Mike Colson, Senior Solutions Architect Tres Vance, Senior Solutions Architect 10/18/18

1. Assessing Disaster Recovery
Options for Business
Continuity
Mike Colson, Senior Solutions Architect
Tres Vance, Senior Solutions Architect
October 18th, 2018
Raise the BAR on Data Protection and Continuity

2. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
First 5 years: 2 regions
2016–2018: 11 regions
Next 5 years: 6 regions
A W S
R E G I O N A L
E X PA N S I O N
2

3. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
Inter-region Direct Connect
• 87 Direct Connect locations
• Customers can reach every AWS Region from the
local Direct Connect PoP (except China)
3

4. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
North America
US East (N. Virginia) Region US West (Oregon) Region
EC2 Availability Zones: 5 EC2 Availability Zones: 3
US West (N. California) Region AWS GovCloud (US) Region
EC2 Availability Zones: 3 EC2 Availability Zones: 3
Canada (Montreal) Region US Central (Ohio) Region
EC2 Availability Zones: 2 EC2 Availability Zones: 3
AWS Edge Locations
United States - Ashburn, VA (3), Atlanta GA (3), Chicago, IL, Dallas/Fort
Worth, TX (2), Hayward, CA, Jacksonville, FL, Los Angeles, CA (2), Miami,
FL, Minneapolis, MN, New York, NY (3), Newark, NJ, Palo Alto, CA,
Philadelphia, PA, San Jose, CA, Seattle, WA, South Bend, IN, St. Louis, MO
Canada - Montreal, QC, Toronto, ON

5. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
REGION
~ 2ms latency
AZa
AZc
AZb
Redundant Tier-1 Internet &
Inter-Region Connectivity
TCTC
DC
DC
DC
DC
DCDC
DC
DC
DC
5

6. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
AWS Disaster Recovery
High Availability Backup Disaster Recovery
Keep your applications
running 24x7
Make sure your
data is safe
Get your applications
and data back after a
major disaster
Backup
configuration
state and data
Store Backups in
Amazon S3
Archive in Glacier

7. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
Start Here: Business Continuity Requirements
 How quickly I need this service to be
recovered
 1 minute? 15 minutes? 1 hour? 4 hours? 1
day?
 How much data loss can be tolerated?
 Zero data loss? 15 minutes out of date?
Down time
RPO RTO
Transactions Lost
Recovery Point Objective (RPO) Recovery Time Objective (RTO)

8. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
AWS offers four levels of DR support across a
spectrum of complexity and time
Backup &
Restore Pilot light
Warm standby
in AWS
Hot standby
(with multi-site)
 Lower priority use
cases
 Solutions: S3, Elastic
Block Store
 Cost: $
 Meeting lower RTO &
RPO requirements
 Core services
 Scale AWS resources in
response to a DR event
 Cost: $$
 Solutions that require
RTO & RPO in
minutes
 Business critical
services
 Cost: $$$
 Auto-failover of your
environment in AWS
 Cost: $$$$
Low High
RPO/RTO:
Hours
RPO/RTO:
Minutes
RPO/RTO:
Seconds
RPO/RTO:
Real-time

9. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
Backups: On Premises versus AWS Cloud
On Premises
 CAPEX of lifecycle tape or storage
systems
 Unnecessary OPEX of storage, archival
and retrieval tools
 No Backup Data Validation Testing
 Reliant on aging technology: tape
 Data growth means planning for storage
buys
 Data is useless on tapes or archival
systems with no analytics
AWS Cloud
 Low upfront CAPEX without building or
leasing multiple data centers
 Pay only for services used and data stored
 Automate backup data testing continuously
 Improve your security posture in the cloud
 Regionally diverse with multiple AZs
 Scalable and automated
 Data is closest to analytics tools

10. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
Disaster Recovery: On Premises versus AWS Cloud
On Premises
 CAPEX of building backup data
centers
 Unnecessary OPEX of storage,
archival and retrieval tools
 Testing and recovery without week-
long off-site drills
 Reliant on aging technology: tape
AWS Cloud
 Low upfront CAPEX without building or
leasing multiple data centers
 Pay only for services used
 Remotely test any time from anywhere
 Improve your security posture in the cloud
 Regionally diverse with multiple AZs
 Scalable and automated DR planning

11. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
Cloud-based backup & disaster recovery services that
enable rapid recovery of your IT infrastructure and
data
Fast Performance
No Tape
Compliance
Elasticity
Secure
Partners
Fast disk-based storage and retrieval of
files.
Eliminate costs associated with transporting,
storing, and retrieving tape media and
associated tape backup software.
Fast retrieval of files allows you to avoid
fines for missing compliance deadlines.
Add any amount of data, quickly. Easily
expire and delete without handling media.
Secure and durable cloud disaster
recovery platform with industry-
recognized certifications and audits.
AWS solution provider and system
integration partners to help with your
deployment.

12. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
Backup & Recovery
 Suitable for:
‒ Services that can sustain higher technical debt
‒ Lower priority use cases
 Low cost DR option that leverages existing
investments in:
‒ De-duplication
‒ Compression
‒ WAN acceleration

13. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
time
Expiry
Logs logs
Objects can
expire and be
deleted
accessible from S3
Backups with S3

14. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
Store Backup Data in the Cloud

15. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
Store AMIs for Server OS Images

16. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
Recover Servers During DR Testing

17. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
Pilot Light
 Suitable for:
‒ Meeting lower RTO & RPO requirements
‒ Business critical services
‒ Mid-range cost option for DR
 Mid-range cost option for DR
 Third-party options: CloudEndure, Racemi and
others

18. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
Stopped
instances
Pilot Light

19. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
Running
instances
Pilot Light

20. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
Warm Standby
 Replication of data and services in the cloud
ensure full failover if needed during a disaster
 Suitable for:
‒ Solutions that require RTO & RPO in minutes
‒ Core business-critical functions
 Higher cost option for DR

21. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
Warm Standby
ELB
On-premises
Active Production
Route 53
Web
Servers
AWS
Active Production
App
Servers
CloudFormation
Data Replication
Direct Connect
Web
Servers
App
Servers
1TB
Data
Volume
DB
Server
DB
Server
1 TB Data
Volume
AWS Region

22. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
Hot Standby
 Full replication of your environment running
and ready for a failover during a disaster – it
runs ‘hot’.
 Suitable for:
‒ Solutions that require RTOs & RPOs of zero
‒ Core business-critical functions
‒ Multi-site architecture for automated load-
balancing of traffic to multiple AZs and even
AWS regions
 Higher cost option for DR

23. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
Multi-Site Hot Standby

24. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
P
Partner Storage
Integration

25. Why Work With An APN Partner?
• Provide you value-added software and
services across virtually every use case
• Accelerate your engagement with AWS
• Provide you with specific AWS expertise
• Optimize your architecture to take
advantage of AWS
APN Partners can:

26. APN Storage Technology Partner Use Cases
Solutions that utilize
AWS to enable recovery
strategies focused on
RTO and RPO
requirements
BCDR
Solutions that leverage
Amazon Glacier for
durable and cost-
effective long-term data
backup
Archive
Solutions that leverage
file, block, object, and
streamed data formats as
an extension to on-
premises storage
Primary Storage
Solutions that leverage
Amazon S3 for durable
data backup
Backup & Restore

27. Amazon EFS
File
Amazon EBS
Amazon EC2
Instance Store
Block
Amazon
S3/SIA
Amazon Glacier
Object
Data Transfer
Partner
Connectors
S3 Transfer
Acceleration
Storage is a platform: AWS Storage Maturity
Storage
Gateway
Snowball,
Snow*
Amazon
Kinesis
Firehose
AWS Direct
Connect

28. Architecture #1: Cold Disaster Recovery
Backup & Recovery, Pilot Light
• Systems are in either a standby or powered off state
• Data is replicated as needed to meet the required RPO
• Virtual systems are replicated and updated periodically
• Physical systems are manually rebuilt as EC2 instances and powered on only for updates.
Partners
AWS Direct
Connect
VPN
Gateway
Internet
or or
S3 API
On-Premises
Cloud (AWS)
AWS Region
Amazon S3/SIA VM Import Bucket
Hypervisor
Server Local Storage
Exported VM VM Export Server
Supported IP
Protocols
Corporate Data Center
Amazon EBS
Cold Imported VM
(EC2 Instance)
S3 Endpoint
Customer Workload
(In Standby)
Virtualized Storage
Server (EC2)
Imported VM
Replication Protocol

29. Architecture #2: Warm Disaster Recovery
Warm Standby, Multi-Site
• Systems running, but without applications started
• Data is replicated as needed to meet required RPOs
• Virtual systems are replicated to reflect changes,
• Physical systems are manually rebuilt and configured as EC2 instances, which are
in a running state, without applications started.
Partners
AWS Direct
Connect
VPN
Gateway
Internet
or or
S3 API
On-Premises
Cloud (AWS)
AWS Region
Amazon S3/SIA VM Import Bucket
Hypervisor
Server Local Storage
Exported VM VM Export Server
Supported IP
Protocols
Corporate Data Center
Amazon EBS Running Imported
VM (Restart After
Update)
S3 Endpoint
Customer Workload
(In Standby)
Virtualized Storage
Server (EC2)
Imported VM
Replication Protocol

