GPSTEC321_VMware on AWS Cloud Technical Deep Dive & Native AWS Services Integration

•

2 likes•448 views

Do you know that customers can seamlessly migrate on-premises applications to VMware Cloud on AWS? Come learn the compute, network, and storage architecture of the VMware Cloud on AWS solution. In this session, we use practical, real-world customer use cases to dive deep on hybrid cloud network connectivity, data protection, and security best practices. Additionally, we highlight how to use native AWS services with VMware Software-Defined Data Center (SDDC) workloads. Expect to walk away with practical guidance and tips on helping customers with their VMware and AWS hybrid cloud journey.

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS re:INVENT
N o v e m b e r 2 7 , 2 0 1 7
VMware on AWS Cloud Technical
Deep Dive & Native AWS Services
Integration

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
VMware on AWS Cloud
Technical Deep Dive & Native
AWS Services Integration
W e n Y u
P a r t n e r S o l u t i o n s A r c h i t e c t , A W S
B e n M e a d o w c r o f t
S r . P r o d u c t L i n e M a n a g e r , V M w a r e

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Solutions architecture overview

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
VMware Cloud on AWS

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
VMware Cloud on AWS: Account structure

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
VMware Cloud on AWS: Architecture
VCSA, ESXi, NSX, vSAN, H5 client
DRS/HA compute cluster (Intel x86)
vSAN storage cluster (all flash)
NSX network virtualization (10 Gbps+)
Standalone cloud cluster
Hybrid connectivity to on-premises
Cloud-to-cloud connectivity
Overview

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Connectivity options

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Customer use case:
Disaster recovery

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Customer requirements

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
DR as a Service with Site Recovery Manager
Overview of goals

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
DR as a Service solutions architecture

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Application migration, DR, DR testing
between on-premises and VMC
Full support for
*Demo needs to be updated at speaker ready room*

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Customer use case:
Database migration

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Database migration: Seeding
Customer data center
vSphere environment
ESXi
Public
VIF
Oracle RAC cluster
Amazon
S3
ESXi
DB backup
VMware Cloud VPC
ESXi
Amazon EC2
CGW
Customer VPC
Elastic network
interface
S3 VPC
endpoint
Oracle RAC cluster
DB restore
AWS Direct
Connect

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Database migration: Sync
Customer data center
vSphere
Source DB
VMware Cloud VPC
ESXi
Amazon EC2
CGW
Customer VPC
Elastic network
interface
Target DB
Change Data Capture (CDC)
AWS Direct
Connect
Replication
instance
Destination Target
On-premises
DB network
vgw-xyz
SDDC VM
logical network
eni-123
AWS DMS
VGW

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Oracle RAC native AWS service integration
Amazon
Redshift
AWS DMS
Migration job
Amazon
QuickSight
Green environment Blue environment
Oracle RAC Cluster
ORCL2ORCL1
VMware vSphere
Elastic
Beanstalk
CDC job

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Customer use case:
Security protection

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS customer VPC
Security protection with native AWS services
Amazon EC2
AZ B AZ CAZ A

Req #2 - Demo
Video Needs to rebuilt with this one

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS physical infrastructure
AWS services
Expand globally
Cost
Elasticity
Workload flexibility
VMware lifecycle management

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Thank you!
P l e a s e f i l l o u t t h e s u r v e y !

AWS GovCloud (US) is an isolated AWS Region designed to help US government agencies and highly regulated organizations meet their compliance needs, including the International Traffic in Arms Regulations (ITAR) and Federal Risk and Authorization Management Program (FedRAMP). AWS GovCloud (US) makes it safe and easy to move sensitive data and regulated IT workloads to the cloud, through its adherence to numerous compliance and regulatory requirements. Join us to learn about AWS GovCloud (US) and how AWS can do the heavy lifting for your government agency or regulated enterprise.

WIN203_With Amazon EC2 for Windows Server and Thinkbox Deadline

Amazon Web Services

Learn how media and entertainment companies use Amazon EC2 for Windows Server for fast rendering on film and television projects. In this session, we discuss how to architect a Windows solution using Deadline to allow the freedom to easily access any combination of on-premises or cloud-based compute resources. Also, learn how to set up a hybrid Windows file system and storage for best performance and cost efficiency. With flexible third-party licensing options, customers using AWS resources can purchase software licenses from the Thinkbox marketplace, deploy existing licenses, or leverage a combination of the two.

