Recommended
More Related Content
What's hot
What's hot (20)
Similar to Introduction to AWS July
Similar to Introduction to AWS July (20)
More from CloudHesive
More from CloudHesive (20)
Recently uploaded
Recently uploaded (20)
Introduction to AWS July
- 1. Introduction to AWS Presented by Patrick Hannah VP of Engineering, CloudHesive
- 2. Introduction • Who am I? • What’s my background?
- 3. What are we going to talk about? • Introduction to Cloud Computing • Introduction to AWS • AWS Services • Q&A
- 5. Why move to the Cloud? • Is it cost (dollars and hours) savings? • Is it because it’s (near infinitely) scalable? • Is it a shiny object?
- 6. Cost Savings • Minimize/eliminate up front investment in hardware, software, support, connectivity, etc. (CapEx vs. OpEx) • Minimize/eliminate complexities in cross charging for shared services • Achieve higher economies of scale
- 7. Scalability • Resource + People + Business (Increased Agility and Speed to Market for less) • Someone else now pays to maintain that excess hardware capacity • Automation allows for the horizontal scale up/scale down of infrastructure • Abstracted services eliminate the guesswork in scaling of storage and other services
- 8. Availability • Without physical constraints replacement of failed infrastructure occurs faster • Applications leverage abstracted services where the availability characteristics aren’t your problem • Human error is minimized with automation
- 9. Security • Each host becomes its own security zone • Infrastructure lifecycle management no longer has a physical component • Administrative activities are done with automation in mind • Shared Responsibility security model across your cloud environment
- 11. Gartner Magic Quadrant for Cloud Infrastructure as a Service, Worldwide
- 12. AWS’ Rapid Pace of Innovation 2011 82 159 2012 280 2013 516 2014 AWS has launched a total of 522 new features and/or services to-date* in 2015, for a total of 1,696 new features and/or services since inception in 2006. * As of 8 Oct 15
- 13. AWS’ History of Innovation AWS has been continually expanding its services to support virtually any cloud workload, and it now has more than 60 services that range from compute, storage, networking, database, analytics, application services, deployment, management and mobile. 2009 Amazon RDS Amazon VPC AWS Auto Scaling AWS Elastic Load Balancing 2010 Amazon SNS AWS Identity & Access Management Amazon Route 53 2011 Amazon ElastiCache Amazon SES AWS CloudFormation AWS Direct Connect AWS Elastic Beanstalk GovCloud 2012 Amazon SWF Amazon Redshift Amazon Glacier Amazon Dynamo DB Amazon CloudSearch AWS Storage Gateway AWS Data Pipeline 2013 Amazon CloudTrail Amazon CloudHSM Amazon WorkSpaces Amazon Kinesis Amazon Elastic Transcoder Amazon AppStream AWS OpsWorks 2014 AWS KMS Amazon Config Amazon Cognito Amazon Mobile Analytics Amazon EC2 Container Service Amazon RDS for Aurora Amazon Lambda Amazon WorkDocs AWS Directory Service AWS CodeCommit AWS CodePipeline 2015 Amazon EFS Amazon API Gateway Amazon WorkMail Amazon Machine Learning AWS Device Farm AWS WAF Amazon Elasticsearch Service Amazon QuickSight AWS Import/Export Snowball Amazon Kinesis Firehose Amazon RDS for MariaDB Amazon Inspector AWS Database Migration Service AWS IoT Amazon EC2 Container Registry Amazon Kinesis Analytics AWS Mobile Hub * As of 8 Oct 15 AWS EMR Amazon CloudWatch Amazon FPS AWS Import/Export Trusted Advisor AWS Service Catalog AWS CodeDeploy Amazon CloudWatch Logs
- 14. AWS Global Infrastructure Region Edge Location 11 Regions 30 Availability Zones 53 Edge Locations
- 18. AWS SERVICES
- 19. AWS Services
- 20. Managability • Interfaces – AWS Management Console – AWS CLI, Tools, Tookits, SDKs and Mobile SDKs – AWS Billing and Cost Management – AWS Support – AWS Marketplace/Quick Starts – AWS Training & Certification – AWS Documentation • Management – Amazon CloudWatch – AWS CloudTrail – AWS Config – AWS Service Catalog – Trusted Advisor • Provisioning – AWS CloudFormation – AWS OpsWorks – AWS Elastic Beanstalk – Auto Scaling
- 21. Infrastructure • Network – Amazon Route 53 – AWS Direct Connect – Amazon VPC – Elastic Load Balancing • Compute – Amazon EC2 – Amazon EC2 Container Registry – Amazon EC2 Container Service – AWS Lambda • Storage – Amazon EBS – Amazon EFS – Amazon S3 – Amazon Glacier – AWS Storage Gateway – Amazon CloudFront
