to Neo4j Graph database and the
Label Property Graph model?
Bonus 30 minute lightweight introduction
to Neo4j and Graphs at the end if there’s
time and interest.

Today’s Cloud Database and DBAAS Market
Global Statistics
Market Value
(2022)
$16.3 BN
Market Value
(2023)
$78 BN
CAGR
(2023-2032)
>16.5%
Segment Statistics
Solutions Segment
CAGR (2023-2032)
>16%
Relational Database Segment
Market Value 2022
>$8.5 BN
North America
Market Share (2022)
>35%

Aura Platform Overview
Graph Database as a Service Graph Data Science as a Service
Platform
Product
Family
Product
Differentiation
AuraDB is built to backend
applications; paid tiers offer
three node clusters
designed for robustness and
high availability.
AuraDS is built to empower
data scientists to use graph
without worrying about
admin; offers large single
instances for big analytics
tasks.
Product
Tiers Free Professional Enterprise Professional Enterprise

AuraDB Product Tiers
AuraDB Free
FREE!
For small development projects,
learning, experimentation and
prototyping.
Feature Highlights:
AuraDB Professional
Starting at:
$65/month
For medium-scale applications in
advanced development or production
environments.
Everything in Free, plus:
AuraDB Enterprise
Speak with us!
For large-scale, mission-critical
applications that require advanced
security and 24x7 support.
Everything in Professional, plus:
● Up to 384 GB memory per database
instance
● 99.95% guaranteed uptime SLA
● Role-based access control with granular
security
● VPC isolation and dedicated infrastructure
● Custom pricing and sales contracts
● Premium 24x7 support and services
● Hourly backups with 90-day retention
● Support for AWS, Azure, and GCP
marketplace private offers
● Up to 64 GB memory per database instance
● Unlimited database instances
● Daily backups, 7-day retention
● On-demand snapshots
● Credit card payment or Cloud marketplace
billing integration
● Multi-tenant, shared environment
● No SSO
● No credit card or other payment method
required
● Up to 200k nodes and 400k relationships
● More sample datasets to explore
● Bloom data discovery and visualization
included
● No backups
● No SSO

AuraDS Product Tiers
AuraDS Professional
Starting at:
$1/hour*
AuraDS Professional is the fastest way to
take your graph data science
experiments to production with monthly
billing.
Feature Highlights:
● 8-96GB (RAM)
● Pay as you go: credit card or Google Cloud
billing
● Automated updates/patches
● Pause instances when not in use, pay 80%
less
AuraDS Enterprise
Speak with us!
AuraDS Enterprise offers additional scale,
security, premium support, and negotiable
contracts.
Everything in Professional, plus:
● 8-384GB (RAM)
● Custom pricing and sales contracts
● Automated updates and patches
● Premium 24x7 support
● Role-based access control
● Pay with committed spend from AWS, Azure,
and Google Cloud
● Private marketplace offers for AWS, Azure, and
Google Cloud
● Pause instances when not in use, pay 80% less
● VPC isolation and dedicated infrastructure

Neo4j’s Graph DBaaS
A Fully-Managed Graph Database Service
Built On A Battle-Tested Foundation
Fully Automated, Zero Administration
Over 650 Deployed Enterprise Customer DBs
Worry-Free Security and Reliability
Always-On, No Downtime
Simple Pricing, Predictable Cost
Elastic Sizing
Enterprise
Enterprise

Multi-Cloud Availability
Cloud agnostic
Can be built to support all global regions
Data stays local to region
AWS, GCP, Azure

11
AuraDB Enterprise High
Availability & Reliability
Self-healing, always-on with 99.95%
uptime guarantee*
Highly available, even while scaling and
patching instances
ACID (atomicity, consistency, isolation,
durability) compliant
Automated hourly backups with 90-day
retention
Multi-Availability Zone distribution
Durable storage with data 3-way
replicated
99.95%

12
24x7 Support for
your 24/7 Business
24x7x365 Premium Support
1 hour Sev-1 Response Time
Guaranteed SLAs
Highly-trained Neo4j support team
available in all global time zones
Get support the way you want it! Email,
web, phone, or Neo4j API to log your
support tickets and make updates

