Hybrid Infrastructure Integration is an approach to connect on-premises IT resources with AWS and bridge processes, services, and technologies used in common enterprise customer environments. This session addresses connectivity patterns, security controls, account governance, and operations monitoring approaches successfully implemented in enterprise engagements. Infrastructure architects and IT professionals can get an overview of various integration types, approaches, methodologies, and common service patterns, helping them to better understand and overcome typical challenges in hybrid enterprise environments.

1. November 12, 2014 | Las Vegas, NV
Paul Nau, Senior Consultant, AWS Professional Services
Miha Kralj, Principal Consultant, AWS Professional Services

3. Our journey today
Amazon VPC
VPN
Backup & archive
Storage expansion
Common workloads in hybrid infrastructure
What is hybrid infrastructure?
Connectivity
Integrated
AWS Direct Connect
Authentication
Enterprise integration
Federation
Operations monitoring
Start

4. On-premises
resources
Data center
Cloud services
Cloud infrastructure
Workload Migration
and integration
Enterprise
management tools
Access/authentication
control integration
Connectivity

6. VPC subnet
Availability Zone
Security group
VPC subnet
Availability Zone
Security group
Virtual
Gateway
https://aws.amazon.com/vpc/faqs/#C9
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/
VPC_VPN.html
Corporate
data center
Users
Data center router
Servers
Internet
IPSec VPN

7. http://aws.amazon.com/directconnect/
Corporate
data center
Users
VPC subnet
Availability Zone
Security group
VPC subnet
Availability Zone
Security group
Data center router
Customer
router
Servers
AWS Direct Connect
location
AWS Direct Connect
routers
Virtual
Gateway

8. VPC Subnet
Availability Zone
Security group
VPC subnet
Availability Zone
Security group
http://aws.amazon.com/directconnect/
Corporate
data center
Users
Data center router
Customer
Router
Servers
IPSec VPN
AWS Direct Connect
location
AWS Direct Connect
routers
Virtual
Gateway

10. http://aws.amazon.com/microsoft/whitepapers/ad-reference-architecture/
Active Directory
Replication
Corporate
data center
Users
AD.Domain
Servers
Domain
controller
Domain
controller
VPC subnet
Availability Zone
Security group
Virtual
Gateway
Domain
controller
VPC subnet
Availability Zone
Security group
Type Port Number
TCP
54, 88, 135, 137, 139, 389, 445,
464, 636, 3268, 3269, 5722,
49152-65535
UDP 53,67,123, 138, 389, 445, 464,
2535, 5355, 49152-65535
Replication

11. http://aws.amazon.com/directoryservice/
AWS Directory Service
Connect
Corporate
data center
Users
AD.Domain
Servers
Domain
controller
VPC subnet
Availability Zone
Security group
Virtual
Gateway
VPC subnet
Availability Zone
Security group

12. AWS federation/account governance
Financial users, controllers
SOC/Auditors
Global AWS admin
Billing account
Software development
Non-prodaccount #1
Production account #1
User management
account
Security / Audit
account
Non-prodaccount. #2
App owners
DevOps teams
Security/audit
Production
Dev/test/sandbox
Financial
Consolidated Billing, Billing Alerts
Read-only access for all accounts

13. Operations Monitoring
VPC subnet
Availability Zone
Security group
VPC subnet
Availability Zone
Security group
Virtual
Gateway
Corporate
data center
Users
Data center router
Update
Servers
Connectivity
AWS CloudTrail
Amazon
CloudWatch
SIEM
Aggregator

15. Corporate
data center
Amazon Simple
Storage Service (S3)
Amazon Glacier
Application
server
Virtual
server
File
server
Database
server
Backup
system
AWS Storage
Gateway
iSCSI
Symantec Net Backup
Veeam Backup & Replication
Cloud ONTAP Secure Cloud-
Integrated Backup
AWS Marketplace Partners

16. Corporate
data center
Amazon Simple Storage Service
Applicationserver
Virtual
server
File
server
Databaseserver
Storage
appliance
AWS Storage
Gateway
iSCSI
Cloud ONTAP Secure Cloud- Integrated Backup
Panzura Global NAS
TwinStrata CloudArray
AWS Marketplace Partners

18. http://bit.ly/awsevals