- 22. Abstracted Services • Database – Amazon RDS – Amazon Redshift – Amazon DynamoDB – Amazon ElastiCache • Analytics – Amazon Elasticsearch Service – Amazon CloudSearch – Amazon EMR – Amazon Machine Learning • Pipelines – AWS Data Pipeline – Amazon SQS – Amazon Kinesis
- 23. Enterprise • Security – AWS WAF – Amazon Inspector – AWS Certificate Manager – Identity & Access Management – AWS KMS – AWS CloudHSM – AWS GovCloud (US) • Enterprise – AWS Directory Service – Amazon AppStream – Amazon WAM – Amazon WorkDocs – Amazon WorkMail – Amazon WorkSpaces • Migration – AWS Application Discovery Service – AWS Database Migration Service – AWS Import/Export – AWS Schema Conversion Tool
- 24. Development • Tools – AWS CodeCommit – AWS CodeDeploy – AWS CodePipeline • Services – Amazon SES – Amazon SNS – Amazon SWF – Amazon API Gateway – Amazon Elastic Transcoder – Amazon Cognito • Mobile/Game/IoT – AWS Mobile Hub – Amazon Mobile Analytics – AWS Device Farm – Amazon Lumberyard – Amazon GameLift – AWS IoT
- 25. Typical stack utilizing mix of Infrastructure and Managed Services • Route53 (DNS) – feature rich • CloudFront (Content Delivery Network) • S3 (Object Storage, ideal for Static Content) – 3 flavors • ELB (Load Balancing) • ASG (Auto Scaling) • EC2 (Virtual Servers) • RDS (Managed Database) – numerous flavors • ElastiCache (Managed Cache) • SES (SMTP Gateway)
- 26. Q&A • Questions?
- 27. Question 1 • What do you gain by moving to VPC?
- 28. Question 2 • What AWS Service or Services can allow you to automate deployment of “Infrastructure” on AWS?
- 29. Question 3 • What is one approach you can take to make an application or service on EC2 more resilient?
- 30. Question 4 • What AWS EC2 capability allows you to remotely send commands to an instance?
- 31. Question 5 • What IAM capability allows an application access to AWS services without the burden of hardcoded and manually managed credentials?
- 32. Further Learning • Getting Started: https://aws.amazon.com/getting-started • General Reference: http://docs.aws.amazon.com/general/latest/gr • Global Infrastructure: https://aws.amazon.com/about-aws/global- infrastructure/ • FAQs: https://aws.amazon.com/faqs • Documentation: https://aws.amazon.com/documentation/ • Architecture: https://aws.amazon.com/architecture • Whitepapers: https://aws.amazon.com/whitepapers • Security: https://aws.amazon.com/security • Blog: https://aws.amazon.com/blogs • Service Specific Pages: https://aws.amazon.com/service • SlideShare: http://www.slideshare.net/AmazonWebServices • Github: https://github.com/aws and https://github.com/awslabs
- 33. Florida Meetups • http://www.meetup.com/aws-user-group-miami/ • http://www.meetup.com/Miami-AWS-Users-Group/ • http://www.meetup.com/South-Florida-Amazon- Web-Services-Meetup/ • http://www.meetup.com/awsflorida/ • http://www.meetup.com/AWS-User-Groups-of- Florida-Jacksonville/ • http://www.meetup.com/AWS-Users-Group-of- Florida-Palm-Beach-Gardens
Editor's Notes
- Who are you? Patrick Hannah, CloudHesive (where I’m a co-founder and the VP of Engineering) What’s your background? Architecture, Security and Operations on AWS for 5 years, prior to that Contact Center Architecture and Operations for over 8 years (SaaS but we didn’t call it that). What do you hope to get out of the presentation? I want to help folks get as the same out of AWS as I have. I’d also like to see how others are using AWS – as with just about any thing in technology there are multiple ways to do something right (or wrong). How are you using cloud services? At CloudHesive, we provide consulting services to customers who wish to, or who are, leveraging AWS and we also use a number of AWS services to host our managed services customers (and the back-office systems supporting them). Why did you pick the cloud services that you are using? AWS is at the forefront of Cloud; their service catalog can support most traditional on-premise software use cases (infrastructure) but they also offer more abstracted services for software built on the cloud (such as SQS, which is one of my favorite) that negate the need to manage server infrastructure – on premise or on cloud. What about you?