SID302_Force Multiply Your Security Team with Automation and Alexa

Amazon Web Services

Adversaries automate. Who says the good guys can't as well? By combining AWS offerings like AWS CloudTrail, Amazon Cloudwatch, AWS Config, and AWS Lambda with the power of Amazon Alexa, you can do more security tasks faster, with fewer resources. Force multiplying your security team is all about automation! Last year, we showed off penetration testing at the push of an (AWS IoT) button, and surprise-previewed how to ask Alexa to run Inspector as-needed. Want to see other ways to ask Alexa to be your cloud security sidekick? We have crazy new demos at the ready to show security geeks how to sling security automation solutions for their AWS environments (and impress and help your boss, too).

GPSTEC302_Anti-Patterns- Learning through Failure

Amazon Web Services

How does a practice become a "best" practice? How does a pattern become an "anti" pattern? As always, experience is the best teacher. As Partner Solution Architects, we receive a lot of partner feedback on how practices and design patterns work—and occasionally fail to work—in the real world. We use this feedback to inform our recommendations and reference architectures. In this session, we explore a representative set of real-life "failures." We look at what these failures have to teach us about design and how to prioritize remediation of known issues.

HLC308_Refactoring to the Cloud

Amazon Web Services

In this session, hear how Cambia Health Solutions, a not-for-profit total health solutions company, created a self-service data model to convert a large-scale, on-premises batch processing model to a cloud-based, real-time pub-sub and RESTful API model. Learn how Cambia leveraged AWS services like Amazon Aurora, AWS Database Migration Service (AWS DMS), AWS Lambda, and AWS messaging services to create an architecture that provides a reasonable runway for legacy customers to convert from old mode to new mode and, at the same time, offer a fast track for onboarding new customers.

SID201_IAM for Enterprises How Vanguard strikes the Balance Between Agility, ...

Amazon Web Services

For Vanguard, managing the creation of AWS Identity and Access Management (IAM) objects is key to balancing developer velocity and compliance. In this session, you will learn how Vanguard designs IAM roles to control the blast radius of AWS resources and maintain simplicity for developers. Vanguard will also share best practices to help you manage governance and improve your visibility across your AWS resources.

SID402_An AWS Security Odyssey

Amazon Web Services

This workshop will give participants the opportunity to take a security focused journey across various AWS services and implement automated controls along the way. You will learn how to apply AWS security controls to services such as Amazon EC2, Amazon S3, AWS Lambda, and Amazon VPC. In short, you will learn how to use the cloud to protect the cloud. We will talk about how to: Adopt a workload-centric approach to your security strategy, Address security issues in an cost-effective manner Automate your security responses to promote maturity and auditability. In order to complete this workshop, attendees will need a laptop with wireless access, an AWS account and an IAM user that has full administrative privileges within their account. AWS credits will be provided as attendees depart the session to cover the cost of running the workshop in their own account. Also, please understand this is a 400-level workshop and assumes that you have basic understanding of core AWS services such as Amazon VPC, EC2, S3, Lambda, Security Groups, NACLs, etc. You should also understand basic networking and security constructs such as TCP/IP, DNS, monitoring and alerting, and be comfortable working on the AWS console and/or AWC CLI.

DVC202_The Open Guide to AWS

Amazon Web Services

"The Open Guide to AWS is an open source writing project, which over the past year has become one of the most popular AWS resources on the web. It’s both a written resource on GitHub, with over 100 contributors, and a large Slack group. Each has become a forum for trading practical knowledge not covered in standard documentation. In this session, we talk about the Guide and how it started, share lessons on seeding initial content, the editorial process, and how to foster a healthy extended community and encourage social engagement. This session is part of the re:Invent Developer Community Day, six community-led sessions where AWS enthusiasts share technical insights on trending topics based on first-hand experiences and knowledge shared within local AWS communities."

Healthcare organizations are rapidly adopting container technology to drive innovation. In this session, join Horizon Blue Cross Blue Shield of New Jersey and ClearDATA to learn about how to integrate Amazon ECS into your deployment pipeline while maintaining compliance for healthcare workloads, how to harden container environments for sensitive workloads, and how to leverage AWS tooling and microservices to provide new views and analysis for data stored in on-premises data centers.

ENT223_Leveraging the AWS Cloud Adoption Framework to Build Your Cloud Action...

Amazon Web Services

The AWS Cloud Adoption Framework (AWS CAF) incorporates best practices and guidance learned through hundreds of customer engagements, into a comprehensive framework for implementing cloud computing across your organization. In this workshop, we break down the complicated process of launching your cloud adoption journey into manageable areas of focus that cover both technical and business stakeholders. Within each focus area, you learn to define work streams spanning multiple disciplines and teams, including how to create an action plan that can guide your organization's change management during your journey to the cloud. Attendees can prepare by reading theAWS Cloud Adoption Framework Introduction Whitepaper . Technical and nontechnical leaders and managers are encouraged to attend.

