Extending your Enterprise IT with Amazon Virtual Private Cloud. Oyvind Roti Principal Solutions Architect, AWS

Transcription

1 Extending your Enterprise IT with Amazon Virtual Private Cloud Oyvind Roti Principal Solutions Architect, AWS

2 Three Things Some AWS Concepts Let s build a Virtual Private Cloud together Three New Services Announced Today

3 AWS Concepts

4 We define cloud computing by its benefits No Upfront Investment Replace capital expenditure with variable expense Speed and agility Infrastructure in minutes not weeks Low ongoing cost Customers leverage our economies of scale 38 PRICE REDUCTIONS Focus on business Not undifferentiated heavy lifting Flexible capacity No need to guess capacity requirements and overprovision Global Reach Go global in minutes and reach a global audience

5 Solving Problems for Enterprises Globally

6 Gartner Magic Quadrant for Cloud Infrastructure as a Service (August 19, 2013) Gartner Magic Quadrant for Cloud Infrastructure as a Service, Lydia Leong, Douglas Toombs, Bob Gill, Gregor Petri, Tiny Haynes, August 19, This Magic Quadrant graphic was published by Gartner, Inc. as part of a larger research note and should be evaluated in the context of the entire report.. The Gartner report is available upon request from Steven Armstrong (asteven@amazon.com). Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

7 Our scale AWS is the overwhelming market share leader, with more than five times the compute capacity in use than the aggregate total of the other fourteen providers in this Magic Quadrant. 5.2B retail business 7,800 employees A whole lot of servers (August 19, 2013) Every day, AWS adds enough server capacity to power that whole $5B enterprise Gartner Magic Quadrant for Cloud Infrastructure as a Service, Lydia Leong, Douglas Toombs, Bob Gill, Gregor Petri, Tiny Haynes, August 19, This Magic Quadrant graphic was published by Gartner, Inc. as part of a larger research note and should be evaluated in the context of the entire report.. The Gartner report is available upon request from Steven Armstrong (asteven@amazon.com). Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

8 AWS Services Deployment & Administration Application Services Compute Storage Database Networking AWS Global Infrastructure

9 AWS Global Infrastructure 9 Regions 25 Availability Zones 46 Edge Locations Continuous Expansion

10 Extending Your Enterprise into the Amazon Virtual Private Cloud

11 Cloud isn t an all or nothing choice On-Premises Resources Integration Cloud Resources Corporate Data Centers

12 Our Hybrid Focus: Tools to Support Hybrid IT Architectures Private Connections Workload Migrations On-Premise Apps Access Control Integration Cloud Apps Work with Existing Management Tools Your Data Centers

13 Our Hybrid Focus: Tools to Support Hybrid IT Architectures Active Directory IAM Policies Virtual Images VM Import/Export Private Network VPC Network Your Data Centers Your Data On-Premise Apps Storage Gatewa y Direct Connect Our Storage Your Cloud Apps VPC

14 Our Ecosystem Allows You to use your Existing Management Tools Management Tool Partners Single Pane of Glass

15 VPC Overview Bring your own network Your network goes here

16 VPC Overview Bring your own network Create your own subnets Subnet 1 Subnet 2 Subnet n

17 VPC Overview Control instance placement Availability Zone A Availability Zone B

18 VPC Overview Control instance placement and traffic Security Groups & NACLs Availability Zone A Availability Zone B

19 VPC Overview Control instance placement and traffic Security Groups & NACLs Routing Rules Availability Zone A Availability Zone B

20 VPC Overview VPC Gateways Virtual Private Gateway Internet Gateway Customer Network

21 VPC Overview Virtual Private Gateway IPSEC VPN Customer Network

22 VPC Overview Virtual Private Gateway Dynamic Routing (Route-based VPN) Static Routing (Policy-based VPN) Customer Network

23 VPC Overview Virtual Private Gateway IPSEC VPN Direct Connect DX Location Customer/Partner WAN Customer Network

24 VPC Overview Virtual Private Gateway Internet Gateway Customer Network

25 VPC Overview Connecting to Instances Private IP Elastic IP (publically routable) Customer Network

26 VPC Overview Connecting to Instances Load Balancers Customer Network

27 VPC Building Blocks Summary Virtual Private Cloud Subnets Route Tables, Security Groups, NACLs Virtual Private Gateway AWS Direct Connect Internet Gateway Elastic IPs and Load Balancers