Leading Brands Trust Aura Enterprise

1. Get cluster running
2. Check the operating system/user
permissions and limits
3. Memory conﬁguration
4. Client Connectivity and dns naming
conventions
5. Get ssl/security in place
6. Logging/Monitoring (setting up Neo4j
Ops Manager)
7. Backup and recovery
Day in the life of Neo4j EE (Architecture/Ops)
Automate as much as possible (at least it will be needed for regular testing of disaster recovery)

Dedicated Project
Cloud Region
VPC
Kubernetes Cluster
AZ-b AZ-c
AZ-a
Backup Object Storage
Cloud Load Balancer
Shared Project
VPC
Kubernetes Cluster
AuraDB
Console
Database
Manager
Cloud Load
Balancer
Aura Control Plane
AuraDB Enterprise Database Cluster
Developer
Admin User
Customer Network
Database Tools
Application
Driver Client
Kubernetes
Control
Plane
Multi-AZ
cluster
protects from
data center
failures
Disk Storage Disk Storage Disk Storage
BOLT,
TLS 1.3
HTTP,
TLS 1.3
HTTP,
TLS 1.3
Fully encrypted
trafﬁc, including
intra-service
Dedicated VPC
and cloud
infrastructure
HTTP,
TLS 1.3
Neo4j Neo4j Neo4j
Dedicated project /account is
completely destroyed when
customer leaves the platform
Data (storage &
backups) is
encrypted at
rest
Cloud K8s Service
Cloud Architecture | AuraDB Enterprise (All Clouds)

Overview of the AuraDB Cloud Architecture
Customer AWS / Azure / GCP Account
Customer VPC
Aura Control Plane
Neo4j AWS / Azure / GCP Account / Environment Per Aura Customer
Neo4j VPC
Kubernetes cluster
AWS / Azure / GCP Region
Neo4j VPC
Kubernetes cluster
ZONE A
Persistent
Volume
Neo4j
Developer Tools
Console
Services
Database
Manager
Cloud
Load
Balancer
Backup
Storage
Admin Users
Customer
Application
Neo4j Driver Client
End Users
Developers
Persistent
Volume
Persistent
Volume
Interface
Endpoint
AWS
PrivateLink
Azure
Private Link
GCP Private
Service
Connect
Private Load
Balancer
Neo4j
Process
Neo4j
Process
Neo4j
Process
Database
Ingress
Database Ingress
Multiple Instances
VPC
Endpoint
Kubernetes
Control
Plane
HTTP,
TLS 1.3
BOLT,
TLS 1.3
HTTP,
TLS 1.3
HTTP,
TLS 1.3
ZONE B ZONE C

Instance to Match Typical EE Env | AuraDB Enterprise

Monitoring Utilization
We actively monitor datastore and
proactively notify you when an instance is
getting close to the actual physical value.
Snapshots
• Snapshots can be taken on-demand
→ AuraDB also has automated hourly
snapshots
• Snapshots allow devs/data scientists
to go back to “latest safe state” after
major changes
Storage Overview

Small ingestion load (upto =< 4 GB)
● Importing .dump ﬁles
● Load CSV (public URLs)
Medium to Large ingestion load (from existing on-prem)
● Push to Cloud (4.x and lower)
● neo4j-admin database upload (5.x and higher)
● Large workload from self-managed to Aura
Integrations
● Kafka
● Language Drivers
● Spark Connector &
AWS Glue
● ETL Tools
Ingestion Methods

Security Log Forwarding
What is it
Aura Security logs can be directed
towards a single downstream
application monitoring platform.
The initial offering enables users to
target cloud native logging solution
AWS CloudWatch, Azure Monitor Logs,
GCP Cloud Logging.
This service is chargeable add-on to the
baseline Aura cost
EAP

Advanced Metrics
What is it
Aura Advanced Metrics provides in-depth
monitoring for Neo4j Aura databases,
enabling users to analyze hardware
resources, Neo4j instance performance,
and database activities. It includes
dashboards for tracking metrics like
memory usage, connection counts, and
transaction activities.
Advanced features include customizable
time ranges for data analysis, high-level
data aggregation with zoom-in capability
for details, and manual refresh options for
up-to-date information. This tool helps
users optimize their database
performance by offering detailed insights
into the operational aspects of their Neo4j
Aura instances.
EAP
Drag over the area of interest
on a large time range to zoom
into the details

