Hybrid Cloud Architecture for Enterprise SAP Workloads: A Reference Model for Public-Sector Digital Transformation

Public-sector enterprises in the Kingdom of Saudi Arabia operate large SAP estates that act as systems of record for finance, human capital, supply chain, and reporting. These platforms carry sovereignty, data residency, audit, and continuity obligations that pure public-cloud and pure on-premises deployment models do not satisfy in isolation. Hybrid cloud, as defined by the National Institute of Standards and Technology, offers a defensible target state, but the literature lacks a consolidated reference model that maps SAP S/4HANA workloads, identity and integration services, and resilience tiers to a hybrid topology suitable for national-level public-sector use. This paper proposes a nine-layer hybrid cloud reference architecture for enterprise SAP workloads, anchored on SAP S/4HANA as the system of record and Amazon Web Services as the principal cloud plane, with on-premises and partner-managed components retained where residency, classification, or continuity constraints demand them. The model is synthesised from the AWS Well-Architected Framework and its SAP Lens, official SAP architectural documentation, the NIST cloud reference architecture, Saudi cybersecurity and cloud regulatory guidance, and patterns observed during sustained delivery on enterprise SAP platforms in the Kingdom. The paper presents the nine layers (network and connectivity; compute and platform; database; application; integration; identity and access; security and compliance; observability and operations; resilience and disaster recovery), discusses the operating model and governance envelope, and identifies open questions for future work. The model is mapped to the Cloud Computing Regulatory Framework issued by the Communications, Space and Technology Commission and to the Essential and Cloud Cybersecurity Controls issued by the National Cybersecurity Authority. The contribution is intended to support digital transformation programmes pursued under Saudi Vision 2030 and the National Strategy for Data and Artificial Intelligence, and to provide a vocabulary that architects, auditors, and programme sponsors can share when evaluating cloud target states for SAP. This is the first paper in a four-paper portfolio on cloud-era enterprise platforms for public-sector digital transformation in the Kingdom of Saudi Arabia. Companion papers address cloud migration strategy for SAP landscapes, cloud-native AI and big data integration in enterprise platforms, and workforce readiness for the cloud-era enterprise.

Authors

Publication Details

Journal
Zenodo (CERN European Organization for Nuclear Research)
Published
2026-05-12
DOI
https://doi.org/10.5281/zenodo.20142321
Primary Topic
Cloud Data Security Solutions
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Hybrid Cloud Architecture for Enterprise SAP Workloads: A Reference Model for Public-Sector Digital Transformation

Muhammad Omar Muftakhar
Zenodo (CERN European Organization for Nuclear Research)
Cloud Data Security Solutions
article

Hybrid Cloud Architecture for Enterprise SAP Workloads: A Reference Model for Public-Sector Digital Transformation

Muhammad Omar Muftakhar
article en

Abstract

Public-sector enterprises in the Kingdom of Saudi Arabia operate large SAP estates that act as systems of record for finance, human capital, supply chain, and reporting. These platforms carry sovereignty, data residency, audit, and continuity obligations that pure public-cloud and pure on-premises deployment models do not satisfy in isolation. Hybrid cloud, as defined by the National Institute of Standards and Technology, offers a defensible target state, but the literature lacks a consolidated reference model that maps SAP S/4HANA workloads, identity and integration services, and resilience tiers to a hybrid topology suitable for national-level public-sector use. This paper proposes a nine-layer hybrid cloud reference architecture for enterprise SAP workloads, anchored on SAP S/4HANA as the system of record and Amazon Web Services as the principal cloud plane, with on-premises and partner-managed components retained where residency, classification, or continuity constraints demand them. The model is synthesised from the AWS Well-Architected Framework and its SAP Lens, official SAP architectural documentation, the NIST cloud reference architecture, Saudi cybersecurity and cloud regulatory guidance, and patterns observed during sustained delivery on enterprise SAP platforms in the Kingdom. The paper presents the nine layers (network and connectivity; compute and platform; database; application; integration; identity and access; security and compliance; observability and operations; resilience and disaster recovery), discusses the operating model and governance envelope, and identifies open questions for future work. The model is mapped to the Cloud Computing Regulatory Framework issued by the Communications, Space and Technology Commission and to the Essential and Cloud Cybersecurity Controls issued by the National Cybersecurity Authority. The contribution is intended to support digital transformation programmes pursued under Saudi Vision 2030 and the National Strategy for Data and Artificial Intelligence, and to provide a vocabulary that architects, auditors, and programme sponsors can share when evaluating cloud target states for SAP. This is the first paper in a four-paper portfolio on cloud-era enterprise platforms for public-sector digital transformation in the Kingdom of Saudi Arabia. Companion papers address cloud migration strategy for SAP landscapes, cloud-native AI and big data integration in enterprise platforms, and workforce readiness for the cloud-era enterprise.

Zenodo (CERN European Organization for Nuclear Research)
Climate action
Openalex Percentile: Top 2%
Cloud Data Security Solutions
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.