透過 AWS 上的終端使用者計算解決方案提升工作效率

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Bob Yeh, Solutions Architect, AWS
November-22, 2018
Increasing Productivity with End-User
Computing Solutions on AWS

Sponsor

What to Expect from the Session
• Overview of Amazon Workspaces
• Overview of Amazon WorkDocs
• Overview of Amazon AppStream 2.0
• Deployment Consideration

Security Threats
In 2017, the average
data breach cost
$3.62M
WannaCry ransomware
attack estimated to
have cost $4.0B
Evolving Workforce
43% of US employees
worked remotely in 2016
Dynamic Organizations
Global mergers and
acquisitions reached
$3.7T in 2017
Business Landscape Is Changing

What Customers Are Telling Us
What’s not working?
Personal Computers
§ Manage inventory
§ Secure endpoints
§ BYOD is complicated
§ Data must be backed up
§ Expensive to scale
On-Premises VDI
§ Upfront investment
§ Weeks to deploy
§ Requires management
§ Servers must be secured
§ Expensive to scale
Embrace
Personal
Devices
Support
Contract
Workers
Access for
Mobile
Workers
Data
Security
Agility
Data Storage
§ Stored on multiple devices
§ Limited control
§ Accessing large files
§ Collaborating
§ Hard to secure

AWS End User Compute Solutions
Fully managed, secure
virtual cloud desktops
running on AWS
Easily stream desktop
applications to any device
running a web browser
Secure file collaboration
and management,
simplified

Amazon WorkSpaces

Managed Cloud Desktops
Secure
Pay as you go Simple
to deploy and manage
Provide high-performance persistent
cloud desktops to users
Scale and
consistent performance

End the PC Lifecycle Treadmill
Start PC
refresh
Deploy new
technology
Inventory
management
Build and
images
Service desk
support
Retirement
• Extend the life of your client
hardware
• Support BYOD
• Use PCs, macOS, tablets,
Chromebooks, and Zero Clients
• Support self service
• Quickly scale up or down
• Use perpetual PCs in the cloud
• Move to OPEX model
Every
2–4
years

Amazon WorkSpaces Use Cases
Global organizations
Mobile workers
M&A activity
Developer productivity
Modern Organizations
Temporary workers
Contractors
Training
Project-Based Work
Secure applications and data
Support BYOD
Meet compliance requirements
Security and Compliance

Plays Well with Existing Tools
Microsoft Active
Directory
Multi-factor
authentication
(MFA)
(RADIUS)
SCCMIntranet
Amazon WorkSpaces integrates easily with your on-premises tools and network

Improves Security
Desktop stream
encrypted in transit
No sensitive data on
users’ devices
Amazon WorkSpace data
encrypted at rest
Amazon WorkSpaces encrypts data and streams, and keeps information off devices

Flexible Billing Options
HourlyMonthly
Best for
§ Full-time staff
§ Simplifying your AWS bill
§ Instant access
§ Running scheduled tasks
Best for
§ Students & part-time staff
§ Optimizing your AWS bill
§ Quick access
§ Running ad hoc tasks

Customer Success Story: Endemol Shine Nederland
“With Amazon WorkSpaces, we can provide new workers with a
Windows desktop and the applications they need within hours
instead of days. Amazon WorkSpaces makes it easy for workers
to use their preferred device and for Endemol Shine Nederland
to maintain our security requirements. Because Amazon
WorkSpaces is cost effective and requires no upfront payment,
we have been able to save 30% of our desktop operations costs
and 70% on capital expenditure.”
– Leon Backbier, IT Manager, Endemol Shine Nederland

Amazon WorkDocs
Content creation, file collaboration and management, simplified

Secure, fully managed, file
collaboration and management
service with an extensible SDK
Anywhere access
Rich collaboration and
sharing
Pay as you go
Easily integrated
File Collaboration and Management

Amazon WorkSpaces and Amazon WorkDocs
• 50 GB free tier for Amazon WorkSpaces users
• Upgrade to 1 TB for $2 per user/month
• Amazon WorkDocs Drive can be a default user storage
solution
+

