We will dive deep to the different table capacity modes, including the new on-demand capacity mode. We will also present features like Transactions, TTL and Global Tables.

1. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Core -
Compute, Network, Storage and Security
Doron Rogov
Senior Technical Trainer
Amazon Web Services
S K L 2 0 6

2. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Agenda
Network Storage SecurityCompute
Let's make it simple, we'll start with the AWS core services for:

3. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Solutions for Storage and Data Migrations - SKL207 - Starts at 14:10
Tzoori Tamam
Related breakouts
Design with Ops in mind - SKL309 - Starts at 16:40
Shelly Dar Rapaport
AWS Layered Security Solutions - SKL303 - Starts at 16:40
Shllomi Ezra

4. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Compute

5. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Amazon Elastic Compute Cloud (EC2)
Guest 1 Guest 2 Guest n
Hypervisor
Host server
EC2 instances
Physical servers in
AWS global regions

6. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Amazon EC2 instance characteristics
M5d.xlarge
Instance family
Instance
generation
Instance size
Instance type
CPU
Memory
Storage
Network performance
Additional
capabilities

7. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Inside an EC2 Instance
Compute
Sockets, number of cores, clock frequency,
bursting capability
Memory Memory capacity
Network Max bandwidth, packet rate
Storage Input / output operations per second, throughput
GPU GPU technology
Compute NetworkMemory
Storage
GPU
AMI

8. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Amazon
maintained
Broad set of Linux and
Windows images
Kept up-to-date by
Amazon in each region
Marketplace
maintained
Managed and maintained
by AWS Marketplace
partners
Your machine
images
AMIs you have created
from Amazon EC2
instances
Can keep private, share
with other accounts, or
publish to the community
Amazon Machine Images (AMIs)

9. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Choice of processors and architectures
Right compute for each application and workload
AWS Graviton Processor
based on 64-bit Arm arch
Intel® Xeon® Scalable
(Skylake) Processor
AMD EPYC Processor
N E W ! N E W !

10. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Broadest and deepest platform choice
Categories Capabilities Options
+ + =
Compute intensive
Memory intensive
Burstable
Storage (High I/O)
Dense storage
GPU compute
Graphics intensive
General purpose
175
instance types
for virtually
every workload
and business need
Amazon Elastic
Block Store
Elastic Inference
Elastic Graphics
N E W !
Choice of processor
(AWS, Intel, AMD)
Fast processors
(up to 4.0 GHz)
High memory footprint
(up to 12 TiB)
Instance storage
(HDD and NVMe)
Networking
(up to 100 Gbps)
Accelerated computing
(GPUs and FPGA)
Bare Metal
Size
(Nano to 32xlarge)
N E W !
N E W !

11. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Flexible configuration and virtually unlimited scalability
to grow and shrink your infrastructure as your HPC workloads dictate, not
the other way around
HPC on AWS

12. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Why HPC on AWS
Virtually unlimited infrastructure enabling
scaling and agility not attainable on-premises
Flexible configuration options quickly iterate
resource selection and ensure cost optimization
Increased collaboration with secure access
to clusters around the world
Better ROI
Faster time
to results

13. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Accelerating time to results with HPC on AWS
Intel® Xeon® Scalable processor-based Amazon EC2 instances
provide unique advantages to accelerate HPC workloads
• Intel® Xeon® Scalable processors:
o Up to 28 cores delivering enhanced per core performance, and significant
increases in memory bandwidth (6 memory channels) and I/O bandwidth
and throughput (48 PCIe lanes)
o Intel® Advanced Vector Instructions (Intel® AVX-512): Intel® AVX-512 can
handle your most demanding computational tasks and accelerate
performance for workloads
o Intel® AVX 512 delivers up to 2X more FLOPs/clock-cycle for HPC,
analytics, cryptography and data compression workloads5.
• Intel Software development Tools
o Allow you to take advantage of the Intel Xeon Scalable processor and
quickly deploy a fully elastic HPC cluster on AWS Cloud. Once created,
the cluster provisions standard HPC tools such as schedulers, Message
Passing Interface (MPI) environment, and shared storage.

14. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Innovations in HPC infrastructure
Intel Xeon Scalable
(Skylake) processor
Featuring
Up to 4 GHz sustained, all-turbo performance
• Z1d instances are optimized for memory-intensive, compute-intensive applications
• Custom Intel Xeon Scalable processor
• Up to 4 GHz sustained, all-turbo performance
• Up to 385GiB DDR4 memory
• Enhanced networking, up to 25 GB throughput
High clock speed compute instances: Z1d

15. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Innovations in HPC infrastructure
Massively scalable performance
• C5n Instances will offer up to 100 Gbps of network bandwidth
• Significant improvements in maximum bandwidth, packet per seconds, and packets processing
• Custom designed Nitro network cards
• Purpose-built to run network bound workloads including distributed cluster and database
workloads, HPC, real-time communications and video streaming
Intel Xeon Scalable
(Skylake) processor
Featuring
High bandwidth compute instances: C5n

16. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Amazon Elastic Block Store (EBS)
EC2 instance
EBS
volume
Root Device Volume 2nd Volume 3rd Volume
Another
instance
EBS
Snapshot
Amazon S3

17. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Amazon Elastic Block Store (EBS)
EBS General Purpose
SSD (gp2)
EBS Provisioned
IOPS SSD (io1)
Throughput
Optimized HDD (st1)
Cold HDD (sc1)
EBS SSD-backed
volumes
EBS HDD-backed
volumes

18. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Amazon EC2 instance store
Physical Host Machine
EC2 instances
Instance Store
or
Local to instance
Non-persistent data store
Data not replicated (by default)
No snapshot support
SSD or HDD

19. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Network

20. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS global infrastructure
SLA of 99.99% availability
20 geographic regions
A region is a physical location in
the world where we have
multiple Availability Zones
62 Availability Zones
Distinct locations that are
engineered to be insulated from
failures in other Availability
Zones
AWS Global Infrastructure

21. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
AWS Edge Network Locations
Edge Location
Multiple Edge Location
Region Edge Location

22. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Global Infrastructure - Edge locations
Amazon
Route 53
Amazon
CloudFront
AWS ShieldAWS WAF
150+ AWS Edge locations -
Local points of presence commonly supporting AWS services like:

23. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
The AWS Backbone
Edge Location
Multiple Edge Location
Region Edge Location

24. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Why have a backbone network?
Security
Traffic traverses our
infrastructure rather
than the Internet
Availability
Controlling scaling
and redundancy
Reliable performance
Controlling paths
customer traffic
traverses
Connecting closer to
customers
Avoiding Internet “hot
spots” or sub-optimal
external connectivity
* except within the People’s Republic of China
All region to region traffic traverses the backbone*

25. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Flow
Logs
Amazon Virtual Private Cloud (VPC)
Virtual Private Cloud
Provision a logically isolated
cloud where you can launch
AWS resources into a
virtual network
VPC Endpoints
Private and secure connectivity to Amazon S3 and Amazon DynamoDB
Security
Groups & ACLs
NAT
Gateway
Shared VPC allows multiple accounts to launch their applications into a VPCN E W !
Amazon S3 Amazon DynamoDB

26. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VPC
Region
Availability zone A
Amazon VPC Example
Public Subnet
Private Subnet
VPN Only Subnet
Public Subnet
Private Subnet
VPN Only Subnet
Web Web
App App
DB Standby
Availability zone B
Amazon
DynamoDB
Amazon S3
IGW VPG
NGW
DB Master

27. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VPC
Region
Availability zone A
Public Subnet
Private Subnet
VPN Only Subnet
Public Subnet
Private Subnet
VPN Only Subnet
Web Web
App App
DB Standby
Availability zone B
Amazon
DynamoDB
Amazon S3
IGW VPG
NGW
DB Master
Amazon VPC Example
VPC
Region

28. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Elastic Load Balancing (ELB)
Distributed incoming traffic
across multiple targets
TLS offloading and user
authentication
Cost effective
Benefits
Capable of handling rapid
changes in traffic
Network Load Balancer (TCP)Classic Load Balancer Application Load Balancer (HTTPS)
Auto Scaling group

29. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Storage

30. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
AWS storage for different backup use cases
* COMING SOON
Amazon Block Storage
(Amazon EBS)
Amazon Simple Storage Service
(Amazon S3)
Amazon S3 Glacier Amazon Elastic File Service
(Amazon EFS)
Block storage for use with Amazon
EC2
Durable object storage for all
types of data
Archival storage for infrequently
accessed data
Backup data as a file
Designed to protect application
volumes
6 storage classes for different use
case and backup needs, and
integrated with Glacier
Vault Lock for WORM storage for
compliance requirements
Recover data quickly with file-
based applications
Mountable from other EC2
instances for fast restores
Automated lifecycle policies Write directly to Glacier
with S3 APIs
Ideal target for file-based backups
from on-premises or cloud-native
applications
Snapshot feature to backup
applications and data
Cross-region replication &
versioning
S3 Object Lock feature for WORM
storage
Part of 6 S3 storage classes, which
includes 2 for archive:
Amazon S3 Glacier
Amazon S3 Glacier Deep Archive*
2 storage classes for different
access needs:
Amazon EFS
Amazon EFS-Infrequent Access*

31. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Amazon S3 Concepts
• Object-level storage
• Designed for 9.999999999% durability
• You can control access to the bucket and its
objects:
• Access Control Lists (ACLs) to make individual
objects
• bucket policies to configure permissions for all
objects within a single S3 bucket
• Query String Authentication to grant time-
limited access to others with temporary URLs
Bucket with objects

32. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Amazon S3 Objects
Bucket with objects
http://not-taken.s3.amazonaws.com/AWS-TLV-Summit-2018.png
Bucket Object/Key

33. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Your choice of Amazon S3 storage classes
Access FrequencyFrequent Infrequent
• Active, frequently
accessed data
• Milliseconds access
• > 3 AZ
• From: $0.0210/GB
• Data with changing
access pattern
• Milliseconds access
• > 3 AZ
• From: $0.0210 to
$0.0125/GB
• Monitoring fee per obj.
• Min storage duration
• Infrequently accessed
data
• Milliseconds access
• > 3 AZ
• From: $0.0125/GB
• Retrieval fee per GB
• Min storage duration
• Min object size
S3 Standard S3 Standard-IA S3 One Zone-IA S3 Glacier
• Re-creatable less
accessed data
• Milliseconds access
• 1 AZ
• From: $0.0100/GB
• Retrieval fee per GB
• Min storage duration
• Min object size
• Archive data
• Minutes to hours
access
• > 3 AZ
• From: $0.0040/GB
• Retrieval fee per GB
• Min storage
duration
• Min object size
S3 Intelligent-
Tiering
S3 Glacier
Deep Archive
• Archive data
• Hours access
• > 3 AZ
• From: $0.00099/GB
• Retrieval fee per GB
• Min storage duration
• Min object size
N E W ! N E W !
*Coming out later this year
*

34. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Set S3 Lifecycle Policy to tier and expire storage
S3 Lifecycle Policy to tier to lower
cost storage classes and expire
storage
S3 Storage Class Analysis results
help set up a S3 Lifecycle Policy
Policies are based on age of object
and set by bucket, prefix, or object
tag
S3 Standard S3 S-IA S3 Glacier

35. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Versioning
Protect your data from accidental deletion
• Create a new version with every upload
• Previous versions are retained, not
overwritten
• Protect from unintended user deletes
• Making delete requests without a version ID
removes access to objects, but keeps the data
• Manage previous versions with lifecycle
• Transition or expire objects a specified
number of days after they are no longer the
current version
1st Version
2st Version
1st Version
Latest Version
Latest Version
Latest Version

36. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Security

37. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Identity & Access Management Means
Validate identities securely
Authorization
Meet compliance requirements
Audit/Governance

38. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Common Use Cases
Manage user access to AWS accounts and resources
• Developers signing in to the AWS Command Line Interface
(AWS CLI) or AWS Management Console
• SecOps engineers running AWS Lambda functions
Manage application access to data and resources
• Applications running on Amazon EC2 instances or containers
that need access to data in Amazon S3
Manager user access to your own applications
• Users signing in to your applications using their Facebook,
Twitter, or Amazon accounts

39. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS IAM Policy Assignment
IAM Policy
Assigned
IAM Group
Assigned
IAM User
IAM Roles
Assigned

40. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Broad Security & Identity Portfolio
AWS Identity & Access
Management (IAM)
AWS Single Sign-On (SSO)
AWS Directory Service
Amazon Cloud Directory
AWS Secrets Manager
Amazon Cognito
AWS Organizations
AWS Resource Access
Manager (RAM)
AWS Security Hub
Amazon GuardDuty
AWS CloudTrail
AWS Config
Amazon
CloudWatch
VPC Flow Logs
AWS Systems Manager
AWS Shield
AWS Web Application
Firewall (AWS WAF)
Amazon Inspector
Amazon Virtual Private
Cloud (VPC)
AWS Key
Management Service
(KMS)
AWS CloudHSM
Amazon Macie
AWS Certificate
Manager
Server-Side
Encryption
AWS Config Rules
AWS Lambda
Incident
response
Identity Detective
control
Infrastructure
security
Data
protection
!

41. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Solutions for Storage and Data Migrations - SKL207 - Starts at 14:10
Tzoori Tamam
Related breakouts
Design with Ops in mind - SKL309 - Starts at 16:40
Shelly Dar Rapaport
AWS Layered Security Solutions - SKL303 - Starts at 16:40
Shllomi Ezra

42. Thank you!
S U M M I T © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
http://bit.ly/2SGpgdU
Doron Rogov
Senior Technical Trainer
Amazon Web Services