Aws Presentation Cloud Security 20120419

Amazon War Stories
Avoiding casualties, collateral damage, and
being outflanked on the road to world domination

Jon Gallagher, CEO/CTO
Nube de Helado Software, Inc.
jon@nubedehelado.com
http://NubeDeHelado.com
619-318-5999
@JonGal @nubedehelado

Jon Gallagher • jon@nubedehelado.com • 619-318-5999 • http://NubeDeHelado.com

Your Allies


The 3 Elements of Systems
Management
 Reactive Management – Managing to Stop Losing Money
 Proactive Management – Managing to Save Money
 Strategic Management – Managing to Make Money

You should be doing all three all the time, but your emphasis will
change as time goes on.

S
R P S R R P
P S R P
S
System Design System Beta System Rollout World Dominance


So What’s the Problem?

BRILLIANC
E!
Inevitable, Overwhelming, and
Complete Success!

System Design War Stories
 Business Issues
◦ Construct your relationship with your
provider like any major vendor
relationship (e.g., your banker)
◦ Budgeting/cost control
 Operational Issues
◦ Who’s doing what, when are they doing
it, why are they doing it, and where?
 Technical Issues
◦ System configuration skews


System Design Casualty
Prevention
 Business Issues – 7 P’s
◦ Create your business relationship
◦ Create your system diagram
◦ Map the AWS infrastructure to your diagram
 Operational Issues – 5 W’s
◦ Structure your access to AWS with their Identity and
Access Manager ( IAM)
◦ Create a corporate account
◦ Use IAM to structure who is allowed to do what
 Technical Issues – The How
◦ Use AWS CloudFormation to build your systems
◦ Create your development infrastructure in
CloudFormation
◦ Test and deploy from CloudFormation


The Instagram-ish Growth Path

http://speakerdeck.com/u/mikeyk/p/scaling-instagram

System Beta War Stories
 Business Issues
◦ Understanding all the costs
(money, time, etc.)
◦ Modeling the business
◦ Monitoring the systems
◦ Using the feedback
◦ Security
◦ Configuration

System Beta Collateral Damage
Prevention
 Business Issues
◦ Build a cost model of each type of service
you use
◦ Understand what you are delivering
◦ Use the monitoring inherent in every service
◦ Use your security groups—and use them
wisely
◦ Test yourself for vulnerabilities
◦ Assume the worst

System Rollout War Stories
 Business Issues
◦ Are your systems delivering the promise you’re
marketing?
◦ Never pay for marginal costs with fixed dollars
◦ SLAs
◦ Scalability
◦ Survivability
◦ SLAs
◦ Scalability
◦ Survivability


System Rollout – Guarding Your
Flanks
 Business Issues
◦ What does your customer want out of the system and what are
they getting?
◦ Are you building barriers to entry?
◦ Does your reporting include the information needed to protect the
company’s advantage?
◦ Are you collecting information that can answer questions about
the user’s experience?
◦ Are you forecasting system usage? The effect of outages?
Testing disaster scenarios?
◦ Do you have monitoring for system responsiveness and
capabilities?
◦ Can you meet the explicit and implicit SLAs your company
makes?
◦ Can you recover from outages in critical components? Do you
have outage plans, communication strategies, and escalation
procedures?

World Domination War Stories
 Business Issues
◦ When is it time to leave AWS?
◦ When is it time to go back to AWS?
◦ Eliminate the job you started with
◦ Plan for obsolescence


World Domination
 Business Issues
◦ Is it cheaper to build now, rather than
buy?
 Facebook
(blog.facebook.com/blog.php?post=262655797
130)
◦ Are you big enough to make the best
deal?
 Netflix
(http://techblog.netflix.com/2010/12/5-lessons-
weve-learned-using-aws.html)

World Domination (cont.)
◦ Have you spun off all non-essential tasks?
 IT Infrastructure
◦ What are your dependencies?
◦ What are the technical trends?
◦ What is everyone else using?


Global Domination – Temporary
for the Ill-Preprepared


Aws Presentation Cloud Security 20120419

Recommended

Recommended

More Related Content

Viewers also liked

Viewers also liked (15)

Similar to Aws Presentation Cloud Security 20120419

Similar to Aws Presentation Cloud Security 20120419 (20)

Aws Presentation Cloud Security 20120419

Editor's Notes