DVC201-Build AWS Skills Through Community-Led User Groups.pdf

Amazon Web Services

"Did you know that there are over 300 AWS User Groups worldwide? Join this panel discussion featuring AWS community leaders from around the world, and learn the value of attending community-led AWS Meetups in your region. Community leaders share their experiences, talk through how local communities help developers solve problems and achieve their goals, and discuss the benefits of participating in peer-to-peer AWS knowledge sharing and networking activities. This session is part of the re:Invent Developer Community Day, six community-led sessions where AWS enthusiasts share technical insights on trending topics based on first-hand experiences and knowledge shared within local AWS communities."

CON318_Interstella 8888 Monolith to Microservices with Amazon ECS

Amazon Web Services

Interstella 8888 is an intergalactic trading company that deals in rare resources, but their antiquated monolithic logistics systems are causing the business to lose money. Join this workshop to get hands-on experience deploying Docker containers as you break Intersella 8888’s aging monolithic application into containerized microservices. Using Amazon ECS and the Application Load Balancer, you will create API-based microservices and deploy them leveraging integrations with other AWS services. AWS credits are provided. Bring a laptop, and have an active AWS account."

WIN302-Deep Dive on Active Directory From One to Many AWS Regions.pdf

Amazon Web Services

MAE401_Designing for DisneyMarvel Studio-Grade Security

Amazon Web Services

Security is paramount for media storage and workloads and can directly impact a studio's bottom line. As core media workloads move to the cloud, it’s imperative to examine the security implications of a multi-tenant public cloud environment in light of various asset classifications, content production, and delivery scenarios, as well as content handling during production workloads. In this session, we address questions and concerns about security in the cloud in the context of tier-1 (pre-released) studio content, as well as the MPAA. We highlight a studio's journey to meet Marvel’s security requirements and run a tier-1 content workflow in the cloud and discuss what it took to approve the environment on AWS.

DVC304_Compliance and Top Security Threats in the Cloud—Are You Protected

Amazon Web Services

Compliance is necessary and a good thing. However, many compliant companies are still getting breached. In this talk, we discuss the importance of using a risk model to figure out the biggest threat to your business and mitigation and monitoring tactics to guard against these high-risk threats. We also dive into a real-world example of achieving Payment Card Industry Data Security Standard (PCI-DSS) compliance in under a year; we share architecture and design patterns; and we discuss what worked and what didn't. Leave this session knowing what the top cloud attack vectors are and how to protect yourself by using AWS services to build a fully automated, highly flexible and secure environment. This session is part of the re:Invent Developer Community Day, six community-led sessions where AWS enthusiasts share technical insights on trending topics based on first-hand experiences and knowledge shared within local AWS communities.

Application Performance Management on AWS

Amazon Web Services

by Martin Schade, Solutions Architect & Ramesh Dwarakanath, Solutions Architect, AWS Cloud is the new normal, and organizations are deploying different types workloads on AWS. Understanding the performance efficiency and overall application performance is critical to ensuring that you can scale your workload to meet the demands of your customers. Understanding how well your application performs over time helps you to continuously improve and innovate your software to get the most out of the AWS platform. If you aren't measuring custom application metrics, you are operating your software blindly and cannot pinpoint areas of improvement. Learn how to use Amazon CloudWatch custom metrics, alerts, dashboards and AWS X-Ray to architect an application monitoring service to provide insight to your workload's performance.

SID301_Using AWS Lambda as a Security Team

Amazon Web Services

Operating a security practice on AWS brings many new challenges that haven't been faced in data center environments. The dynamic nature of infrastructure, the relationship between development team members and their applications, and the architecture paradigms have all changed as a result of building software on top of AWS. In this session, learn how your security team can leverage AWS Lambda as a tool to monitor, audit, and enforce your security policies within an AWS environment.

Advanced Patterns in Microservices Implementation with Amazon ECS - CON402 - ...

Amazon Web Services

Scaling a microservice-based infrastructure can be challenging in terms of both technical implementation and developer workflow. In this talk, AWS Solutions Architect Pierre Steckmeyer will be joined by Will McCutchen, Architect at BuzzFeed, to discuss Amazon ECS as a platform for building a robust infrastructure for microservices. We will look at the key attributes of microservice architectures and how Amazon ECS supports these requirements in production, from configuration to sophisticated workload scheduling to networking capabilities to resource optimization. We will also examine what it takes to build an end-to-end platform on top of the wider AWS ecosystem, and what it's like to migrate a large engineering organization from a monolithic approach to microservices.