28 Assurance over AWS security environment The Amazon Virtual Private Cloud [Amazon VPC] was a unique option that offered an additional level of security and an ability to integrate with other aspects of our infrastructure. Dr. Michael Miller, Head of HPC for R&D

29 Expert Audits: Validation Scalpels Approaching From 360º Experts examine the system with their particular focus Yet reviewed from a variety of perspectives SME SME What emerges is an unusually complete, comprehensive view including overlapping and non-overlapping elements All customers benefit from variety, volume, velocity of audits and certifications SME SME SME SME=subject matter expert

30 Security is a Shared Responsibility Customer Facilities Physical security Compute infrastructure Storage infrastructure Network infrastructure Virtualization layer (EC2) Hardened service endpoints Rich IAM capabilities Network configuration Security groups + = OS firewalls Operating systems Applications Proper service configuration AuthN & acct management Authorization policies Re-focus your security professionals on a subset of the problem Take advantage of high levels of uniformity and automation

31 Familiar Enterprise Security Tools Integrate with AWS Encryption Solutions Privileged Account Management / IAM Intrusion Prevention and Detection + Native security solutions such as AWS CloudHSM, RDS Transparent Data Encryption, S3 Server Side Encryption etc.

32 Let s Build a Virtual Private Cloud

33

34 Use cases: Enterprise Apps Benefits Production certified On demand licensing (varies based on app) Scripted deployment using CloudFormation of software like Citrix XenApp, Sharepoint, Exchange, Drupal and many others AWS Marketplace click and deploy to your account Best practice architectures Provide services close to your end uses by leveraging the AWS global footprint

35 Nasdaq used AWS to Build a New Line of Business

36 Lionsgate uses AWS to host SharePoint & SAP Amazon VPC Avoided data center build out 50% lower cost than hosting options Saved $1M over 3 years

37 Use cases: Disaster Recovery Backup / Restore Pilot Light Use native connectors from CommVault and NetBackup to store backups in S3 Use AWS Storage Gateway to replicate onprem storage volumes to the cloud On failure, restore data into infrastructure running on the cloud Oracle Secure Cloud Backup Module for Amazon S3 Application infrastructure is built as production in the cloud but switched off except for core Data is replicated in via DB/app replication or an AWS Storage Gateway Environment can be activated (DNS update) and scaled at a moments notice Customers only pay for pilot infra costs and snapshot storage

38 We support a wide range of technologies

39 We have partners ready to help

40 Three New Service Announcements

41 New Beta: Amazon CloudTrail Enables security analysis, resource change tracking, and compliance auditing. Analyze logs with third party tools (e.g. Alert Logic, Boundary, Loggly, Splunk, Sumo Logic) No additional charge for CloudTrail (standard rates for Amazon S3 and Amazon SNS usage apply). CloudTrail is available now in the US East (Northern Virginia), and US West (Oregon) Regions. We'll be adding support for additional Regions as quickly as possible.

42 New Preview: Amazon AppStream Flexible, low-latency service that lets you stream resource intensive applications and games from the cloud. Deploys and renders your application on AWS infrastructure and streams the output to mass-market devices, such as PCs, tablets, and mobile phones. Can scale to handle vast computational and storage needs, regardless of the end-user devices. Enables use cases for games and apps that wouldn t be possible running natively on mass-market devices.

43 New Preview: Amazon WorkSpaces Fully managed desktop computing service in the cloud. Persistent storage, bundled utilities and productivity applications Price starts at USD 35 / user / month WorkSpaces can also be accessed from ipads, Kindles, and Android tablets. Register for preview now on aws.amazon.com

44 SOLUTIONS ARCHITECT CORNER Running throughout the event Dedicated to providing you technical expertise on cloudbased architecture best practices for: Take advantage of this by visiting our booth D13!

45 Lucky Draw Each day, stand the chance to win an Amazon Kindle One lucky winner will be drawn each day

46 @AWSCloudSEAsia