Академический Документы
Профессиональный Документы
Культура Документы
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Customers
Over a million customers running every imaginable use case
11,200+ Nonprofits
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
What is Cloud Computing?
"Cloud Computing" refers to the on-demand delivery of IT resources and
applications via the Internet with pay-as-you-go pricing.
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Increased Agility
Speed
Experimentation
Culture of innovation
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Agility: Speed
Go global in minutes.
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Why Agility Matters: Experimentation
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Increase Innovation
Experiment quickly with low cost and low risk.
On-Premises
$ Millions Nearly $0
Experiment infrequently Experiment often
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Agility and Instant Elasticity
Easily Scale Up and Down
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Case Study: Airbnb
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Case Study: Airbnb
15M
12M
9M
6M
January 2013
3M 4 Million
Mar 2009 Sep 2009 Mar 2010 Mar2011 Sep 2011 Mar 2012 Sep 2012 Mar 2013 Sep 2013 Mar 2014
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Case Study: Airbnb
9M
6M
3M
Mar 2009 Sep 2009 Mar 2010 Mar2011 Sep 2011 Mar 2012 Sep 2012 Mar 2013 Sep 2013 Mar 2014 Jun 2014
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Case Study: Airbnb
1,400
1,300
1,050
700
432
350
48
0
2010 2014
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Pay For Infrastructure As You Need it, Not Upfront
On-Premises
No upfront cost
Pay as you go
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Lower Total Cost of IT
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
You Dont Need to Guess Capacity
AWS
Actual demand
Actual demand
Customer
Dissatisfaction
Self
Hosting
Waste
Predicted Demand
Rigid Elastic
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Remove Waste Focus on the Business
30% 70%
AWS Configuring
Cloud-Based More Time to Focus on
Your Cloud
Infrastructure Your Business
Assets
70% 30%
Only 30% of your time should be spent architecting for the cloud and configuring your assets.
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Topic Summary
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Why AWS?
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Partner Ecosystem
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Marketplace
AWS Marketplace allows customers to discover, evaluate and purchase IT and
business software optimized for the AWS Cloud.
23 product categories
More than1,900 listings
More than 70 million hours of AWS
Marketplace software per month.
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Platform Breadth
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Global Infrastructure
AWS Regions
AWS Edge Locations
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Support Virtually Every Use Case
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Continual Iteration and Innovation
AWS continuously upgrades infrastructure, so you dont have to
On-Premises Infrastructure
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Cost Savings and Flexibility
1 2 3 4
Replace up-front Economies of scale Pricing model choice Save more money as
capital expense with allow AWS to continually to support variable & you grow bigger
low variable cost lower costs stable workloads
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
The AWS Price Reduction Philosophy
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Topic Summary
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
How Enterprises Are Using
the Cloud
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
How Enterprises Use AWS
Augment On-Premises
resources with cloud capacity
(Hybrid Architecture)
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Development and Testing
Customers can get comfortable with the AWS platform and business model.
Oracle environment New apps for faster Development & testing of new
provisioning software products
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Altogether New Applications
Leverage the AWS platform to develop entirely new, innovative applications.
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Websites & Digital Transformation
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Analytics
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Mobile
Mobile services and analytics Web and mobile site Apps for cabin crew staff
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Business Critical Production Applications
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Migrating Datacenters
Entire data center migration is now happening more and more.
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
All-In Migrations
Enterprises
Independent Software
Vendors
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
More Than Two Choices
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
The Cloud Isnt An All or Nothing Choice
On-Premises Cloud
Integration
Resources Resources
Corporate Data
Centers
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Support for Hybrid IT Architectures
Active Directory AWS Identity & Access Mgmt. Users & Access Rules
Network Configuration Amazon Virtual Private Cloud Your Private Network
Encryption AWS Cloud HSM HSM Appliance
Backup Appliances AWS Storage Gateway Cloud Backups
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Integration with On-Premises Resources
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
What Are Customers Really Looking For?
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Customer Testimonial: Mortar
Without AWS we
would have needed
to raise $7.1M to
launch instead of
$1.8M
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Customer Testimonial: Commonwealth Bank
Weve halved
storage costs of
millions of dollars.