CMP216_Use Amazon EC2 Spot Instances to Deploy a Deep Learning Framework on A...

Amazon Web Services

Deep learning, an implementation of machine learning, uses neural networks to solve complex problems like computer vision, natural language processing, and recommendations. Deep learning libraries and frameworks enable developers to enhance the capabilities of their applications and projects. In this workshop, learn how to build and deploy a powerful deep learning framework, Apache MXNet, on containers. The portability and resource management benefit of containers enables developers to focus less on infrastructure and more on building. The lab first demonstrates the automation capabilities of AWS CloudFormation to stand up core infrastructure. We also leverage Spot Fleet for the cost benefit of using Spot Instances, especially important for developer environments. Next we create an MXNet container in Docker and deploy it with Amazon ECS. Finally, we explore image classification with MXNet to validate that everything is working as expected.

NEW LAUNCH! AWS Greengrass and Amazon FreeRTOS: Connectivity and Security at ...

Amazon Web Services

This is a 400 level session that will discuss how customers can use Amazon FreeRTOS on microcontrollers with Greengrass at the edge. It will walk through connecting your devices running Amazon FreeRTOS, how to connect devices to Greengrass, and how these two services can work together to solve customer use cases. We will also cover security and authorization across Amazon FreeRTOS and Greengrass.

NEW LAUNCH! Amazon EC2 Bare Metal Instances - CMP330 - re:Invent 2017

Amazon Web Services

When Amazon EC2 launched in 2006 there was a single instance size: m1.small. Over the past eleven years EC2 has evolved to provide an extensive selection of compute resources to customers including specialized resources such as NVMe SSDs, GPUs, and FPGAs. Under the hood, the servers used to host EC2 instances have transformed from off the shelf designs running virtualization software on the host CPUs to purpose built servers with AWS network and storage components implemented in hardware. Now we are happy to announce a new category of EC2 instances: Amazon EC2 Bare Metal Instances. These instances provide customers access to the physical compute resources of the host processors along with the security, scale, and services of EC2. This session will provide an overview of Bare Metal instances, how VMware used EC2 Bare Metal instances to build VMware Cloud on AWS, and other customer use cases for this new EC2 capability.

WPS301-Navigating HIPAA and HITRUST_QuickStart Guide to Account Gov Strat.pdf

Amazon Web Services

Join AWS in examining governance and compliance designs aimed at helping organizations meet HIPAA and HITRUST standards. Learn how to better validate and document your compliance, expedite access to AWS compliance accelerators, and discover new ways to use AWS native features to monitor and control your accounts. This session is for a technical audience seeking to dive deep into the AWS service offerings, console, and API.

SecOps 2021 Today: Using AWS Services to Deliver SecOps - SID304 - re:Invent ...

Amazon Web Services

This talk dives deep on how to build end-to-end security capabilities using AWS. Our goal is orchestrating AWS Security services with other AWS building blocks to deliver enhanced security. We cover working with AWS CloudWatch Events as a queueing mechanism for processing security events, using Amazon DynamoDB to provide a stateful layer to provide tailored response to events and other ancillary functions, using DynamoDB as an attack signature engine, and the use of analytics to derive tailored signatures for detection with AWS Lambda. Log sources include available AWS sources and also more traditional logs, such as syslog. The talk aims to keep slides to a minimum and demo live as much as possible. The demos come together to demonstrate an end-to-end architecture for SecOps. You'll get a toolkit consisting of code and templates so you can hit the ground running.

Integrating Video in Mobile Apps and Websites - MBL308 - re:Invent 2017

Amazon Web Services

In this session, we will build a highly scalable mobile app, website, and serverless mobile backend architecture that demonstrates on-demand video streaming, adaptive multi-bitrate transcoding, and video content ingestion. We use AWS Lambda and Amazon Elastic Transcoder to automatically convert high resolution videos upon upload, Amazon CloudFront to stream video content to devices using network-aware adaptive multi-bitrate protocols (such as HLS), Amazon Cognito to authenticate users, and AWS Mobile Hub and AWS CloudFormation to automate setting up the required resources.

RET303_Drive Warehouse Efficiencies with the Same AWS IoT Technology that Pow...

Amazon Web Services

MBL306_Mobile State of the Union

Amazon Web Services

GPSTEC309-SaaS Monitoring Creating a Unified View of Multitenant Health featu...

