Looking to accelerate your cloud adoption? Worried about complexities and potential challenges? Join this session to learn more about the AWS Cloud Migration Framework. Explore what it means to be ready to migrate and how to establish a foundation to save time and prevent roadblocks. Learn the importance of driving organizational change and establishing foundational readiness planning. Discover our iterative AWS ProServe approach to migration, and hear how customers leveraged a migration readiness plan to help create a strategy. Learn about the new AWS Cloud Adoption Readiness Tool, designed to provide users with a cloud migration assessment.

1. P U B L I C S E C T O R
S U M M I T
Singapore

2. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Become Migration Ready:
Accelerate & Optimize your Cloud Adoption with
Government Hybrid Cloud Architecture
Julian Lau
Head of Solutions Architect, ASEAN
Worldwide Public Sector
AWS

3. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Governments are moving fast to enable cloud
Australia
Secure Cloud Strategy 2017
Bahrain
Cloud First Policy 2017
Saudi Arabia
Cloud Computing Regulatory Framework
New Zealand
Cloud First Policy 2018
United Kingdom
Government Cloud Strategy 2011
These governments actively encourage agencies to adopt cloud services because they are more cost effective, agile, and
secure, providing greater choice
India
*State-level Cloud First policies
Philippines
Cloud First Policy 2016
Malaysia
Cloud First Policy (Announced 2017)

4. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
On-Premises Apps
 Active directory
 Network
configuration
AWS Cloud Apps
 Users and access
rules (IAM)
 Your private network
(Amazon VPC)
Government
Hybrid Cloud
 Encryption
 Backup appliances
 Encryption (Amazon
S3, Amazon RDS,
CloudHSM)
 Backups (Storage
Gateway)
…it’s a journey for the Government.
The cloud Isn’t an “all or nothing” choice…

5. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Why would government need a hybrid cloud?
Governance
Centralized governance for both the on-
premises and cloud infrastructure
Speed and Agility
Faster time to market to roll out the
government e-services
Security
Enabler for securing workloads with different levels
of data classification
Lower Total Cost of Ownership
Drive down the total cost of ownership to deploy
government workloads

6. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
What is a hybrid cloud architecture?
Run workloads
in the cloud
Integration between
on-premises and
cloud services
(management tools
and operations)
Run workloads
on premises

7. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Government hybrid cloud architecture
CORP

8. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
CORP
Government Hybrid Cloud Architecture
Top Secret, Secret, Confidential Restricted, Unclassified

9. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Hybrid cloud architecture – connectivity options
- Launched in 2011
- Private connection
- Separate from the Internet
- Consistent network experience
- Connect through 67 locations
- Port speeds of 1 Gbps, 10
Gbps or sub-1 Gbps
AWS Direct Connect
- IPsec authentication and
encryption
- Two main options
- AWS Managed VPN
- Software VPN (Amazon
EC2)
VPN
- Public IPs
- Elastic IPs
- Internet data out pricing
Public Internet

10. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Extension of your data center with Amazon VPC
AvailabilityZoneA
AvailabilityZoneB
You control your access
• Your own private, isolated
section of the AWS Cloud
• Control all internal and
external connectivity
AWS network security
• AWS network will prevent
spoofing and other common
layer two attacks

11. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T

12. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Scenario 1
I want to enjoy the benefit on the cloud, but I worry the data is
not secured. I also worry about data availability when storing
data in another jurisdiction.

13. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
DB
Web/
App
CORP
Scenario 1

14. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Scenario 2
I am running VMware on premises and would like to minimize
the changes moving to the cloud; I also want to have the
flexibility to move the workloads between on premises and
AWS for different data classifications.

15. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
AWS Global Infrastructure
VMware Cloud on AWS
Customer
data center
AWS services
vCentervCenter
vSAN NSXvSphere
Hybrid
linked-mode
AWS
Lambda
Amazon
S3
Amazon
RDS
Amazon
Kinesis
Amazon
Redshift
Elastic
Network
Interface
VMware Cloud on AWS
VMware vRealize Suite, PowerCLI AWS CloudFormation, CLI
On premises

16. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Common challenges with hybrid cloud adoption
Incongruent
networks
Operational
inconsistency
Learn new
skillsets and tools
Multiple control
and monitoring
mechanisms
Multiple virtual
machine formats

17. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
VMware Cloud on AWS
Rich VMware SDDC
delivered as a cloud
service on AWS
Consistency and
familiarity of VMware
technologies
Easy workload
portability and
hybrid capabilities
Direct access to the
power of native AWS
services
Existing and new apps
with containers
and VMs
VMware SDDC technologies you know and trust delivered as a service on the world's most popular public cloud

18. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Scenario 3
I want the benefits of using cloud services
on premises.

19. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
• Consistent AWS experience with AWS designed
infrastructure for security and performance
• Seamlessly extend AWS services to your on
premises and access regional AWS services
• Fully managed and updated as part of AWS
Regions, with a single point of service and
support
AWS Outposts (to be available)
Build once, deploy anywhere

20. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Seamlessly connect your Regional and Outpost environments
Amazon confidential
AWS Region
Subnet
Availability Zone
Subnet
AWS
Outposts
AWS
Outposts
VPC
VPC
Subnet Subnet
Subnet
Extend your existing Amazon VPC experience on premises

21. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Launch AWS services to AWS Outposts
• Compute and Storage - Amazon EC2 instances and
Amazon EBS volumes
• Secure Networking - Amazon VPC
• Database - Amazon Relational Database Service
(Amazon RDS)
• Containers - Amazon Elastic Container Service
(Amazon ECS) and Amazon Elastic Container
Service for Kubernetes (Amazon EKS)
• Data Processing - Amazon Elastic Map Reduce
(Amazon EMR), Amazon MSK
• File System Processing – Amazon FSx
• Machine Learning – Amazon SageMaker

22. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Summary: Family of hybrid options
VMware Cloud Cloud Services
On Premises
Cloud Services
At the Edge
Data Center Extension

23. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Top Secret, Secret, Confidential Restricted, Unclassified
For IaaS Only?
Government hybrid cloud architecture

24. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Growing set of services
Integrated
Networking
Rules Engine
Device Shadows
Device SDKs
Device Gateway
Registry
Local Compute
Machine Learning
Conversational
Interface
Virtual Desktops
App Streaming
Schema
Conversion
Image Recognition
Sharing &
Collaboration
Exabyte-Scale
Data Migration
Text to Speech Corporate Email
Application
Migration
Database
Migration
Regions
Availability Zones
Points of
Presence
Data Warehousing
Business Intelligence
Elasticsearch
Hadoop/Spark
Data Pipelines
Streaming Data
Collection
ETL
Streaming Data
Analysis
Interactive SQL
Queries
Queuing &
Notifications
Workflow
Email
Transcoding
Deep Learning
Frameworks
Server
Migration
Communications
Business Apps
Business
Intelligence
DevOps Tools Security Networking StorageDatabases
API Gateway
Single Integrated
Console
Identity
Sync
Mobile Analytics
Mobile App
Testing
Targeted Push
Notifications
One-Click App
Deployment
DevOps Resource
Management
Application Lifecycle
Management
Containers
Triggers
Resource Templates
Build and Test
Analyze and Debug
Compute
VMs, Auto
Scaling, Load
Balancing,
Containers,
Virtual Private
Servers, Batch
Computing,
Cloud Functions,
Elastic GPUs,
Edge Computing
Storage
Object, Blocks,
File, Archivals,
Import/Export,
Exabyte-Scale
Data Transfer
CDN
Databases
Relational,
NoSQL,
Caching,
Migration,
PostgreSQL
compatible
Networking
VPC, DX, DNS
Identity
Management
Key Management
& Storage
Monitoring
& Logs
Configuration
Compliance
Web Application
Firewall
Assessment
& Reporting
Resource &
Usage Auditing
Access Control
Account
Grouping
DDOS Protection
Support Professional
Services
Optimization
Guidance
Partner
Ecosystem
Training &
Certification
Solutions Management
Account
Management
Security & Billing
Reports
Personalized
Dashboard
TECHNICAL & BUSINESS SUPPORT
MARKETPLACE
Monitoring
Manage
Resources
Data Integration
Integrated Identity &
Access
Integrated Resource &
Deployment
Management
Integrated Devices
& Edge Systems
Resource
Templates
Configuration
Tracking
Server
Management
Service
Catalog
Search
HYBRID ARCHITECTUREANALYTICS MOBILE SERVICESDEV/OPS IoT AI ENTERPRISE APPS MIGRATION
APP SERVICES
INFRASTRUCTURE CORE SERVICES SECURITY & COMPLIANCE MANAGEMENT TOOLS

25. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T

26. Thank you!
© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Julian Lau
Head of Solutions Architects, ASEAN
Worldwide Public Sector
AWS