- The primary focus of this presentation is around how mid-sized companies can take advantage of AWS by migrating their existing applications, otherwise known as “lift and drop”. It doesn’t end there; over time AWS customers can enhance their application to leverage more abstracted AWS services (which we will talk about shortly), removing dependencies on traditional network, server and storage infrastructure and solving your business challenges around security, availability and reliability. We will also discuss the business strategy around migrating to AWS, some of the differences between traditional on-premise infrastructure and AWS, and some high level recommendations on how to best leverage AWS.
- Before we talk about how we do it let’s talk about why. Cost savings may come to mind; Scalability may come to mind; You may be getting asked by your customers or your management team. I think a better reason why is you are creating a paradigm shift in your organization – and this is where the true value is: The acquisition, deployment and management of hardware infrastructure has changed; you are no longer purchasing goods (servers, storage, network), you are purchasing services (IaaS, PaaS, SaaS) and outcomes. You provision, decommission and manage your infrastructure like a software product and with that you have unprecedented access to automate these activities by eliminating time consuming, manual tasks and uncertainty around the state of infrastructure. The only hardware you will care about is the endpoints and connectivity to the services you are consuming. The methodologies that you might have used for ensuring the security, availability and scalability of infrastructure no longer apply. Organizations can take advantage of these capabilities in a methodical approach overtime; starting with a “lift and drop” and implementing new features in their applications to take advantage of abstracted services (PaaS, etc.) Moving a single application to AWS is a great start but with some work you can drive change throughout your organization. Over the next few slides I’ll discuss some of the key benefits of moving to AWS (Yes, the cloud is more than iTunes and Amazon doesn’t just sell books)
- Before we talk about how we do it let’s talk about why. Cost savings may come to mind; Scalability may come to mind; You may be getting asked by your customers or your management team. I think a better reason why is you are creating a paradigm shift in your organization – and this is where the true value is: The acquisition, deployment and management of hardware infrastructure has changed; you are no longer purchasing goods (servers, storage, network), you are purchasing services (IaaS, PaaS, SaaS) and outcomes. You provision, decommission and manage your infrastructure like a software product and with that you have unprecedented access to automate these activities by eliminating time consuming, manual tasks and uncertainty around the state of infrastructure. The only hardware you will care about is the endpoints and connectivity to the services you are consuming. The methodologies that you might have used for ensuring the security, availability and scalability of infrastructure no longer apply. Organizations can take advantage of these capabilities in a methodical approach overtime; starting with a “lift and drop” and implementing new features in their applications to take advantage of abstracted services (PaaS, etc.) Moving a single application to AWS is a great start but with some work you can drive change throughout your organization. Over the next few slides I’ll discuss some of the key benefits of moving to AWS (Yes, the cloud is more than iTunes and Amazon doesn’t just sell books)
- Hardware stops becoming the solution to your problems; whether you are trying to solve a problem with application performance or are clamoring for more hardware to scale due to a business event. You change your way of thinking; capacity planning stops becoming reactionary, you stop overbuilding and can better support the volume peaks and valleys of your application. Scale is no longer achieved by finding the largest server to run your application on; Scale is instead achieved by breaking your application up into multiple functional components. These components can now run on appropriately sized servers, and even multiples servers (in an N+1 configuration) to allow for limitless scalability and support your resiliency objectives. Data persistence has changed as well; You are no longer limited to two technologies for data persistence (filesystem/block and OLTP database). Your options are much more use case specific.
