Nuvem Híbrida - EBC on the road Brazil Edition [Portuguese]

Melissa Ravanini - Arquiteta de Soluções
ravanini@amazon.com
© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Arquitetura Híbrida na AWS

Agenda
• Amazon Web Services
o Portfólio de arquiteturas híbridas
o Parceria com VMWare, Microsoft e outros
• Nuvem Híbrida
o Arquiteturas
o Casos de uso
o Casos de clientes

Estratégia de Nuvem Híbrida
das grandes
empresas
rodam VMem
núvempública
(IDC)
Dasorganizações
têm uma
estratégia para
nuvem híbrida
(IDC*)
dosworkloads
hoje são
virtualizados
(IDC)
83% 60% 65%

O que clientes querem quando pensam em
Nuvem Híbrida?
Continuar
rodando
workloads
legados on-
premises
Rodar workloads
na nuvem
Integração
• Controle de
Acesso
• Rede
• Dados
• Arquivos
• Deploy
Sem aquisição
de novos
hardwares
$

A adoção de nuvem não é binária!

Muitos se preocupam em ter que escolher apenas 1
Nuvem
Privada
Jogue tudo fora e
mova para a nuvem
#1 #2

A boa notícia é que não é tudo-ou-nada
Data Centers
Do Cliente
RecursosOn-
Premises
Recursosna
Nuvem
Integração

Conectividade Privada
Seu Data Center

Crie sua rede privada na Nuvem
Seu Data Center
ProjetoA
Implantado
Virtual Private
Cloud (VPC)
Direct Connect

Extenda seu Datacenter para a Nuvem
Seu Data Center
Segments

Exemplo – Arquitetura de rede na Amazon
AWS Cloud
Subrede Privada Subrede com acesso
somente via VPN
Banco de
dados
Servidor Web
Rede do
Cliente
R
Internet
Servidor de
Aplicação
NAT
Gateway
Internet
Gateway
Servidor Web
Subrede Pública
Servidor de
Aplicação
Banco de
dados
Virtual
Private
Gateway

E visibilidade dos meus recursos?

Com qual frequência você mapeia seu ambiente?
O que tem nele agora?

Demo

Haverá duplicação de cadastro de usuários?

AWS IAM
Usuários e Grupos
Usuário IAM
 Entity created in AWSto represent a
person or service that uses it to
interact withAWS
Grupo IAM
 Assign permissions to logicaland
functional grouping of your
organization
 Bulk permissions management
(scalable)
 Easy to change permissions as
individuals change teams(portable)
AWS cloudAWSManagement
Console
Password
[+MFA]
Accesskey
[+MFA]

AWS IAM
Federação– Exemplo de SAML 2.0 (Console Web)
Outro protocolo
suportado:
OpenID Connect
(Facebook,Google,
Amazon)

Opções na AWS para Active Directory
On-premises
AD
Windows Server
DC
Você gerencia
1
VPC
AD
EC2 for Windows
Server DC
Você gerencia
2
VPC Endpoint
AWS MicrosoftAD
AWS gerencia
3
AWS Directory Service
for Microsoft Active Directory
© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.AWS AD Connector

E integração de recursos?

Amazon EC2 Systems Manager
Systems Manager Service
EC2
Instance
Systems
ManagerAgent
EC2
Instance
On-Prem
Instance
Systems
ManagerAgent
Systems
ManagerAgent
Gerencie suas instâncias Amazon EC2 eon-premises

DevOps – Construa na AWS e faça deploy no
seu datacenter
Código Build Teste Produção
ThirdParty
Tooling
AWS CodeCommit AWSCodeBuild AWSCodeDeploy
AWS CodePipeline
EC2 On-Prem

Load Balancer Híbrido
CORP
Web/App Web/App
NLB /ALB
Datacenter do Cliente

VMWare Cloud na AWS

Leading compute, storage and network
virtualization capabilities
Support for a broad range of workloads
De-facto standard for the enterprise DC
Flexible consumption economics
Broadest set of cloud services
Global scale andreach
Jointly engineered solution delivers the best of VMware and AWS for customers
Uma solução totalmente diferenciada