Amazon AppStream 2.0
Fully managed application-streaming service that provides users instant
access to their desktop applications

Desktop Application Streaming
Stream desktop applications securely
to any web browser
Pay as you go
Secure
applications and data
No infrastructure
to manage
Scale globally

Benefits of Amazon AppStream 2.0
Import existing
apps with no
changes or
rewrites and start
streaming
Integrates with
existing apps,
identity,
entitlements, and
backend
No hardware or
software to install,
add your apps and
start streaming
One streaming
instance per
user—no shared
instances

Managed streaming solution
for desktop applications
Business and public sector
Move desktop applications
to cloud with no rewrite
ISVs
Pre and post process
visualization on AWS
Design and engineering
Amazon AppStream 2.0 Use Cases

Multiple Instance Families
• General purpose – Knowledge worker apps
• Compute optimized – Compute-bound applications that benefit from
high-performance processors
• Memory optimized – Applications that process large datasets in memory
• Graphics optimized – High graphics requirements
One session: One VM = Consistent performance
Match app workload to instance characteristics:

Customer Success Story
“With AppStream 2.0, we can configure a single instance of E3D and deliver it
to any number of engineers training with AVEVA Experience anywhere in the
world. Because AppStream 2.0 runs inside their browser, customers don't need
to worry about configuring and securing their computers or network. They can
immediately start learning E3D with a responsive, fluid experience that is
indistinguishable from a native installation on a workstation.”
– Patrick Pando, VP Cloud Sales, AVEVA

Directory Integration
• All Amazon WorkSpaces will be joined to
an Active Directory domain
• AWS Directory Service is required to
connect users to their Amazon
WorkSpace
• Fleets can be domain-joined or
standalone
• AD-joined fleets integrate via
SAML with your identity provider

Active Directory Recommendations
ü Extend your Active Directory into AWS on
EC2 instances
ü Use cross-account VPC peering for
communications to a Shared Services VPC
ü Define your VPCs in Active Directory Sites
and Services
ü Separate Active Directory OUs by service and
region

Deployment Considerations

© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
The Approach
• Decide on user segmentation
• Select the initial use cases
• Evaluate performance
characteristics
• Deploy & Iterate!

The Scenario
• Hybrid architecture, mix of applications on premises and in the cloud
• Existing Active Directory environment for Identity
• AWS Direct Connect or IPSec VPN already in place
•~30% contingent workforce
•~10% with high performance or GPU workloads
Mergers and
acquisitions
BYOD Mobile workers Temporary
workforce
Secure
access

Elastic Network Interfaces
ü An instance in either service has two network
interfaces
Ø ETH0 is the service interface
Ø ETH1 is the interface in your VPC
ü Routing rules and security groups affect ETH1; you
have full control of this interface
ü User traffic can route to file servers, backend
databases, licensing servers, and so on, either in
your VPC, in a peered VPC, or on-premises

Global Availability

Try It Now
Try Amazon WorkSpaces; Free Tier
available!
Run two Standard bundle
WorkSpaces for 40 hours a month,
for up to two calendar months.
Windows 7 or Windows 10
Experience, including Amazon
WorkDocs with 50 GB storage.
Try Amazon AppStream 2.0
with no setup required!
Try sample applications –
business, design,
engineering, and developer.
Upload your own files, test a
workflow, save your work,
and print.
Try Amazon WorkDocs; Free
Tier available!
30-day free trial with 1 TB of
storage per user for up to 50
users.
WorkSpaces users receive
access to Amazon WorkDocs
for no additional charge.

Follow Us on Facebook for More Information

https://aws.amazon.com/tw/webinars/tw-webinar-series/

Remember to complete
your evaluations!Remember to complete
your evaluations!

Thank you!
bobyeh@amazon.com

透過 AWS 上的終端使用者計算解決方案提升工作效率

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to 透過 AWS 上的終端使用者計算解決方案提升工作效率

Similar to 透過 AWS 上的終端使用者計算解決方案提升工作效率 (20)

More from Amazon Web Services

More from Amazon Web Services (20)

透過 AWS 上的終端使用者計算解決方案提升工作效率