Event Information: Health and Human Services agencies around the world are trusting the AWS cloud to host their mission-critical systems.

1. Why Are Health and Healthcare
Agencies are Building their Mission
Critical Systems in the Cloud?
Eric Schwenter
Senior Solutions Architect
Amazon Web Services

3. What Is Cloud Computing?
The on-­demand delivery of IT
resources over public or private
networks with zero up-­front costs, no
long-­term contracts, and pay-­as-­you-­
go pricing

5. Equipment
Resources and
Administration
Contracts Cost
No Up Front Expense
Pay for what you Use
Improve Time to
Market & Agility
Scale Up and
Down
Self-­Service
Infrastructure
Traditional
Infrastructure
AWS Cloud

6. AWS in the Public Sector
7,000+
educational
institutions
2,300+
government
agencies
22,000+
nonprofit
organizations

7. William H. Morris
Associate CIO
The cloud can lower the
operating cost, and actually allow
us to focus on what we do well,
which is taking care of patients.

8. Health and healthcare organizations are in the midst of
transformation. Organizations are focusing on health
outcomes, using data to drive decisions, and rethinking
service deliver to increase quality and decreases costs.
Making this challenging are:
§ Outdated approaches to technology
§ Data silos and legacy systems
§ Digitization of service delivery
§ Changing laws and regulations
§ Healthcare delivery transformation
§ Growing benefits enrollments
§ Aging populations
§ New technologies
Implementing the right technologies
using agile approaches is to
achieving these objectives.

9. HHS in the Cloud: Where are agencies starting?
There are many “on ramps” to the cloud. For many HHS organizations,
analytics and mission critical systems are the new on-­ramp to the cloud.
Development
& Test
Digital
& Mobile
Analytics
Mission Critical
Applications

10. AWS is built for mission critical workloads
Modern tools and numerous cloud services help
organizations develop applications quickly.
Create systems that area highly available, fast, and that
scale automatically to changes.
Capabilities to meet and exceed security and compliance.
AWS manages 1800 security controls so you don’t have to
Protect your vital information from catastrophic
failures in a highly reliable and cost effective manner.
Agility and speed
Performance
Disaster recovery
Security
Cost Reduce the costs of your systems

11. Lee Kim
Director, Privacy and Security
HIMSS North America
Most healthcare institutions don’t have
the time and resources
to devote to cybersecurity that an
established cloud provider
might have.
Security is foundational at AWS
Architected to be flexible and secure

12. AWS is used by governments across the globe,
including by government healthcare agencies.

13. AWS is Architected for Government Security Requirements
And many more…
https://aws.amazon.com/compliance/

14. Familiar Security
Model
Validated and driven by
customers’ security experts
Benefits all customers
PEOPLE & PROCESS
SYSTEM
NETWORK
PHYSICAL
Security is Job Zero

15. With AWS, Security Is a Shared Responsibility
Customers concentrate on systems and apps while AWS manages
infrastructure.
+ =
• Facilities
• Physical security
• Compute infrastructure
• Storage infrastructure
• Network infrastructure
• Virtualization layer (EC2)
• Hardened service endpoints
• Rich IAM capabilities
• Network configuration
• Security groups
• OS firewalls
• Operating systems
• Application security
• Proper service configuration
• AuthN and account management
• Authorization policies
More secure and
compliant systems
than any single entity
could normally achieve
on its own

16. Infrastructure Security
Inventory & Configuration
Data EncryptionIdentity & Access Control
Monitoring & Logging
AWS Partner Solutions
AWS Security Tools & Features

17. • You benefit from an environment built for the most security
sensitive organizations
• AWS manages 1800+ security controls so you don’t have to
• You get to define the right security controls for your workload
sensitivity
• You always have full ownership and control of your data
What This Means

18. AWS Compliance Accelerators
A fast, secure path to the cloud

19. Customer Challenges
§ Meeting compliance requirements (NIST, PCI, HIPAA, CJIS, etc.)
§ Choosing from a myriad of options when designing for the cloud
§ Making many critical decisions to ensure a secure application when
using the AWS Shared Responsibility Model
§ Mapping security controls to numerous AWS services
− Example: 400 NIST 800-­53 Security Controls to 42 AWS Services
§ Want flexibility but want options that can be deployed “out of the box”
AWS developed the Compliance Enterprise
Accelerator to address critical customer challenges
when moving to the cloud

20. AWS built the Compliance Accelerator Packages to
include several key artifacts to meet customer needs
Package Overview
§ Guidance Documentation
§ Security Controls Matrix
− NIST SP 800-­53
− PCI DSS
− Coming Soon: CJIS, HIPAA
§ Customizable Reference Architecture Diagram
§ CloudFormation Templates

21. AWS Compliance Accelerator Package
CloudFormation Stack
2,500 lines of JSON code = 126 AWS Resources, 200+ API Actions

22. Customizable Reference Deployment

23. Security Controls / Compliance Mapping: Example
Matrix

24. Torsten Kablitz
Vice President, IT Business Services
[Just one] of our customers…..500,000
transactions a day….AWS allows us to
bring up and bring down servers just as
we need them.

