AWS tech summit - Berlin 2011 - keynote

State of the Cloud
AWS Technical Summit, Berlin
Dr. Werner Vogels, CTO Amazon.com

Amazon’s Three Businesses
Consumer (Retail)Business
SellerBusiness
IT Infrastructure
Business
Tens of millions of active customer accounts
Eight countries: US, UK, Germany, Japan, France, Canada, China, Italy
Sell on Amazon websites
Use Amazon technology for your own retail website
Leverage Amazon’s massive fulfillment center network
Cloud computing infrastructure for hosting web-scale solutions
Hundreds of thousands of registered customers in over 190 countries

Our Mission
Enable businesses and developers to use web services
(what people now call “the Cloud”) to build scalable,
sophisticated applications

AWS Pace of Innovation is Intense
» Amazon Simple Notification Service
» RDS Multi-Availability Zone Support
» S3 Reduced Redundancy Storage
» New Locations and Features for
CloudFront
» S3 Bucket Policies
» Cluster Instances for EC2
» EC2 Reserved Instances
» New SimpleDB Features
» IBM on EC2
» Windows Server 2008 on EC2
» Amazon RDS
» Amazon Virtual Private Cloud
» Amazon Elastic MapReduce
» EBS Shared Snapshots
» Monitoring, Auto Scaling &
Elastic Load Balancing for EC2
» AWS Import/Export
» Premium Support
» Amazon CloudFront
» EC2 Elastic IP addresses
& Availability Zones
» Windows Server, MySQL,
Oracle, & JBoss on EC2
» Lower Data Transfer Costs
» Amazon EC2
» Amazon S3
» Developer Portal &
Forums
» Amazon Linux AMI
» Oracle on EC2
» New EC2 Features
» SUSE Linux on EC2
2005
2010
2006
2007
2008
2009
» Micro Instances
» Lower Pricing for EC2
High Mem Instances
» Identity & Access Management
» AWS Services in N. California
» AWS Multi-Factor Authentication
» AWS Management Console
» AWS Economics Center
» AWS in Education
» AWS Security Center
» SAS70 Type II Audit
» More services in EU
» Lower EC2 Pricing
» Lower S3 Pricing
» Lower pricing for
Outbound Data Transfer
» AWS Solution Provider Program
» Amazon SimpleDB
» Amazon Flexible Payments Service
» S3 in Europe
» EC2 new instance types
» AWS Start-Up Challenge
» AWS Services in Singapore
» RDS Reserved Database Instances
» RDS Read Replicas & Lower Pricing
» Lower Outbound Transfer Pricing
» Data Transfer Usage Tiers
» Consolidated Billing for AWS
» Amazon S3 Versioning Feature
» EC2 High Memory Instances
» Public Data Sets
» Elastic Block Store
» EC2 SLA
» EC2 in EU
» S3 Tiered Pricing
» Amazon SQS
» Amazon Mechanical Turk

CloudFront Pace of Innovation
» Price Drop
» HTTPS Support
» Lower 1-Hour TTLs
» Access Logs for Streaming
» New York City Edge Location
» Access Logging Capability
» CloudFront Management Console
» Custom Origins
» Service Level Agreement
» Jacksonville Edge Location
» Route 53 Public Beta
» Private Content
» Streaming Video on Demand
» CloudFront Public Beta
Q4
2008
Q1
2009
Q2
2009
Q1
2011
Q3
2009
Q4
2009
Q1
2010
Q2
2010
Q3
2010
Q4
2010
» New Lower Pricing Tiers
» Paris Edge Location
» (IAM) Identity & Access Management
» Singapore Edge Location
» Private Streaming
» Enhanced CloudFront Logs
» Default Root Object
» Invalidation

The Platform is Expanding
Your Application
Libraries & SDKs
.NET, Java, PHP, etc.
IDE Plug-Ins
AWS for Eclipse
Deployment & Automation
AWS Elastic Beanstalk
AWS CloudFormation
Web Interface
Management Console
Identity & BillingAWS IAM
Consolidated　Billing
Monitoring
Amazon CloudWatch
Auto Scale
Network ＆ Routing
Amazon VPCAmazon Elastic LB
Amazon Route 53
Content Delivery
Amazon CloudFront
Email
Amazon SES
Payments
DevPay
Amazon FPS
Parallel Processing
Elastic MapReduce
Messaging Amazon SNS
AmazonSQS
Workforce
Amazon Mechanical　Turk
Compute
Amazon EC2
Storage
Amazon S3
Amazon EBS
Database
Amazon RDS
Amazon SimpleDB
AWS Global Physical Infrastructure
(Geographical Regions, Availability Zones, Points of Presence)

Customers in 190 Countries

Growing Partner Ecosystem

AWS Global Reach
AWS Regions
US East (Northern Virginia)
US West (Northern California)
Europe (Dublin)
Asia Pacific (Singapore)
Asia Pacific (Tokyo) New!
Amazon Edge Locations (CloudFront & Route 53)
Ashburn, VA
Dallas, TX Jacksonville, FL
Los Angeles, CA
Miami, FL
Newark, NJ
New York, NYPalo Alto, CA
Seattle, WASt. Louis, MO
Hong Kong
Tokyo
Singapore
Amsterdam
Dublin
Frankfurt London
Paris