30. Commvault Ties Together On-Premises and Cloud Data Strategies
– Back up to the
Cloud
– Back up in the
Cloud
– Disaster Recovery
to the Cloud
– Workload
Portability
– Archiving to the
Cloud
AWS and Commvault combine to minimize networking, storage and infrastructure costs,
while providing the business a sound data protection and disaster recovery strategy.
Amazon Glacier
Protection of AWS Workloads
Indexed / Versioned / Deduped / Encrypted
On-Premises to AWS
Migrated Workloads & DR
Disk Pool
Amazon S3, S3-IA Amazon S3, S3-IA
Indexed / Versioned / Deduped / Encrypted / Snapshots
 Storage Arrays
 Server OSes
 Endpoint
 Applications
 Databases
 Virtual Machines
 Large Files
 Big Data
 SaaS
 Cloud-Native
Commvault Orchestrates the Enterprise

31. CloudEndure Disaster Recovery
OS-based continuous
block-level replication
1-minute Any-to-Cloud
Image Conversion
Minimal footprint
replication staging area
Replicate any applications
from physical / virtual /
cloud-based machines
No disruption or reboot
of source machine(s)
Designed for busy
databases without
impacting performance

32. Health Quest: Pain-free Disaster Recovery
Background
• Located in New York
• Integrated delivery healthcare system; supports accessible continuum of care
• Services 250 doctors in four hospitals
• 6,000 employees
Customer Concerns
• Avoiding the large capital outlay to rebuild its secondary site
• Scaling up disaster recovery to meet growing infrastructure demands
• Simplifying disaster recovery management for an undermanned IT team
• Complying with HIPAA regulations
Solution Offered
• CloudEndure Disaster Recovery with full AWS integration for hundreds of
servers
Success Metrics
• Real life application RPO < 2 minutes
• Hundreds of machines successfully protected
• 50% reduction in disaster recovery costs

33. Sungard AS Managed, SLA-Backed Cloud Recovery AWS
AWS Region
VPC
ATOT or ATOD Recovery
Production Network
Agents
Windows/Linux Servers
Continuous Data Protection (CDP)
Block-Level Replication
Near-Real-Time RPO
Agents
Windows/Linux Servers
Replica
Instance
Amazon EC2 Windows/
Linux Servers
Replica
Instance
Amazon EC2 Windows/
Linux Servers
VPC
Steady-State Replication
Replicator
Instance
Low-Performance/-Cost Amazon EBS Volumes
Replication and Monitoring Server
Source Side (On-Premises, AWS or Azure)
Higher Performance
Amazon EBS Volumes
Higher Performance
Amazon EBS Volumes
Uninterrupted Replication During ATOT
RTO from 15 minutes (source from AWS)
RTO from 35 minutes (source from on-premises)
© 2018 Sungard Availability Services, all rights reserved

34. Financial Services addresses GDPR compliance challenge
with Sungard Cloud Recovery AWS
Financial services company develops and markets
highly specialized automated debt recovery systems.
Challenges:
• Had to improve RPO for GDRP compliance
Solution: Sungard AS CR-AWS as an SLA-backed
service for DR
Benefits:
• Tighten RPO to under 4 hours and improve RTO
• Attain GDPR compliance and avoid significant
financial fines
”
“

35. Storage Use Cases
aws.amazon.com/backup-recovery/partner-solutions
Backup and RecoveryPrimary Storage Archive BCDR
Solutions that leverage file, block,
object, and streamed data
formats as an extension to
on-premises storage
Solutions that leverage Amazon
S3 for durable data backup
Solutions that leverage Amazon
Glacier for durable and cost-
effective long-term data backup
Solutions that utilize AWS to
enable recovery strategies focused
on RTO and RPO requirements
Consulting
Consulting services that provide
implementation capabilities in one
or more core storage categories

36. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
It’s all about
choicePerformance-oriented
Cost-oriented

37. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
Any Questions?
Mike Colson: mccolson@amazon.com
Tres Vance: tresvanc@amazon.com
Dolly Isaac: dollyi@amazon.com
Follow us: @aws_gov
More information, visit https://aws.amazon.com/government-education/raisethebar/