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Customer Testimonial: U.S. Navy
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Topic Summary
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Module 2: Using The AWS Platform
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Module Overview
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Learning Objectives
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
The AWS Global Infrastructure
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Platform Enterprise Virtual Sharing and
Applications Desktop Collaboration
Queuing and
Hadoop One-Click Identity
Notifications
Web App
Deployment
Workflow
Real-Time
Sync
Streaming
Platform Data App
Streaming Dev/Ops Resource
Services Management
Data Mobile
Transcoding
Warehouse Analytics
Email
Data Resource Push
Pipelines Templates Notifications
Search
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Global Infrastructure
http://aws.amazon.com/about-aws/globalinfrastructure/
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Regions, Availability Zones
US Regions Global Regions
US East (VA) US West (CA)
Asia Pacific Asia Pacific Asia Pacific China (Beijing)
AZ - A AZ - B (Tokyo) (Singapore) (Sydney)
AZ - A AZ - B
AZ - A AZ - B
AZ - C AZ - D AZ - A AZ - B AZ - A AZ - B AZ
AZ - C
Note: Conceptual drawing only. The number of Availability Zones (AZ) may vary.
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Expansion
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Topic Summary
The AWS platform is a very broad and robust technology that offers more
functionality than you will find anywhere else.
This global infrastructure forms the basis of all other layers of the AWS
cloud computing platform.
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Core Services
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Amazon Web Services
Enterprise Analytics App Services Deployment and Management Mobile Services
Applications
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Compute Services
EC2
Actual
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Broadest Collection of Instance Types
M3 C4 I2 HS1 G2 R3
Added M3 C3 I2 G2
Instance
Types
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Instance Types
Type Description
Compute Optimized (C4) Highest performing processors and the lowest price/compute performance.
Memory Optimized (R3) High speed video encoding. Super fast databases.
GPU (G2) Graphics and general purpose GPU (Graphics Processing Unit) compute
applications.
Storage Optimized (I2) Transactional systems, high-performance NoSQL databases.
Very fast SSD-backed instance. High IOPS at low cost.
High Storage Density (HS1) Very high storage density.
Technical computing to grid deployments to analytics workloads.
T2 Low cost with burstable performance.
Reduced costs for modest-demand apps that benefit from bursts of power.
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Storage
S3,
Glacier
Images Images
Videos Videos
Files Files
Binaries EBS Binaries
Snapshots Snapshots
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Amazon Simple Storage Service (S3)
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Amazon Elastic Block Store (EBS)
EBS General Purpose Solid State Drive (SSD)
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Case Study: Pinterest
Challenge
Rapidly expanding users
Dedicate staff to business, not data center
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Database Services
DBA
Amazon RDS
Amazon RDS Amazon DynamoDB Amazon ElastiCache
For Aurora
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Networking Services
Availability Availability
Zone A Zone B
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
High Performance Cloud Network
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Network Case Study: Pfizer
Benefit
Cost avoidance: able to scale up without investing
in additional hardware for peak loads
Able to invest in other business activities
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Topic Summary
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Administration and Security
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Case Study: FINRA
Challenge
To respond to rapidly changing market dynamics
Analyze and store 30 billion market events every day
Why AWS?
Level of functionality at the right layers
Fulfilled security requirements
Automated infrastructure deployment
Big Data processing with Amazon Elastic MapReduce
and Amazon S3
Benefits
Agility and speed
Cost savings: 10-20 million annually
Watch the video Transforming technology and culture
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Comprehensive Security Capabilities
NETWORK
PHYSICAL
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Gives You Control
Secure key
Secure network Secure compute Secure storage Governance
management
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Identity and Access Control
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Monitoring and Usage Auditing
Amazon
AWS CloudTrail
CloudWatch
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Topic Summary
AWS has a broad set of identity and access control services that allow
you to manage users, groups, and permissions, connect or set up
Microsoft directories.
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Platform Services
Analytics App Services Deployment and Management Mobile Services
Queuing and
Hadoop One-Click Identity
Notifications
Web App
Deployment
Workflow
Real-Time
Sync
Streaming
Data App
Streaming Dev/Ops Resource
Management
Data Mobile
Transcoding
Warehouse Analytics
Email
Data Resource Push
Pipelines Templates Notifications
Search
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Analytics
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Analytics Case Study: Nokia
Nokias Xpress Internet Services platform provides mobile Internet services for
emerging global markets.
Challenge
The volume of data became too large for a
traditional relational database
AWS takes a lot of
Scale the database and generate reports
the burden out of
Why AWS?
having to manage
Using Amazon Redshift, run queries twice as
the databasea huge fast as its previous solution
savings in terms of Benefits
staff and expertise. Use business intelligence tools to mine and
Greg Johnson analyze big data at a 50% cost savings
Head of Analytics
Nokia
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Analytics Case Study: Major League Baseball
Challenge
Lots of data to be processed and delivered
Systems need to evolve quickly
Ever-increasing data set
Why AWS?
