Get Your Head in the Cloud. The Hidden Power of Coupa s True Cloud Solution

Size: px

Start display at page:

Download "Get Your Head in the Cloud. The Hidden Power of Coupa s True Cloud Solution"

Bennett Fowler
8 years ago
Views:

1 Get Your Head in the Cloud The Hidden Power of Coupa s True Cloud Solution

2 INTRODUCTIONS David Williams VP, Sanket Naik VP, Cloud Operations & Jim Benoit Senior Buyer & Project Lead Coupa Implementation

3 Who Are Y all?

4 Our History in the Cloud

5 True Cloud from Different Perspectives Photo Andrew Lipson, used with permission

6 A Black Box

7 The Nuts and Bolts

8 A collection of People Processes Software Hardware

9 Abstracted Layers of Complexity

10 People 10

11 Processes, or, One Codeline is Awesome rc1 ( rc1) rc2 ( rc2) Release (13.0.0) 013_release master System/ Integration Testing Regression Test Start Regression Test End Branch New Features Release Tag Deferred SWAT/ Integrations/ Sustaining Pull Requests Accepted SWAT/ Integrations/ Sustaining Pull Requests Fixes for bugs found by QA Milestone 11

Regression Test Start Regression Test End Branch New Features Release Tag Deferred SWAT/

12 But Also Hard Enough Release (12.0.0) rc1 ( rc1) rc2 ( rc2) Release (12.0.1) rc1 ( rc1) rc2 ( rc2) Release (12.0.2) 012_release master Regression Test Start Regression Test End 013_release Branch Deferred SWAT/ Integrations/ Sustaining Pull Requests Fixes for bugs found by QA Accepted SWAT/ Integrations/ Sustaining Pull Requests Release Tag Milestone 12

Test End 013_release Branch Deferred SWAT/ Integrations/ Sustaining Pull Requests Fixes for

13 Quality Throughout the Process Reviews Designs are reviewed for correctness and consistency All check- ins are code reviewed by func:onal experts Aspect- oriented developer checklists Automated tests Mandatory unit tests for all model changes Tests are run automa:cally all the :me System (integra:on) tests are automated Non- func4onal concerns Analysis of API, and CSV interfaces Performance and scalability studies Con:nuous security and penetra:on tes:ng Pla8orm reliability Version updates on dependent libraries and sohware PlaIorm security updates Code analysis in con:nuous integra:on 13

(integra:on) tests are automated Non- func4onal concerns Analysis of API, and CSV interfaces Performance and scalability studies Con:nuous security

14 Software & Hardware: A High-Level Map

15 More Specifically Load Balancer Firewall Web Server 1/ App Server 1 Web Server 2/ App Server 2 Application Tier Firewall Firewall Backup Firewall MySQL Master/Slave 1 MySQL Master/Slave 2 Database Tier Utility Server 1 Utility Server 2 Utility Tier Primary Data Center Secondary Data Center

Firewall MySQL Master/Slave 1 MySQL Master/Slave 2 Database Tier Utility

16 Your Driver of Savings as a Service

17 What Do You Need from the Cloud?

18 We think you need Dependability Security Interoperability Simplicity

19 Dependability

20 Dependability Designed for Failure Resilient & Elastic Monitored 24 x 7 x 365

21 Designed for Failure Backups Every hour 3 Levels of Failover Data Center Region Backup Real-time Database Replication RTO = 0-1hr RPO = 0-1hr

22 Resilient & Elastic at a Global Scale 24x7 Cloud Operations Defense in Depth Security & Compliance State of the Art Facilities Active Active Hot Replication Global Support Model Best in Class SLAs % Availability Power & HVAC

23 Always Up

24 Monitored 24 x 7 x 365 Transaction Monitoring App Performance CPU Utilization Disk Space Memory Consumption Intrusion Detection Background Queue Execution SFTP Connectivity Exception Handling Inbound & Outbound Integration Connectors Throughput

25 Security & Compliance

26 Security Physical Electronic People Process & Auditing

27 Physical Security

28 Electronic Security

29 Security Operations & Tools Firewalls Intrusion Detection Systems Anti-virus Security Scanning Penetration testing Static code analysis Single Sign-on (SSO) Encryption Threat Intelligence 24 x 7 monitoring Data lifecycle management

30 Security Operations & Tools contd. Single sign-on (SSO) Support for SAML 2.0 Integrated authentication to Active Directory Integration Security Integration Method Security Mechanism IDoc, Flat File SFTP dropoff Per customer SFTP user SSH keys authentication and Host key verification REST API SSL API key for authentication IP whitelisting (coming soon)

31 People

32 Process & Auditing SSAE 16 Type II SOC 1 6+ years of auditable and materially clean reports HIPAA Compliant US/EU Safe Harbor Certified FedRAMP (Q4, 2015) SOC 2 (Q4 2015) ISO (Q3, 2016) PCI (Q4, 2016)

33 Interoperability

34 Interoperability Integrated Cloud Agnostic Partner-Oriented Self-Service Transparent

35 Simplicity at Scale

36 Let s Talk Practice

37 General Mills

41 One more thing

42 What s New New hosting in Sydney for Australian customers Second region in Frankfurt for European customers coming soon Launching Enterprise Stack (ES) Reliability More resilience to failures for infrastructure components Zero downtime upgrades for most infrastructure components Elasticity Auto-scaling of utility services like processing and background job processing Performance Bigger and faster hardware CPUs, memory, SSD, IOPS Average response time improved by up to 50% Throughput increased by up to 100% Security Full data at rest encryption (DARE) Data in transit security for (Opportunistic TLS)

43 THANK YOU!

45 Photo Credits Surveyor - Nuts & Bolts - ENIAC - LEGO Tower - LEGO Minifigs - (modified) Golden Collosseum by Juan de Dios Santander Vela Library by Jeremy Noble Icy Roads by Wilson Hui Key & Circuit board perspecsys.com Day 87 by Pascal Horse racing by Paul Serious Scaffolding by Dan DeLuca Flying a bit close by Mark Lehmann Anchor Chain - Poodle - Lego Dimensions - Relativity by Andrew Lipson - RFID closed - Elgin Pocket Watch -

Table of Contents. FME Cloud Architecture Overview. Secure Operations. Application Security. Shared Responsibility.

Table of Contents. FME Cloud Architecture Overview. Secure Operations. Application Security. Shared Responsibility. FME Cloud Security Table of Contents FME Cloud Architecture Overview Secure Operations I. Backup II. Data Governance and Privacy III. Destruction of Data IV. Incident Reporting V. Development VI. Customer