- Now that you’ve gone “hands off” on infrastructure half of the availability problem is solved – when an infrastructure component fails you bring up a replacement with minimal effort. You design your software to be robust enough to survive an infrastructure failure – and you use abstracted services (more on both later) - A modern application should be componentized, designed to be stateless and distributed and with a persistence layer, limiting the impact of the failure of an infrastructure component and eliminating infrastructure component uniqueness and allowing it to be thrown away. With a hands off approach you’ve also eliminated the human error factor – no one wants to talk about it but it’s a common cause impact to availability.
- Servers are no longer grouped in physical networks (Private, DMZ, etc.); these networks are now logical and are extended to individual servers by way of Host or Hypervisor based Security. Resources (such as servers) are hands off; Provisioning, Change and Decommissioning is done out of band and in an automated fashion where infrastructure and applications come from a known, version controlled source. The same approach is applied to break/fix activities as well; Why log into a server to view operational (log and event) data or verify a configuration/file version when you now know, without a doubt, what was deployed AND your operational data is centrally available. A common preconception is that the public cloud is insecure but in my experience I am seeing more and more security offers cite the public cloud as being more secure. One of these reasons is the Shared Responsibility model
- Discuss concept of minimally viable product Discuss cloud scale, fault domains, distributed computing Discuss how AWS builds their own services on top of AWS
- Account/Billing Management Alerts – alerts when a predefined threshold has been met Reports – granular reporting + forecasting Contacts – granular contacts for security, operations and billing Marketplace Often, products traditionally deployed on-premise can be found on the AWS Marketplace in pre-build appliance images or CloudFormation Templates 35 Categories 2300 Listings 800 ISVs 143M EC2 Instance Hours CloudWatch In addition to metrics and alarms now supports logs, dashboards, events and actions Tagging Manage your tags from one place using the Tag Editor Billing Tags for cross charging CloudFormation Automation of AWS components Reference Architectures/Marketplace are a great place to start OpsWorks Automation of AWS components and Configuration Management on the OS layer and above Elastic Beanstalk Automation of application deployments
- Consider how people and things connect to you? IP Address Is it an Elastic IP? DNS Pointing towards an instance? Pointing (incorrectly) towards an IP Address of an ELB? Using Route53? What happens if an instance dies? Prevent user error: enable termination protection Recover from the failure of host hardware with CloudWatch Actions Auto Scaling Group + ELB VPC Peering between VPCs (in the same region) without deploying an EC2 based solution NAT Gateway without deploying an EC2 based solution Multiple CGWs with the same Peer IP Address + NAT + Stronger Encryption/Hashing VPC Logs Tenancy options have expanded Dedicated instances Dedicated hosts EC2 Run Command Remote commands to Windows or Linux instances
- IAM What about instance roles? Problems with a policy? Use the Policy Simulator Is someone over permissioned? Use Access Advisor Is someone actually using the user/role? Use the Credential Report Active Directory Directory service comes in three flavors now AD Connector Lightweight Directory Service Full Active Directory Workspaces Easy Bastion (if you are a Windows shop)
- Older AWS deployments may be leveraging their own solutions, running on EC2 to handle a number of services that are now offered as managed or abstracted services Newer AWS deployments might not even need EC2 – consider Lambda or ECS instead
- Each service has it’s own site and set of documentation The SlideShare presentations can be an invaluable resource when it comes to diving into the details The GitHub repositories have excellent examples of applications you can build on AWS
- CloudHesive sponsors 6 Meetups in Florida; 5 in the South Florida-Tri-County Area and one in North Florida We are always looking for ideas on topics, as well as attendees and speakers