Bloom Enterprise
What is it
Key functionalities include the ability to save
multiple scenes, share perspectives based on
database roles, and minimal storage space
impact for stored data. Users intending to
fully leverage these new features must have
write access to the database. This setup
facilitates improved database visualization
management and collaboration among users.
EAP

40
Performance Metric Forwarding
What it is
Aura admin is able to set up a forwarding service for sending
database and service level monitoring data.
Initial target destination is Prometheus, which when used in
collaboration with Grafana, can provide users with metric
aggregation, ﬁltering and visualisation capabilities in an open
source platform.
Users can also call the Prometheus API for pull-based monitoring,
or leverage one of the existing integrations to downstream
application performance monitoring platforms (APM).
Why it’s important
Enterprise IT administrators can monitor the health of mission
critical applications leveraging Aura, using industry standard
Observability solutions.
Being able to view all critical metrics pertaining to an application
in an aggregation platform is vital for administrators, as it
streamlines monitoring processes and provides convenience
gains.
Proactive monitoring and alerting are important requirements for
various regulatory compliances sought by enterprises.
Future

42
Enterprise-Grade Security
Role-Based Access Control
Granular Schema-Based database security
Encryption at-rest (storage and backups)
[AES 256] and in-transit [TLS 1.3]
VPC-isolation with dedicated infrastructure
Private Endpoint Connectivity
SSO via OIDC (Browser & Bloom)
SSO via OKTA/AAD (Aura Console)
MFA in Aura Console
ISO 27001, ISO 20243, GDPR, CCPA, SOC2
Type I and II compliant Learn more: neo4j.com/cloud/security

Aura is compatible with the following Cloud Private Endpoint Services:
◦ AWS PrivateLink
◦ Azure Private Link
◦ GCP Private Service Connect
Allows an application/service residing in one VPC (the “Service Provider VPC”) to be accessed
by clients/consumers in (or through) other VPCs within the cloud Region (“Consumer VPCs”).
The Consumer accesses the service privately via an interface (VPC Endpoint) deployed locally in
the Consumer VPC, avoiding any requirement for internet connectivity and keeping all trafﬁc
inside cloud’s private network.
Private Connectivity between VPCs Enterprise Only

Security Conﬁguration UI (for self-service)
What is it
Putting the setup and conﬁguration of
SaaS centric security features into the
hands of the customer, for the
following services:
In EAP:
● GCP Private Service Connect
● AWS PrivateLink
● Azure Private Link
In development
● Single Sign-On (multiple IdP
support)
Enterprise Only

Customer Managed Keys (CMEK)
What is it
Aura encrypts all data at transit & rest
by default.
Customer Managed Encryption Keys
(CMEK) builds another layer for
security conscious Enterprises in the
cloud, enabling customers to manage
their own keys for encryption and
decryption for disk and object storage
Enterprise Only
EAP

What it is. Aura Enterprise supports Single Sign-On (SSO) at both the Console level and for
accessing Workspace, Bloom and Browser clients directly at the Instance level. SSO is supported
via the following OpenID Connect (OIDC) certiﬁed Identity Providers (IdPs):
→ Microsoft Azure Active Directory (AAD), Okta, Keycloak, Google Authentication.
Console SSO
Allows users to log in to the Aura Console using their company IdP credentials. Once
authenticated, users will be granted access to all instances in the tenant and will not need to
need to re-enter credentials when they move to UI Tools like Browser/Bloom/Workspace.
Instance SSO
Allows you to directly map groups of users (as deﬁned in your IdP) to DBMS RBAC roles when
launching Workspace, Bloom and Browser clients from an Aura instance.
Why it’s important. Security conscious Enterprises using federated SSO policies want to be able to
map their domain to Aura console and have their users access the console using their company
SSO credentials. Enterprises with a Zero trust model require deeper SSO integration and the ability
to invoke their own company’s MFA rules, using their chosen IdP.
Single Sign On (SSO) Enterprise Only