Push notifications and media tracking running in
AWS
Flexibility and speed to market are critical
Most reliable and robust cloud provider
Amazon Kinesis
Amazon Redshift
Benefits
AWS Direct Connect Able to spin up compute capacity to process 17 PB
of game data per season
Reduce capacity to lower costs during off-season
Watch the video Flexibility and speed-to-market for Statcast platform
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Application Services
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Deployment and Management
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Mobile Services
H
i
!
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Mobile Case Study: Concrete Software
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Enterprise Applications
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Topic Summary
Amazon Web Services provides you with services to help with the
deployment and management of your applications.
Amazon mobile services help you securely manage and synchronize app
data for your users across mobile devices.
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Module 3: Cloud Financials
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Module Overview
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Learning Objectives
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
The Economic Benefits of AWS
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Reducing Cost and Increasing Business Value
On-premises/
colocation x x x x x x
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Total Cost of Ownership (TCO)
TCO Definition: the entire set of acquisition and operating costs for running an
infrastructure environment end-to-end.
Acquisition
Operating costs
Decommissioning / retiring systems
Opportunity cost
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
How can you achieve lower TCO with AWS?
1 2 3
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Initial Questions to Consider When Exploring TCO
1
How do you plan for capacity?
Capacity
How many servers have you added in the past year? Anticipating next year?
Planning
Can you switch your hardware on and off and only pay for what is used?
Will you run out of data center space some time in the future?
3
Operations What was your last year power utility bill for the Data Center(s)?
Have you budgeted for both average and peak power requirements?
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Traditional Capacity Planning
Limitations of traditional data centers:
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Inflexible Physical Assets
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Costs are Never In Sync
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Migration and Expansion Costs
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Unexpected Inefficiencies
Under-deployment, over-deployment
Unexpected high demand or low demand
Non-optimal, non-scalable
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
No Capital Intensive Infrastructure
Physical space
Cabling
Cooling
Power
Networking
No infrastructure to
Racks
Servers build to get started
Storage
Certification
Labor
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
TCO Calculator
Compare the cost of running your applications in an on-premises or colocation
environment to AWS
Environment Region Servers Virtual Machines Storage
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Three Steps to Comparing TCO
Using the TCO Calculator
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Customers Are Realizing Lower TCO
If we were to use the traditional on-premises data center, we would have spent $34
million dollars in hardware and maintenance expenses during the first two years. With
AWS cloud, we met our reliability and performance objectives at a fraction of the cost.
Mr. Chun Kang, Principal Engineer, Samsung
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Customers Are Realizing Lower TCO
Decreased monthly
operating costs by 75%
The AWS-based infrastructure has decreased the publications overall monthly operating costs
by 75%. The publication has also been able to streamline its system administration personnel
by approximately 50%.
Nathan Butler of The Newsweek/Daily Beast Company
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Customer Spotlight: Dow Jones Intl.
TCO analysis is crucial in making a favorable business case
VS
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Topic Summary Economic Benefits of AWS
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Pricing Principles
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Pricing Principles
Customers pay for exactly the amount of resources that they actually use
Pay less by using more Pay per use Pay less when AWS grows
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Demand-driven operating model for IT
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Pay Less Per Unit When You Use More
Volume discounts on overall bill when revenue hits certain thresholds.
Get Started on AWS Pay for compute Make a low, one-time Bid for unused capacity, Launch instances within
with free usage & no capacity by the hour payment and receive a charged at a Spot Price Amazon VPC that run
commitment with no long-term significant discount on which fluctuates based on hardware dedicated
commitments the hourly charge on supply and demand to a single customer
For POCs and For spiky workloads, For committed For time-insensitive or For highly sensitive or
getting started or to define needs utilization transient workloads compliance related
workloads
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Reserved Instances (RI)
Reserve capacity for one or three years
Pay a low, one-time fee for the capacity reservation
Receive a significant discount on the hourly charge for your instance
For example:
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Reserved Instance Payment Options Explained
No Upfront option:
Up to a 55% discount compared to On-Demand
Does not require upfront payment
Low hourly rate for the RI on an ongoing hourly basis
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Reserved Instance vs. On-Demand
What are the break-even points of each of these options in relation to
purchasing instances On-Demand?
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Spot instances
What are Spot instances?