Infraestrutura Global AWS
VMware Cloud na AWS
VMware Cloud naAWS
Data Centerdo
Cliente
Serviços AWS
vCentervCenter
vSAN NSXvSphere
ESXi
Hybrid
linked-mode
Amazon
EC2
Amazon
S3
Amazon
RDS
AWS Direct
Connect
Amazon
Dynamo DB
Amazon
Redshift

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
US - Oeste
Oregon
US - Leste
N. Virginia
Londres
Regiões Disponíveis
Ásia Pacífico
Sydney
Frankfurt

Plug-in da AWS para o vCenter
https://aws.amazon.com/pt/ec2/vcenter-portal/

Plug-in da AWS para o Microsoft System Center
Virtual Machine Manager (SCVMM)
https://docs.aws.amazon.com/pt_br/AWSEC2/latest/WindowsGuide/scvmm.html

Como nossos clientes usam AWS?

Aplicações Web
Scalability and Elasticity
Auto-Scaling infrastructure to required
capacity and match spending to
actual utilization
High Availability
Application deployments that span
across multiple facilities with
adequate load balancing
Global Reach
Highly available global services on
edge locations across the world
Maintainability
Fully managed service portfolio for
most common application components
DNS CDN Load B. Load B.Front App Backend Database
Storage

Igreja Universal – IURD TV
"A AWS nos proporcionou segurança, velocidade e
flexibilidade. Pretendemos migrar totalmente para a
AWS. Estimamos que a organização esteja
economizando aproximadamente 1,25 milhão de
dólares em hardware e mão de obra ao operar
suas propriedades na AWS."
Rodrigo Prota – Diretor de TI
https://aws.amazon.com/pt/solutions/case-studies/universal-church/

Maximum Agility
“Os maiores benefícios da AWS foram
a confiabilidade da infraestrutura e
não ter que planejar com
antecedência a carga que seria
processada pela aplicação.”
Vinícius de Faria Silva – General System
Coordinator
https://aws.amazon.com/pt/solutions/case-studies/ministerio-do-planejamento/

Aplicações Serverless/Mobile
Identity & Sync
Analytics
Notifications
Data
Logic
Marketing
Phone
Tablet
Innovation & Agility
0-tier architectures allow simple and
quick iterations
High Availability
Designed and build for scale and
availability across multiple facilities
Cost Effectiveness
No underutilized servers, completely
usage based billing
Maintainability
Version management and cross-device
synchronization and testing
TestingTester

Corte dei Conti – Tribunal de Contas da Itália
“We wanted to focus on providing an excellent
service, rather than on handling hardware.
We’ve got more flexibility, we can scale
seamlessly, and we have more time to provide a
great service to our customers.”
Leandro Gelasi – IT Officer
Lambda AmazonWorkSpaces

Corporate Network
App A
App B App C
Container
DevOps
TemplateVDI
Innovation & Agility
Automated builds and deployment of
code
Consistent Regression Testing
Numerous disposable environments that
can be (re)built within a click allowing
regression tests in identical setups
Cost Effective
Environments can be disposed or
stopped when unused
Scalability
Conduct performance and stress tests
with potentially thousands of simulation
nodes
Development and Test

Desligue quando não estiver usando!
• Trate sua infraestrutura como você trata
uma lâmpada, desligue ao sair do
escritório e pare de pagar pelo seu
consumo
Exemplo:
• Ambientes de Desenvolvimento e
Testes

”By going to AWS, we can focus on the science
of healthcare. For us that means analytics
rather than IT, enabling us to attack the
healthcare industry’s cost and quality challenges.”
David Frazee – CTO
https://aws.amazon.com/solutions/case-studies/3M-health-information-systems/

Big Data Analytics
Corporate Network
Storage
Reporting
Data
Warehouse
Ecosystem
Leverage existing open-source and
commercial frameworks at utility
pricing
Manageability
Managed compute cluster and machine
learning environments
Elasticity & Cost
Dynamic scalability when compute jobs
are required with utility or spot pricing
Separation of concerns
Decouple storage and compute – utility
model with on-demand compute
Streams Machine
Learning
Compute

© 201 8, Amazon Web Services, Inc. o r itsaffiliates. All rights reserved.
Ingest/
Collect
Consume/
visualize
Store
Process/
analyze
Dados
1 4
0 9
5
Resultados e
Informações
Previsão de
Ameaças à Saúde
da População
Usuários Mobile
Usuários Desktop
Analytics
Tools
Amazon
EC2
AmazonEMRAmazon
S3
Amazon
SES
Provendo informação sobre todas as
ameaças à Saúde