Amazon Web Services

Supporting a multitenant environment requires a robust management and monitoring strategy. SaaS operations teams require tools and views of system health that enable them to analyze and diagnose both multitenant and tenant-centric issues. The goal of this session is to identify specific strategies and tools that can be combined to support the unique set of operational challenges that SaaS providers face. In this session, we look at how analytics, consumption, and application metrics can correlate tenant activity with system health to proactively identify and troubleshoot issues. We also explore techniques for monitoring and managing different SaaS tenant isolation models, such as silo, pool, and so on.

NEW LAUNCH! AWS Serverless Application Repository - SRV215 - re:Invent 2017

Amazon Web Services

In this session, we will discuss how the AWS Serverless Application Repository makes it easy to discover and deploy serverless applications published by fellow developers and companies like Datadog, Here, Splunk, and many others. We will cover how you can use the repository to find applications for a variety of use cases and then deploy them to your AWS account. In addition, we will discuss how you can publish your own applications to the repository. You will also hear from two contributors, Datadog and Here, who will describe their approach to building the serverless applications that they have published to the Serverless Application Repository.

VMware Cloud on AWS Technical Deep Dive - ENT303 - re:Invent 2017

Amazon Web Services

VMWare Cloud on AWS allows your teams to migrate existing assets to the AWS Cloud quickly by using tools you are already familiar with. VMware Cloud on AWS brings VMware’s enterprise class Software-Defined Data Center software to Amazon’s public cloud, delivered as an on-demand, elastically scalable, cloud-based VMware sold, operated and supported service for any application and optimized for next-generation, elastic, bare metal AWS infrastructure. This solution enables customers to use a common set of software and tools to manage both their AWS-based and on-premises vSphere resources consistently. This session uses practical, real world customer deployment examples to dives deep on hybrid cloud network connectivity, data protection best practices, and AWS native service integrations. Attendees will walk away with practical guidance and tips on getting the best of both worlds with VMware and AWS hybrid cloud solution.

VMware on AWS A Technical Deep Dive PPT

Amazon Web Services

Bring the VMware Software-Defined Data Center to Amazon Web Services with VMware Cloud. In this webinar we will dive into the compute, network and storage architecture of the VMware Cloud on AWS solution. We will look at real-world, live applications running in VMware Cloud on AWS which integrate with native AWS services such as S3 and Amazon Relational Database Service. We’ll discuss common deployment scenarios including Hybrid Cloud Architectures and Disaster Recovery and explore how the TCO of these implementations differ in VMware Cloud as compared to on-premises implementations.

What's hot

HLC302_Adopting Microservices in Healthcare Building a Compliant DevOps Pipel...

Amazon Web Services

ENT223_Leveraging the AWS Cloud Adoption Framework to Build Your Cloud Action...

Amazon Web Services

DVC201-Build AWS Skills Through Community-Led User Groups.pdf

Amazon Web Services

CON318_Interstella 8888 Monolith to Microservices with Amazon ECS

Amazon Web Services

WIN302-Deep Dive on Active Directory From One to Many AWS Regions.pdf

Amazon Web Services

MAE401_Designing for DisneyMarvel Studio-Grade Security

Amazon Web Services

DVC304_Compliance and Top Security Threats in the Cloud—Are You Protected

Amazon Web Services

Application Performance Management on AWS

Amazon Web Services

SID301_Using AWS Lambda as a Security Team

Amazon Web Services

Advanced Patterns in Microservices Implementation with Amazon ECS - CON402 - ...

Amazon Web Services

CMP216_Use Amazon EC2 Spot Instances to Deploy a Deep Learning Framework on A...

Amazon Web Services

NEW LAUNCH! AWS Greengrass and Amazon FreeRTOS: Connectivity and Security at ...

Amazon Web Services

NEW LAUNCH! Amazon EC2 Bare Metal Instances - CMP330 - re:Invent 2017

Amazon Web Services

WPS301-Navigating HIPAA and HITRUST_QuickStart Guide to Account Gov Strat.pdf

Amazon Web Services

SecOps 2021 Today: Using AWS Services to Deliver SecOps - SID304 - re:Invent ...

Amazon Web Services

Integrating Video in Mobile Apps and Websites - MBL308 - re:Invent 2017

Amazon Web Services

RET303_Drive Warehouse Efficiencies with the Same AWS IoT Technology that Pow...

Amazon Web Services

MBL306_Mobile State of the Union

Amazon Web Services

GPSTEC309-SaaS Monitoring Creating a Unified View of Multitenant Health featu...

Amazon Web Services

NEW LAUNCH! AWS Serverless Application Repository - SRV215 - re:Invent 2017

Amazon Web Services

What's hot (20)