48
Single-sign on SSO to Console
What it is
Enterprise customers can select ‘login’ via SSO at Console, where
they can enter an email address. Neo4j Aura will then check if
that email has an SSO policy, and authenticate the user into the
Console. Once authenticated, users will be able to interact with
data and products without the need to re-enter credentials when
they move to UI Tools like Browser/Bloom/Workspace.
Support the same IdPs the Neo4j database supports - OKTA,
AAD, Google Auth and KeyCloak.
Why it’s important
Security conscious Enterprises using federated SSO policies want
to be able to map their domain to Aura console and have their
users access the console using their company SSO credentials.
Enterprises with a Zero trust model require deeper SSO
integration and the ability to invoke their own company’s MFA
rules, using their chosen IdP.
Enterprise Only

The information presented here is Neo4j, Inc. conﬁdential and does not constitute, and
should not be construed as, a promise or commitment by Neo4j to develop, market or
deliver any particular product, feature or function.
Neo4j reserves the right to change its product plans or roadmap at any time, without
obligation to notify any person of such changes.
The timing and content of Neo4j’s future product releases could differ materially from
the expectations discussed herein.
Safe Roadmap Harbor Disclaimer

``
User
Management
SOC2 Type 2
Console level user
management and
roles functionality
Type 2 level
certified
Aura API
Provisioning API
for programmatic
Aura use
Log
Forwarding
(EAP)
Log forwarding to
cloud platform
native logging
solutions
Aura on
Azure
Full feature parity
on Azure. Coverage
across all 3 major
cloud platforms
CMEK
(EAP)
Security Config
Self-Service
Customer Managed
Keys in EAP on
GCP and AWS.
Azure to follow by
‘23 end
User driven configuration for:
Private endpoints-GA Dec ‘23
SSO-Beta Dec ‘23
AuraDS
Everywhere
AuraDS
available on all
3 major cloud
platforms
2023 Enterprise Features Delivered

2023 Enterprise Features Delivered
AI enabler
GenAI
GDS enhanced algorithms
MLOps integration Knowledge Graphs
+ LLMs
Ease of use
Automated data modelling
Enhanced developer toolkits
Uniﬁed self-serve experience
1
3
2
Cloud ﬁrst enterprise
capabilities
Large DB support
Advanced use case handling
Data Science on DB add-on

Cloud First
Enterprise Capabilities

Neo4j Aura
2024 Key Investments
• Enterprise scale
◦ 2TB+ stores
◦ Horizontal scaling
• Advanced use cases
◦ Multi-DB
◦ Custom procedure support
• Data science
◦ GDS sessions on DB
◦ AI algorithms

Cloud Data Ecosystem
Plugs Into Your Existing Ecosystem

Self Service Tooling And Developer Experience
Comprehensive set of tools for self-service
ops manager
data importer
Visualize and explore your data
Query editor and results visualizer
Code-free data loader and modeler
NeoDash (BI)

Comprehensive set of tools for self-service
Self Service Enhancements
1. Data Import: Model & Load Your First Graph:
Neo4j Importer
2. Bloom: Explore Graph Algorithms, Time Slicer,
Cypher Actions, Search improvements
3. Browser/Query-Better favorites, history +
visualization
4. Uniﬁed Developer Experience with Neo4j
Workspace
Roadmap (2024)
1. Simpliﬁed import from various relational and
cloud systems
2. New Graph Visualization Library
3. Improved Cypher Development Support-
VS Code Extension

Simpliﬁed Data Import @ Scale
Enable data ingestion in minutes from key sources
Select from key sources (overtime 100s) and provide security
credentials
Schedule import job to run regular imports including
incremental imports overtime.
Automated model creation with ability to customize for user
Figma Demo
Source Model Schedule

Better client surface for Developers and Data
Scientists
Neo4j GraphQL Library
● Build low code API with GraphQL Library &
Toolbox
● GraphQL support has enabled 1B queries in Aura
Simpliﬁed Drivers API for Neo4j
● Simpliﬁed API Driver object-driver.executeQuery() -
returns results directly into native formats
● Driver APIs automates various capabilities like
Sessions, Transaction Functions, Bookmarks
GDS Native Python client
● Wraps the Neo4j python driver (dataframe support)
● Run GDS algorithms just like you would any python
function
● run_cypher lets you execute Cypher statements
● Pythonic features: support for graph and model
objects

AI Enabler
Graph Data Science & Generative AI

Graph Data Science
Make Sense Of Data Relationships
Machine Learning Pipeline
Pl
ay
s
Lives_in
In_sport
Likes
F
a
n
_
o
f
Plays_for
K
n
o
w
s
Knows
Knows
K
n
o
w
s
Explore the hidden patterns and features in your data
What’s important? What’s unusual? What’s next?