Spare EC2 instances bid on in hourly increments
One hour at a time
Behave exactly like a regular instances
Cost Benefits
Up to 92% off regular on-demand prices per hour
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Spot Pricing Use Case: Honda
AWS Spot Accelerates Innovation
Cloud offers us an opportunity, as we can innovate faster
than before.
- Ayumi Tada, IT System Administrator, Honda R&D
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
The Simple Monthly Calculator
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
The Simple Monthly Calculator
Customers can effectively estimate the costs of running their specific project on AWS
http://aws.amazon.com/calculator
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Calculating the Cost of Launching a Web Application
Access the Simple Monthly Calculator
Choose the right region
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Calculating the Cost of Launching a Web Application
Choose the EC2 service from the service options in the left-hand menu of the Simple Monthly Calculator
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Calculating the Cost of Launching a Web Application
Add A New Row to add an EC2 server to your estimate
Determine the number of hours per month the server is likely to run. To determine this, you have a number of choices.
Calculating the Cost of Launching a Web Application
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Calculating the Cost of Launching a Web Application
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Calculating the Cost of Launching a Web Application
Add persistent storage to your instance, you should add an EBS (Elastic Block Store) to your instance.
Click on Add New Row under Storage: Amazon EBS Volumes
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Calculating the Cost of Launching a Web Application
Choose the size of your volume. If youd like to backup this volume to S3, choose the
snapshot size youd like captured
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Calculating the Cost of Launching a Web Application
There are some other inputs/options you need to consider when providing an estimate for
an EC2 instance.
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Calculating the Cost of Launching a Web Application
Click on the Estimate tab at the top of the screen to check estimate..
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Topic Summary Pricing Principles
Customers pay less per unit the more they use AWS.
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Cost Optimization
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Optimizing with AWS
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Choose the Right Instance Types
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Instance Utilization
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Reserved Instances and Spot Instances
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Offload Your Architecture
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Trusted Advisor
Further reduce costs
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Topic Summary
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Procurement and Contracts
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Simplifying Procurement
AWS provides customers with a flexible set of tools to simplify procurement.
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
The Role of Procurement
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Contract Simplicity
AWS has a single contract available online
Create a customized enterprise agreement
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Single Online Agreement
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Enterprise Agreements
Larger customers might prefer an enterprise agreement.
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Module 4: Security and Compliance
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Module Overview
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Learning Objectives
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Security Innovation
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Platform
Enterprise Virtual Sharing and
Applications Desktop Collaboration
Queuing and
Hadoop 1-click Web Identity
Notifications
App
Deployment
Workflow
Real-Time
Sync
Streaming
Platform Data App
Streaming Dev/Ops Resource
Services Management
Data Mobile
Transcoding
Warehouse Analytics
Email
Data Resource Push
Pipelines Templates Notifications
Search
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Rapid Pace of Security Innovation
280
159
82
48 61
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Security and Compliance Requirements from Every Industry
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
A Constantly Improving Security Baseline
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Expert Audits: Transparency and Accuracy
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Layers of Security Controls in AWS
Optimized
Network/OS/App Controls
Security in the cloud
Service-Specific Controls
Managed by
customer Cross-Service Controls
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Case Study: Vodafone
Vodafone built a mobile payment application.
Payment Card Industry (PCI) and Data Security
Standard (DSS) compliance was essential.
Launched in three months.
Reduced CapEx by 30%.
Deployed to seven channels, including Facebook. Payments
Stefano Harak
Online Senior Product Manager
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Topic Summary
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Security Controls
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Security Shared Responsibility Model
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Security and Compliance is a Shared Responsibility
Customers
Platform, Applications, Identity and Access Management Customers are
Operating System, Network, and Firewall Configuration
responsible for their
security IN the cloud
Client-Side Data Server-Side Data Network Traffic
Encryption Encryption Protection
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
You Always Have Full Ownership and Control
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
You Decide Where to Put Your Content and Applications
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Every Network Has Fine-Grained Security Built In
Availability Zone B
Every VPC has a private IP
address space you define. Every compute instance gets
multiple security groups
Create your own subnets and (stateful firewalls).
control all internal and
external connectivity. Every subnet gets network
access control lists (NACL).
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Create Multi-Tier Architectures
Load
balancing
Availability Zone A
Database Jump
App
EC2 Log
host
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Connect Privately to Your Existing Data Centers
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Create Flexible Multi-VPC Hybrid Environments
Your organization
Internal Storage/
Digital/
Enterprise Backup
Websites
Apps
Project Teams Marketing
Amazon
S3
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Encrypt Your Sensitive Information
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS CloudHSM (Hardware Security Module)
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Key Management Service
Encryption key management and compliance made easy.
