Architecture presentation given at AWS Summit Paris

1. ARCHITECTING
FOR AWS
Carlos Conde │Solutions Architect

2. 1. ELASTICITY
2. DESIGN FOR FAILURE
3. LOOSE COUPLING
4. SECURITY
5. PERFORMANCE

3. # 1
ELASTICITY
●○○○○

4. AMAZON EC2
ELASTIC COMPUTE CLOUD

6. AMAZON
CLOUDWATCH
MONITORING FOR AWS RESOURCES

8. AUTO SCALING
SCALE UP/DOWN EC2 CAPACITY

10. ELASTIC LOAD
BALANCING
NETWORK TRAFFIC DISTRIBUTION

12. 6 am

13. 10 am

14. 10 am

15. 10 am

16. 7 pm

17. 7 pm

18. 7 pm

19. without elasticity you can't accelerate

20. what you really need is…
…adjustable capacity
http://www.flickr.com/photos/purecaffeine/302682456/

21. # 2
DESIGN FOR
FAILURE
●●○○○

22. « Everything fails
all the time »
Werner Vogels
CTO of Amazon

23. YOUR GOAL
q
Applications should continue to function even
if the underlying physical hardware fails or is
removed or replaced

24. Avoid single points of failure.
Assume everything fails, and
design backwards.

25. Avoid single points of failure.
Assume everything fails, and
design backwards.

27. AMAZON RDS
RELATIONAL DATABASE SERVICE

30. AMAZON
ROUTE 53
DOMAIN NAME SERVICE

35. AMAZON RDS
MULTI-AZ
DEPLOYMENT

40. AMAZON CLOUDWATCH
ALARMS

43. AWS BUILDING BLOCKS
Inherently Fault-Tolerant Fault-Tolerant
Services with the right
 Amazon S3  Elastic Load architecture
Balancing
 Amazon SimpleDB  Amazon EC2
 AWS IAM
 Amazon DynamoDB  Amazon EBS
 AWS Elastic
 Amazon CloudFront Beanstalk  Amazon RDS
 Amazon SWF  Amazon  Amazon VPC
 Amazon SQS ElastiCache
 Amazon SNS  Amazon EMR
 Amazon SES  Amazon
CloudSearch
 Amazon Route53

45. NETFLIX
CHAOS MONKEY

47. # 3
LOOSE
COUPLING
●●●○○

48. BUILD LOOSELY
COUPLED SYSTEMS
q
The looser the are coupled,
the bigger they scale

49. Create independent
components

50. Create independent
components
Design everything as a
Black Box

51. Create independent
components
Design everything as a
Black Box
Think in terms of services

52. TRANSCODE
RECEIVE
& PUBLISH

53. TRANSCODE
RECEIVE
& PUBLISH
QUEUE

56. AMAZON SQS
SIMPLE QUEUE SERVICE

59. START
CHECK
REJECT STOP
VIDEO
YES
NO
TOO CAT / SPAM CAT? PUBLISH
LONG? CHECK SPAM? & NOTIFY
YES NO
SHORTEN
TRANSCODE
VIDEO

62. AMAZON SWF
WORKFLOW SERVICE FOR
SCALABLE, RESILIENT APPLICATIONS

63. AMAZON SWF
Keeps track of :
 State
 Executed tasks
 Timeouts
 Errors

64. WORKFLOW
ACTORS

67. # 4
SECURITY
●●●●○

68. AWS IAM
IDENTITY AND ACCESS MANAGEMENT

70. MULTI-
MULTI-FACTOR
AUTHENTICATION

71. SECURITY
GROUPS
LAYERED SECURITY

76. CERTIFICATIONS
& COMPLIANCE
 SAS 70 Type II audit
 ISO 27001 Certification
 Sarbanes-Oxley SOX
 HIPAA healthcare
 FISMA US Federal Government
 DIACAP MAC III Sensitive IATO

77.  PCI DSS Compliant
LEVEL 1 SERVICE PROVIDER

78. # 5
PERFORMANCE
●●●●●

79. VERTICAL
SCALING

81. CLUSTER COMPUTE
EIGHT EXTRA LARGE
2x Intel Xeon E5-2670, eight-core
Sandy Bridge architecture
60.5 GB of memory – 3.3 TB of storage

82. CLUSTER GPU
QUADRUPLE EXTRA LARGE
Intel Xeon X5570, quad-core
2x Nehalem architecture
NVIDIA Tesla Fermi
2x M2050 GPUs
22 GB of memory – 1.7 TB of storage

83. AMAZON
ELASTICACHE
MEMCACHED COMPATIBLE
IN-MEMORY CACHE

85. 1. ELASTICITY
2. DESIGN FOR FAILURE
3. LOOSE COUPLING
4. SECURITY
5. PERFORMANCE