Amazon S3 Growth
262 Billion
Peak Requests:
200,000+per second
102 Billion
40 Billion
14 Billion
2.9 Billion
Total Number of Objects Stored in Amazon S3

Each day AWS adds the equivalent server capacity to power Amazon when it was a global, $2.76B enterprise(circa 2000)

The Key to Success?
Listening to Our Customers

You Asked For…
Expanded Global Footprint
Singapore Region
Tokyo Region (March 2, 2011)
New POPs for CloudFront & Route53 (New York, Paris, Singapore, Tokyo, Jacksonville)
Lower Prices & New Pricing Features
Lower Outbound Data Transfer Prices
Consolidated Billing
Combined Data Transfer Prices
Lower Prices for S3 and Reduced Redundancy Storage (lower price/less durability)
Lower Prices on Gold & Silver Support

You Asked For…
Make it Easier to Use
More Services Available in AWS Console
CloudFormation
New SDKs: Java, PHP, Android
Elastic Beanstalk
Improved Support Offering
Bronze & Platinum
New Instance Types
Extra Large High Memory
Cluster Compute & GPUs
Micro

You Asked For…
Expand Platform Out & Up
VM Import
Route53
S3 Large Object Support & Versioning
CloudFront SLA, Custom Origin & HTTPS Support
RDS Multi-AZ Deployments, Read Replicas, & RIs
Simple Email Service
Security Features & Compliance: AWS Identity and Access Management (IAM), PCI Compliance, ISO 27001
Free Monitoring of EC2 Instances
And More…

Some Big Priorities for 2011
Add more geographies
Make it easier to build and manage applications on AWS
Release new database offerings
Broaden support offerings
Add billing, user management, and identity features

AWS Management Console
Developer Tools & SDKs

AWS CloudFormation
AWS CloudFormation enables system administrators and developers to create repeatable AWS infrastructure deployments (Stacks) using customizable architecture templates.
AWS CloudFormation
JSON Template
Define a JSON template
Create an AWS stack
(Console, CLI, API)
CloudFormation Stack

AWS CloudFormation: Service Highlights
Fully declarative system
Document based infrastructure specification
Logical naming convention
Atomically creates / destroys groups of AWS objects
Deploy multi-tier and multi-AZ stacks
Handles the bookkeeping and muck of provisioning multiple related resources
Focuses on AWS resources, while sys admins and developers focus on OS and application provisioning
Customers can use existing automation tools like Opscode Chef, Puppet Labs, Capistrano
AWS CloudFormation doesn’t get in the way!

AWS Services Supported
Amazon EC2
Amazon EBS
Elastic Load Balancer
Elastic IPs
EC2 Security Groups
Auto-scaling Groups
Triggers
CloudWatch Alarms
Amazon RDS
AWS Elastic Beanstalk
Amazon SimpleDB
Amazon SQS
Amazon SNS
Topics
Subscriptions

Initial Usage Cases
The set of resources we support initially is targeted towards deploying web-based applications
Launched with sample templates and AMIs including the following:
WordPress (Blog), Insoshi (Social Network Platform), Tracks (Project tracking), Gollum (Wiki), Joomla! (CMS), Drupal (CMS), Redmine (Project Management)
Supports Elastic Beanstalk based applications
Sample with RDS and CloudWatch Alarms

Your Application Goes Here

What is Elastic Beanstalk?
An even easier way for developers to quickly deploy and manage applications in the AWS cloud.
Upload and launch applications to AWS in minutes.
Retain control over the underlying infrastructure.

Who Should Use Elastic Beanstalk?
Java developers with web applications
targeting the Apache Tomcat software stack
Elastic Beanstalk is designed so that it can be extended to support multiple development stacks and programming languages in the future.

What Makes Elastic Beanstalk Different?
Developers retain ownership and
full control over their AWS resources.
Root access to your EC2 instances
Easily manage configuration changes in one place
EC2 instance type, security group, load balancer settings, auto-scaling, multi-AZ, notifications, and other settings.
Use any database
Amazon RDS, Amazon SimpleDB, Microsoft SQL Server, or Oracle.
Create custom AMIs
Run other services side-by-side in EC2
Easily move your application out of Elastic Beanstalk

Why Not Use My Own Tomcat AMI?
Automated (de)provisioning of environments
Automated version deployment (including rollback)
Managed environment settings
Built-in monitoring and notifications
Application health and other important events
Basic log file rotation to Amazon S3
Easy troubleshooting
Snapshot logs
Restart application server

How Do I Access Elastic Beanstalk?
AWS Management Console
AWS Toolkit for Eclipse
Command Line Tools
SDKs and API

Launch New Environment Details

Launch New Environment Configuration

Console for Elastic Beanstalk
Application
All Versions
Environment and Running Version
Edit Configuration

Elastic Beanstalk Under-the-Hood
Elastic Beanstalk
Application
http://myapp-staging.elasticbeanstalk.com/
Version
Environment
Elastic Load Balancer
Auto
Scaling
EC2 Instances
EC2 Instances
EC2 Instances
Version
Version
Apache
Elastic Beanstalk
Host Manager
Tomcat
Your Running Application
Amazon Linux AMI

What Does Elastic Beanstalk Cost?
No additional charge.
Pay only for the AWS resources used.

