Pega as a Service. Kim Singletary, Dir. Product Marketing Cloud Matt Yanchyshyn, Sr. Mgr., AWS Solutions Architect

Transcription

1 1

2 Pega as a Service Kim Singletary, Dir. Product Marketing Cloud Matt Yanchyshyn, Sr. Mgr., AWS Solutions Architect This information is not a commitment, promise or legal obligation to deliver any material, code, or functionality and the development, release and timing of any features or functionality described for our products remains at our sole discretion Confidential. Pegasystems Inc. 2

3 Agenda Enabling Strategic Applications Pega Cloud and Enterprise Environments Shared Responsibility & Continuous Delivery Operational Excellence & Enterprise Class Architecture Scalability & Business Continuity Security & Confidentiality Q&A 3

4 Little to Lose 4

5 Conforming 5

6 Everything to Gain 6

7 Complex & Strategic 7

8 Pega as a Service Pega 7 Platform and Pega Application Software and Licenses Resiliency Continuous lifecycle support for software and provided services Resources Enterprise class infrastructure with global service availability Reach 8

9 Create, Deliver, Run Production Virtual Private Cloud Pega Cloud Operations Build for Change 9

10 Shared Responsibility Model Customer Customer applications & content & access control Define your application ON the Cloud Pega Cloud Network Security Server Security Data Security System Access Control Define your controls IN the Cloud AWS Foundational Services Compute Storage Database Networking AWS Global Infrastructure Availability Zones Edge Locations Regions AWS takes care of the security OF the Cloud 10

11 Continuous Delivery Concept APPLICATION OPERATIONS INFRASTRUCTURE Development Testing Pre-Production Production 11

12 Resources: Enterprise Service Catalog Availability & Scale Pega Application Health Environment Monitoring Database Management Security & Compliance 12

13 Operational Excellence Authorized Cloud Service Authorized Cloud

14 Reach: Infrastructure & Innovation SaaS Partner Partners who deliver applications via Software-as-a-Service enable users to utilize their software solution over the internet. Healthcare Competency Health Administration:. Solutions that address operational requirements of the healthcare enterprise including revenue cycle management and ERP. 14

15 AWS Regions 11 Regions 29 Availability Zones Pega Cloud Regions for Deployment 15

16 North America US East (Northern Virginia) US West (Oregon) Region Region EC2 Availability Zones: 5 EC2 Availability Zones: 3 Launched 2006 Launched 2011 US West (Northern California) AWS GovCloud (US) Region Region EC2 Availability Zones: 3 EC2 Availability Zones: 2 Launched 2009 Launched 2011 AWS Edge Locations Ashburn, VA (3); Atlanta, GA; Dallas/Fort Worth, TX (2); Hayward, CA; Jacksonville, FL; Los Angeles, CA (2); Miami, FL; New York, NY (3); Newark, NJ; Palo Alto, CA; San Jose, CA; Seattle, WA; South Bend, IN; St. Louis, MO 16

17 Virtual Private Cloud Services Dev\Test Dev\Test Zone A Zone B Pre-Production Availability Zone A Availability Zone B Dev\Test Production 17

18 VPN Connectivity INTERNET Clients Clients EC2 Instances VPC Subnet 1 Availability Zone Virtual Private Gateway VPN Connection Customer Gateway EC2 Instances VPC Subnet 2 Remote Servers Availability Zone Amazon VPC Customer Remote Network

19 Built-in Firewall: Security Groups and NACLs VPC security groups (mandatory) Instance level, stateful Supports ALLOW rules only Default deny inbound, allow outbound Use as whitelist least privilege VPC NACLs (optional) Subnet level, stateless Support ALLOW and DENY Default allow all Use as blacklist (port 135, 21, 23 ) Separation of duties Changed audited via AWS CloudTrail 19

20 AWS: Enforce consistent security on servers Pega Cloud Operations Configure and harden EC2 instances for Pega Cloud delivery Host-based protection Manage administrative users Enforce separation of duties & least privilege Connect to your existing services, e.g. logging, patching User administration Whitelisting and integrity Malware and HIPS Vulnerability management Audit and logging Hardening Operating system EC2 Pega Cloud Template Catalog Running instance Customer instance 20

21 AWS: Get consistent visibility Full visibility of your AWS environment CloudTrail records access to API calls and save logs in S3 Who did what and when and from where Easily aggregate all log information Out of the box integration with log analysis tools Pega Cloud Operations integrates CloudTrail logs with environment logs to support customer SLA 21

22 AWS: Certifications and assurance programs Secured premises Secured storage Secured keys Secured communications Secured network access Secured users Secured logins Full control to add security 22

23 AWS: Certifications and assurance programs You benefit from an environment built for the most security sensitive organizations Flexibility to define the right security controls for your workload sensitivity You always have full ownership and control of your data AWS manages security controls so you don t have to Pega Cloud leverages AWS certifications and compliance as a foundational service component 23

24 Customers Retain Full Ownership and Control of Their Content Security is our number one priority Security starts at the top in Amazon with a dedicated CISO and strong cultural focus through operational excellence and root cause analysis Dedicated internal security teams constantly looking at the security of our services and how we better can help our customers secure themselves Customers retain ownership of their intellectual property and content AWS personnel have no access to customer content or guest OS Customers manage their privacy objectives how they choose to read AWS privacy whitepapers on our Compliance website Select the AWS geographical Region and no automatic replication elsewhere 24

25 AWS: Constantly Innovating Driven by Your Needs Security, compliance, governance, and audit related launches and updates

26 Roadmap Continuous Delivery Strategic Applications Continuous Innovation Pega Cloud Pega 7 Platform 26

27 Q & A 27