1-click encryption
Centralized key management
(create, delete, view, set policies)
Enforced, automatic key rotation
Visibility into any changes via AWS CloudTrail
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Available, Durable, and Integrated with AWS Products
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
You Can Enforce Consistent Security on Your Hosts
Control the configuration of your Amazon EC2 compute instances and configure and
harden operating environments to your own specs.
User administration
Use host-based protection software. Whitelisting and integrity
Apply best-practice top five mitigation strategies.
Malware and HIPS
Think about how you will manage administrative users. Vulnerability management
Restrict access as much as you require.
Audit and logging
Build out the rest of your standard security environment.
Hardening
Connect to your existing services, e.g., SIEM, monitoring, patching.
Operating system
EC2
Your instance
AMI catalogue Running instance
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Service Catalog
A service for discovering and provisioning applications in the cloud.
Admins can create End users can Meet compliance Conduct reporting
and share product launch a product needs by and auditing via
portfolios. as a stack of AWS department, cost AWS CloudTrail
resources. code of globally
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Control Access and Segregate Duties Everywhere
With AWS IAM, you get to control who can do
what in your AWS environment, and from
where.
You get fine-grained control of your AWS cloud
with multi-factor authentication.
Integrate with your existing corporate directory
using SAML 2.0 and single sign-on.
AWS account
owner
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Trusted Advisor
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Get Consistent Visibility of Logs That You Can Monitor
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Spotlight: AWS CloudTrail
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Spotlight: AWS CloudTrail
Follow the API activity history and monitor resources.
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Spotlight: AWS CloudTrail
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Spotlight: AWS CloudTrail
AWS CloudTrail raw data feeds go into Amazon S3
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Config
A new resource dependency and auditing service
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Audit and Troubleshoot Configuration Changes
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Spotlight: AWS Config
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Spotlight: AWS Config
Copy an Instance ID from running instances.
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Spotlight: AWS Config
Paste the Instance ID in the resource ID field.
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Spotlight: AWS Config
View historical data of changes to the Instance.
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Spotlight: AWS Config
View the full configuration of changes.
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Spotlight: AWS Config
AWS Config data is written to a JSON file format which is maintained in Amazon S3.
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Accreditation and Compliance: On-Premises and on AWS
On-Premises On AWS
Start with building the data center Start on base of accredited services
Functionally optional Functionally necessary high standard of
requirements
Audits done by an in-house team
Audits done by third-party experts
Accountable to yourself
Accountable to everyone
Typically check once a year
Continuous monitoring
Workload-specific compliance checks
Compliance approach based on all workload
Must keep pace and invest in security scenarios
innovation
Security innovation drives broad compliance
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Module Summary
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Module 5: Cloud Migration
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Module Overview
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Learning Objectives
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Cloud Adoption Journey
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
The AWS Cloud Adoption Journey
Create a
Gain Create
Educate Cloud
Executive Hybrid
Staff Center of
Sponsorship Architecture
Excellence
Develop a Establish
Experiment Shared Plan Cloud-First
Standard
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Steps of the Journey: Executive Sponsorship
Create a Establish
Gain Center Develop Create Hybrid Cloud-
Educate
Executive Experiment of a Shared Architecture First
Staff
Sponsorship Excellence Plan Standard
Making it Real
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Executive Sponsorship
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Align on the Outcome
Executive Priority AWS Value
Competitive advantage
CEO Save money
Business alignment Experience
CIO Move faster, more efficiency Pace of Innovation
Improved cash flow
CFO Service Depth and Breadth
Save money
Respond to market changes Pricing Philosophy
CMO Run more experiments Ecosystem
Better analytics
Global
CISO Visibility
Auditability control
CRO Get more products to market
Move faster, more efficiency
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Steps of the Journey: Educate Staff
Create a Establish
Gain Develop Cloud-
Educate Center Create Hybrid
Executive Experiment a Shared First
Staff of Architecture
Sponsorship Plan Standard
Excellence
Making it Real
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Educate Staff
Attend industry events Talk with industry peers Run workshops Invite the AWS team
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Training and Certification
Try products, gain new Skill up and gain Demonstrate your skills,
skills, and get hands-on confidence to design, knowledge, and expertise
practice working with develop, deploy, and with the AWS platform
AWS technologies manage your applications
on AWS
aws.amazon.com/training/
aws.amazon.com/training aws.amazon.com/certification
self-paced-labs
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Steps of the Journey: Experiment
Create a Establish
Gain Develop
Educate Center Create Hybrid Cloud-
Executive Experiment a Shared
Staff of Architecture First
Sponsorship Plan
Excellence Standard
Making it Real
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Experiment
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Experiment Digital
Static Website
Mobile application service
Web application service
Amazon WorkSpaces
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Steps of the Journey: Center of Excellence
Create a Establish
Gain Develop
Educate Center Create Hybrid Cloud-
Executive Experiment a Shared
Staff of Architecture First
Sponsorship Plan
Excellence Standard
Making it Real
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Create a Center of Excellence (COE)
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Cloud Adoption Framework
Business Platform
Perspective Perspective
Perspectives in planning, creating,
managing, and supporting a modern IT
service.