Graph Data Science
Make Sense Of Data Relationships
Over 65 efﬁcient, parallelized algorithms. Iterate fast with different data sets & models,
version trained models.
Bring the context of your connected data into
a format that other pipelines can ingest.
The Largest Catalog of
Graph Algorithms
Native Graph Catalog and
Analytics Workspace
Graph Vector Embeddings
for Machine Learning

Graph Data Science
What’s New in Graph Data Science Library
Topological Sort Algorithm
Identify dependencies
Longest Path Algorithm
Identify critical paths
Knowledge Graph Embeddings
Discover missing relationships
Key Use Cases:
GenAI, Semantic Search Recommendations,
Life Sciences
Key Use Cases:
Supply Chain and Network Routing
Key Use Cases:
Supply Chain, Inventory Management,
Resource Allocation, and Build Management

DsSessions
What is it
DSSessions is the upcoming primary
way to interact with GDS. It facilitates
the separation of storage and compute
and will allow any Neo4j DBMS, AuraDB
or self-managed, to act as a data
source for GDS analytics
EAP

Generative AI, LLMs and Knowledge Graphs
Knowledge
Facts
Context
Language
Statistics
Creativity
KGs LLMs
+
BETTER TOGETHER
Growing conviction that not only will the adoption of GenAI and LLMs grow
substantially but also that we have an essential role to play

Graph Data Science
GenAI Product Strategy & Investments
Co-Pilot in Browser for
autocomplete & cypher
generation
Bloom & NeoDash NL
Integration
SQL to Cypher Migration
Prompt Generator & Fine
tune model from KG
OpenAI + MS Azure
OpenAI
VertexAI
AWS Bedrock
Langchain
LlamaIndex
Vector Search & Storage
Cypher: Real Time
integration with
Embedding APIs
Cypher: Real Time
integration with LLM
Models
Text2Cypher Custom
Model
Database for GenAI Integration
Self Service

Feature Status on Aura How it works on Aura
Bloom Collaboration Features Currently Unsupported
Workaround Available
Perspectives can be exported.
The resulting JSON file can be shared and then uploaded into a new Bloom session.
Multi-Database
(EE Feature)
Currently Unsupported
A single Aura instance is mapped to a single graph/database.
Multiple Aura instances can be deployed in a customer's Aura account.
Leveraging properties + RBAC can allow for the graph to be split into sub-graphs.
Fabric Currently Unsupported Not supported today
Custom Procedures / APOC Full Currently Unsupported
In many cases, these can be worked around today by refactoring with Cypher.
Customizable Instance Resources Currently Unsupported Aura instances come with a pre-configured and set mix of RAM, Storage and CPU
resources that has been designed based on our best practices for running most
Neo4j use cases in an optimized way.
Load CSV/JSON Workaround Available URLs for files must be available over the public internet, pre-signed URLs work under
the condition that it is not confined within a private VPC unavailable outside an
enterprise’s firewall
Max Threads Limitation dbms.connector.bolt.thread_pool_max_size is set to 400 in Aura
Read Replicas Limitation Aura clusters are set to 3 nodes currently. This supports the majority of workloads.
Support for read replicas in addition to the cluster is unsupported currently.
Aura Enterprise vs. Self-Managed Neo4j EE

Sign up here:
https://console.neo4j.io/?product=aura-db
Getting Started with Aura Free

72
Thank you!
Questions?
Continue with deﬁning what a Neo4j graph is and how to
use it?

Discover Neo4j Aura_ The Future of Graph Database-as-a-Service Workshop_3.13.24

Recommended

More Related Content

What's hot (20)

Similar to Discover Neo4j Aura_ The Future of Graph Database-as-a-Service Workshop_3.13.24 (20)

More from Neo4j (20)

Recently uploaded (20)

Discover Neo4j Aura_ The Future of Graph Database-as-a-Service Workshop_3.13.24