Read Replicas
Multi-AZ Deployments
Highly Available, Durable, & Scalable MySQL Deployments

Multi-AZ Deployments for Amazon RDS
Enterprise-grade fault tolerance solution for production databases
What is a Multi-AZ deployment?
With a single API call, Amazon RDS creates and synchronously maintains a hot standby in a different Availability Zone
In the event of an unplanned or planned outage, Amazon RDS automatically fails over to the standby so you can resume database writes and reads as soon as possible

Things to know about Multi-AZ
Synchronous Replication.
Designed for enhanced data durability relative to MySQL’s native, asynchronous replication
Standby cannot be accessed directly
What events result in automatic failover?
Unplanned (instance failure, storage volume failure)
Planned (instance scaling, patching)
1 minute average failover time

Read Replicas
A Read Replica is a copy of a specified DB Instance that can serve read traffic
Intended Use Cases
Read scaling, business reporting
Not intended as a fault tolerance substitute for Multi-AZ
Unlike Multi-AZ, uses native, asynchronous MySQL replication and replica can lag source
Read Replica can use Multi-AZ deployment as source

Identity and Access Management (IAM)
Create and Manage Users
Improved Security
Multiple users, with individual permissions
Secure by default
Individual security credentials (access keys, password, MFA)
Improved Control
Centralized control of user access
Fine-grained permissions
Control Users’ access to APIs and AWS Console
Integrated
No changes to service APIs

AWS Security Resources
http://aws.amazon.com/security/
http://aws.amazon.com/federal/
Security Whitepaper
Latest Version 8/24/2010
Updated bi-annually
Feedback is welcome

AWS Certifications
Shared Responsibility Model
Sarbanes-Oxley (SOX) Compliant Platform
SAS70 Type II Audit
FISMA A&A
NIST Low Approvals to Operate
NIST Moderate ATO expected shortly
FedRAMP
ISO-27001 Certification
PCI Level 1 Service Provider
Customers have deployed various compliant applications such as HIPAA (healthcare)

SAS70 Type II
Based on the Control Objectives for Information and related Technology (COBIT),which is a set of established best practices (transitioning to ISO 27001 for 2011 audits)
Covers Access (Security), Change Management and Operations of Amazon EC2 and Amazon S3
Audit conducted by an independent accounting firm (E&Y) on a recurring basis

SAS70 Type II – Control Objectives
Control Objective 1: Security Organization
Control Objective 2: Amazon Employee Lifecycle
Control Objective 3: Logical Security
Control Objective 4: Secure Data Handling
Control Objective 5: Physical Security
Control Objective 6: Environmental Safeguards
Control Objective 7: Change Management
Control Objective 8: Data Integrity, Availability and Redundancy
Control Objective 9: Incident Handling

Amazon VPC
Customer’s isolated AWS resources
Subnets
Router
VPN Gateway
AmazonWeb Services
Cloud
Secure VPN Connection over the Internet
Customer’sNetwork

Current VPC

NewVPC

Amazon VPC with Internet Access
VPC Wizard
Create a VPC with one of four pre-defined network architectures
Connectivity Options
Internet Gateway
Connect your VPC directly to the Internet
Access EC2, Amazon S3, and other AWS resources via this gateway
Use S3 bucket policies to restrict access to only VPC IPs
VPN Gateway
Connect your VPC directly to your datacenter

Security Groups
Support for inbound and outbound filtering
Support for all protocols
Change security group membership on running instances
Security group UI has been redesigned
Feature parity with API/CLI
Network ACLs
Stateless filters with Allow and Deny rules
Inbound and outbound filtering rules are supported
All protocols are supported
Use Identity and Access Management to lockdown access to ACLs once they’re set

Routing
Create route tables and apply them to individual subnets
You can route traffic to different gateways based on destination IP address ranges
Elastic IP Addresses
You can assign Elastic IP Addresses to VPC instances
Private Subnets with Outbound Access via NAT
Instances in a private subnet can traverse the Internet via a Network Address Translation (NAT) instance
Use case: instances that need to obtain software updates but don’t need to be publicly accessible from the Internet

What Next?
Tell us what you want to see

AWS tech summit - Berlin 2011 - keynote

by Amazon Web Services on May 19, 2011

Accessibility

Categories

Tags

Upload Details

Usage Rights

3 Embeds 7

Statistics

AWS tech summit - Berlin 2011 - keynote — Presentation Transcript

http://www.slideshare.net	4
http://fasoulas.posterous.com	2
http://taelim.blogspot.com	1