Maturity People Process Guidelines for establishing, developing and
Perspective Perspective Perspective running AWS environments.
Structure for business and IT teams to
work together.
Operating Security
Perspective Perspective
Whitepaper: http://bit.ly/AWSCAF
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Seven Core Perspectives
Business Perspective People Perspective
Identifying, delivering, and measuring Defining and acquiring the skills needed to adopt the
business impact using architectural AWS cloud platform. Examples include guiding
approaches that align technical delivery to processes of role descriptions, training, certification,
business imperatives. and mentoring.
Security Perspective
Defining and implementing the required levels of
Maturity Perspective security, governance, and risk management to
Defining the target state architecture of the achieve compliance.
organization and creating the required
blueprints and roadmaps. Operating Perspective
Providing process, guidance, and tools for optimum
operational service management of the AWS
environment. Represents the ongoing management
of the functioning IT environment of AWS.
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Steps of the Journey: Develop a Shared Plan
Create a Establish
Gain Center Develop
Educate Create Hybrid Cloud-
Executive Experiment of a Shared
Staff Architecture First
Sponsorship Excellence Plan Standard
Making it Real
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Build Relationships
AWS Executives
AWS Account Executive
AWS Principal Solution Architect
Inside Sales Manager
Customer Experience Manager
Customer Support
Professional Services
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Engage Partners
Consulting Partners
Technology Partners
System Integrators
Specialist Partners
HPC
DevOps
Analytics
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Premier Consulting Partners
AWS Specialists
Enterprise Applications
Desktop
Big data/HPC
TCO
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Steps of the Journey: Hybrid Architecture
Create a Establish
Gain Develop
Educate Center Create Hybrid Cloud-
Executive Experiment a Shared
Staff of Architecture First
Sponsorship Plan
Excellence Standard
Making it Real
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Establish Hybrid Architecture
Corporate
data center
Security group
Users
VPC subnet
Availability Zone
Servers
Security group
VPC Subnet
AWS Direct
Connect routers Availability Zone
AWS Direct Connect
location
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Set Up the Foundations
Virtual
Directory VCenter AWS
Private AWS
Service Integration Storage
Cloud CloudTrail
Gateway
System
AWS Direct AWS Config
AWS IAM Center
Connect
Integration
Identity
Federation
Steps of the Journey: Cloud-First Standard
Making it Real
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Migration: Recommended Approach
Strategy
Executive Risk and Center of Operations
Educate Staff Foundations
Sponsorship Compliance Excellence Model
Application Migration/Experiment
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Example Application Migration Plan
Architect a well-
defined target Architecture, design, deployment of apps to
environment take full advantage of availability, scalability,
and cost benefits
Infrastructure,
application, and
operation
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Enterprise Case Study: Cond Nast
Challenge
Improve organizational creativity, productivity,
agility, flexibility and time to market for digital
content
Why AWS?
Leverage infrastructure
Migrate over 500 servers, 1-PB storage, mission
critical applications, and 100 database servers to
the cloud
Benefits
Reduced costs by 40%
Increased operational performance by 3040%
Watch the video Closed their own data center
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Getting Started
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Meet Your Local Sales Team
Account Manager
Inside Sales
Solutions Architects
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Partner Introductions
Ecosystem Partners
http://www.aws-partner-directory.com
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
AWS Account
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Module Summary
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.
Conclusion
Thank You
Hope you enjoyed the training!
Let us know what you think and email us at:
aws-course-feedback@amazon.com
2015 Amazon Web Services, Inc. and its affiliates. All rights reserved.