• Market surveillance platform ingests
30billion market events every dayand
regulates financial tradingpractices
• LeveragesAmazon’s virtually unlimited
storageto store events and allow analysts to
interactively query market dynamics using
fully managed map-reduceclusters
Rearquitetando a Conformidade
Unlimited
Storage
Distributed
Computing
Interactive Market
Queri©e2s018,Amazon Web Services, Inc. or its affiliates. All rights reserved.
Ensure
compliance
30 bilhões de
eventos de
mercado/dia

Cenários de Armazenamento Híbrido
Hierarquia dosDados
TransbordoBackup & Migração
Migrar de uma vez
Levar dados deforma
recorrente
Arquivamento
Gestão deCusto
Disaster Recovery
CapacidadeSuplementar

AWS Storage Gateway
Enables using standard storage protocols to access AWS cloud storage services
Customer Premises
AWS
Storage
Gateway
Amazon EBS
Snapshots
Amazon S3
Amazon Glacier
Enterprise
storage
Devices
Application
servers
File Gateway
(NFS, SMB)
Volume Gateway
(iSCSI)
Tape Gateway
(iSCSI VTL)
HTTPS

Gateway de Arquivo
Armazene arquivos como objetos no Amazon S3; Acesse via protocolos de
arquivos
Cliente
GlacierServidor de
aplicação
Objetos no S3Storage Gateway
- VM
HTTPS
NFS
v3 /v4.1

Parceiros de Armazenamento AWS
Backup eRestauraçãoStorage Primário Arquivamento DR
Solutions that leverage file, block, object,
and streamed data formats as an
extension to on-premises storage
Solutions that leverage Amazon S3 for
durable data backup
Solutions that leverage Amazon
Glacier for durable and cost-effective
long-term data backup
Solutions that utilize AWS to enable
recovery strategies focused on RTO
and RPO requirements
Represents a sample of storage partner technology solutions, vetted by the AWS Storage Competency Program.
Further details available here: https://aws.amazon.com/backup-recovery/partner-solutions

Application
Server
Virtual
Server
File
Server
Database
Server
Backup
Server
Cloud on standby as DR setup
• Eliminate need for DR data center
• Reduce capital expense for duplicate
infrastructure
• Pay for only what you use when you use it
• Real-time, secure, database replication fromon-
premise to down-sized databaseservers
• Application backups and virtual serverimages
stored on cloudstorage
Amazon S3
Database
Server
Disaster Recovery

Cenários de Disaster Recovery com AWS
AWS enables you to cost-effectivelyoperate each of these sample DR strategies
Backup &
Restore
Pilot Light
Warm
Standby
Multi-Site
AWSMulti-Region
• Amazon S3
• EBS snapshots
• AWS Import/Export
• AWS StorageGateway
• File server (NFS)
• Local disk (cached ornot)
• Virtual TapeLibrary
• Very minimal secondary environmentrunning
• Only small number of critical elements replicated
• Remaining elements can be quicklyprovisioned
• AMIs and CloudFormationtemplates
• Scaled-down version of a fullyfunctioning
environment
• Further decreases recoverytime
• All critical elements replicated andrunning
• Functional, can be used fortesting/QA
• Remaining elements can be quicklyprovisioned
• Fully operating secondarysite
• Active-activeconfiguration
• DNSoptions for distribution, such
as weighted or latencybased

Cidade de Asheville – Carolina do Norte
”It’s very important to have
geographic diversity Disaster
Recovery. AWS has solved a
business problem of having more
geographic diversity at a relative low
cost.”
Jonathan Feldman - CIO
https://aws.amazon.com/solutions/case-studies/city-of-asheville/

Nuvem Híbrida - EBC on the road Brazil Edition [Portuguese]

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Nuvem Híbrida - EBC on the road Brazil Edition [Portuguese]

Similar to Nuvem Híbrida - EBC on the road Brazil Edition [Portuguese] (20)

More from Amazon Web Services

More from Amazon Web Services (20)

Nuvem Híbrida - EBC on the road Brazil Edition [Portuguese]