25. AWS Pricing Principles
Pay as you go
Pay less by using more
Pay less when you reserve
Pay less when AWS grows
No up-­front investment
Pay per use

26. 1
Replace large upfront
expenditures with pay
as you go and only for
what you use.
3
Save more money as
you grow bigger
Tiered Pricing
Volume Discounts
Custom Pricing
2
Pricing model choice
to support variable &
stable workloads
On-Demand
Reserved
Spot
How can you achieve lower TCO with AWS?

27. How does AWS help lower TCO? By enabling customers to
reduce both up-­front and variable costs
Moving to a lower variable-­cost structure
Reducing or eliminating capital-­intensive investments in infrastructure hardware
Reducing costs for monitoring, maintenance and license spend
Eliminating data center and co-­location overhead costs
Paying only for what you use
Reducing excess, unused capacity
Shifting from a forecast-­driven model to a customer demand-­driven model
Moving to an agile cost base for expansion (or contraction) of the business
Increased automation and productivity
Reducing or eliminating IT management activities that waste time and resources
Moving staff into differentiated, value-­enhancing activities
Traditional
Data Center
Virtualized
Data Center
UPFRONT
COSTS
VARIABLE
COSTS
VARIABLE
COSTS
AWS
UPFRONT
COSTS
UPFRONT
COSTS
VARIABLE
COST
Running
internal IT
more efficiently
Cost savings from
moving to AWS

28. Jeroen Tas
CEO, Healthcare Informatics Solutions and Services
We combine data to make it
actionable….We’re doing that together
with Amazon, because there is only one
company that we can do this with
which gives us the reliability, scale, and
performance we need.
Big Data and HHS
AWS offers technologies and techniques for working
productively with data, at any scale.

29. Go from disparate, dirty data to insight in the Cloud
Healthcare data workflow: Ingest, combine, store, and analyze

30. Storage Services
A reliable, scalable, and secure place for your data
Amazon S3
Designed to store and access any type of data
over the Internet
Amazon Elastic File System
Simple, scalable file storage for use with
Amazon EC2 instances in the AWS Cloud
Amazon Elastic Block Storage
Block-­level storage that serves as a virtual
hard drive for your Amazon EC2 instance
Amazon Glacier
Low-­cost and highly durable storage
service for long-­term backup and archive of
any type of data
AWS Storage Gateway
Seamlessly links your on-­premises
environment to Amazon cloud storage
Data Transfer Services
A portfolio of data transfer services to
migrate data into and out of the AWS cloud

31. Compute Services
Virtual Server Hosting, Container management, and Serverless Computing
Amazon EC2
Provides resizable cloud-­based compute
capacity in the form of EC2 instances, which
are equivalent to virtual servers
AWS Lambda
Run code without thinking about servers.
Pay for only the compute time you consume.
Amazon EC2 Container Service
A highly scalable, high performance
container management service

32. Database Services
Amazon RDS
Managed relational database service. Cost-­
efficient and resizable capacity while managing
time-­consuming database administration tasks
Amazon Aurora
Amazon Redshift
AWS DMS
Migrate your databases to AWS with zero
downtime. More than 12,000 databases have
been migrated using AWS DMS.
Fast, fully managed, petabyte-­scale data
warehouse
MySQL-­compatible relational database with
5X performance. Security, availability, and
reliability of commercial databases at 1/10th
the cost.
Amazon DynamoDB
Fast and flexible NoSQL database service
for all applications that need consistent,
single-­digit millisecond latency at any scale
Amazon Elasticache
Deploy, operate, and scale an in-­memory
cache in the cloud.
Managed relational databases, NoSQL database, data warehouse service and in-­
memory cache.

33. Analytics Services – Amazon Redshift
Fast, simple, cost-­effective petabyte-­scale data warehousing.
• FINRA moved about 75 percent of its
operations to Amazon Web Services, using
AWS to capture, analyze, and store a daily
influx of 75 billion records.
Analyze all your data using your existing
business intelligence tools.
§ Start small for $0.25 per hour with no
commitments and scale to petabytes for
$1,000 per terabyte per year, less than a
tenth the cost of traditional solutions.
§ Customers typically see 3x compression,
reducing their costs to $333 per
uncompressed terabyte per year.

34. Networking Services
Virtual private cloud, direct connections, load balancing, and DNS
Amazon VPC
Provision a logically isolated section of the
AWS cloud where you can launch AWS
resources in a virtual network that you define
Amazon Route 53
A highly available and scalable cloud
Domain Name System (DNS) web service
AWS Direct Connect
Establish a dedicated network connection
from your premises to AWS
Elastic Load Balancing
Distributes incoming application traffic
across multiple Amazon EC2 instances in
the cloud

35. Contact slghhs@amazon.com