by Ben Willett, Solutions Architect, AWS Database Week at the AWS Loft is an opportunity to learn about Amazon’s broad and deep family of managed database services. These services provide easy, scalable, reliable, and cost-effective ways to manage your data in the cloud. We explain the fundamentals and take a technical deep dive into Amazon RDS and Amazon Aurora relational databases, Amazon DynamoDB non-relational databases, Amazon Neptune graph databases, and Amazon ElastiCache managed Redis, along with options for database migration, caching, search and more. You'll will learn how to get started, how to support applications, and how to scale.

1. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
Pop-up Loft
Oracle on AWS
Ben Willett
benwille@amazon.com
Solutions Architect

2. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
• Easy to Administer
• Scalable and fast
• Available and durable
• Secure
• Inexpensive
• Oracle licensing
• Managed infrastructure
• Available in minutes
• Manage parameters and options
across instances
• Web console, CLI, SDK, AWS
CloudFormation templates
AMAZON RELATIONAL DATABASE SERVICE

3. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
• Easy to administer
• Scalable and fast
• Available and durable
• Secure
• Inexpensive
• Oracle licensing
AMAZON RELATIONAL DATABASE SERVICE
Storage
SSD, Magnetic
Compute
CPU, RAM, network

4. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
• Easy to administer
• Scalable and fast
• Available and durable
• Secure
• Inexpensive
• Oracle licensing
• Automatic host replacement
• Managed high availability
• Managed backups
• Durable storage—Amazon EBS
and Amazon S3
AMAZON RELATIONAL DATABASE SERVICE

5. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
• Easy to administer
• Scalable and fast
• Available and durable
• Secure
• Inexpensive
• Oracle licensing
• VPC by default
• VPN/Direct Connect to
on-premises
• Encryption at rest—KMS, TDE,
HSM
• Encryption in transit
• Strong account controls
AMAZON RELATIONAL DATABASE SERVICE

6. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
• Easy to administer
• Scalable and fast
• Available and durable
• Secure
• Inexpensive
• Oracle licensing
• Pay for what you use
• Trade CAPEX for OPEX
• Scale down when appropriate
• Reserved instances
AMAZON RELATIONAL DATABASE SERVICE

7. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
• Easy to administer
• Scalable and fast
• Available and durable
• Secure
• Inexpensive
• Oracle licensing
• License included (LI)
• License included in instance price
• 11.2.0.4 SE1
• 12.1.0.2 SE2
• Bring your own license (BYOL)
• Use existing licenses/agreements
• Manage your own licenses and
support
• 11.2.0.4 EE, SE, SE1
• 12.1.0.2 EE, SE2
AMAZON RELATIONAL DATABASE SERVICE

8. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
• On-Premises • EC2 • RDS
AMAZON RELATIONAL DATABASE SERVICE
App optimization
Scaling
High availability
Database backups
DB s/w patching
DB s/w install
OS patching
OS installation
Server maintenance
Hardware lifecycle
Power/HVAC/Network
App optimization
Scaling
High availability
Database backups
DB s/w patching
DB s/w install
OS patching
OS installation
Server maintenance
Hardware lifecycle
Power/HVAC/Network
App optimization
Scaling
High availability
Database backups
DB s/w patching
DB s/w install
OS patching
OS installation
Server maintenance
Hardware lifecycle
Power/HVAC/Network
Youmanage
AWSmanages

9. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
RECENT NEW FEATURES
• Deprecation of 11.2.0.2, 11.2.0.3, 12.1.0.1
• Huge pages
• Snapshot upgrade
• R4 instance class
• Start/stop (all engines)
• Flexible Reserved Instances (all engines)
• Storage—up to 16 TB, faster scaling (all engines)

10. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
RECENT NEW/UPDATED OPTIONS
• Spatial (requires EE + Spatial and Graph Option license)
• Locator
• Multimedia
• Oracle Application Express—now supports 5.0.4, 5.1.2 (4.1.1, 4.2.6)
• Oracle SQLTXPLAIN (SQLT)
• Oracle Enterprise Manager Agent—now supports OMS 13cR1, 13cR2

11. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
SCALING RDS
Compute Storage
• Change CPU/Memory/Networking via
instance class
• Scale up or down as needed
• Brief outage
• Consider new instance classes
• Change
• Size (increase only)
• Type
• IOPS
• Online (with some performance impact)

12. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
SCALING RDS
Year 1 Year 2 Year 3 Year 4 Year 5
On-Premises Actual Workload RDS Oracle

13. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
HUGE PAGES
• Improved memory and CPU utilization
• Enable via RDS Parameter Group
1. Disable Automatic Memory Management
2. Enable Automatic Shared Memory Management
3. Set use_large_pages to “ONLY”
• RDS automation takes care of kernel parameters
• Will be enabled by default on future instance classes (>100 GiB)
• Improved memory utilization
• Improved CPU utilization

14. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
ADMINISTERING RDS ORACLE
On-Premises Amazon RDS
ALTER SYSTEM…; RDS Parameter Groups
Install features RDS Option Groups
ALTER DATABASE…;
GRANT…;
exec rdsadmin.rdsadmin_util…;
grant…;
Backups/RMAN RDS Snapshots
OEM, tools OEM, tools

15. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
AWS GLOBAL INFRASTRUCTURE

16. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
REGIONS AND AVAILABILITY ZONES
Availability
Zone B
Region 1
Availability
Zone C
Availability
Zone A
Availability
Zone B
Region 2
Availability
Zone C
Availability
Zone A
Internet

17. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
RDS SINGLE-AZ
Availability Zone A
RDS primary
Availability Zone B Availability Zone C
Application Application Application

18. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
RDS MULTI-AZ
Availability Zone A
RDS primary
Availability Zone B
RDSsecondary
Availability Zone C
Application Application Application
DNS
CNAME

19. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
RDS MULTI-AZ FAILOVER
Availability Zone A
RDS primary
Availability Zone B
RDSsecondary
Availability Zone C
Application Application Application
DNS
CNAME

20. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
RDS MULTI-AZ FAILOVER
Availability Zone A
RDS secondary
Availability Zone B
RDSprimary
Availability Zone C
Application Application Application
DNS
CNAME

21. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
RDS MULTI-AZ FAILOVER
DNS
CNAME
Availability Zone A Availability Zone B
RDSPrimary
Availability Zone C
Application Application Application

22. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
MULTI-AZ FAILOVER
UP Identify failure Crash recovery UP
DNS propagation
Typical failover time 1–2 minutest0 tN
BAM!

23. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
ENCRYPTION AT REST
Oracle Transparent Data
Encryption (TDE)
Oracle TDE with Hardware
Security Module
(TDE_HSM)
RDS Storage Encryption
EE + ASO EE + ASO All editions/engines
• RDS manages wallet and
keys
• RDS manages wallet
• Customer manages HSM
device
• EBS volume encryption
• Completely transparent
to host/database
• Customer manages keys
with Amazon KMS

24. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
ENCRYPTION IN TRANSIT
SSL Option Native Network Encryption (NNE)
All Oracle editions (no longer requires ASO as of 11.2)
• RDS manages wallets, certificates
• Customer imports RDS root certificates
into client wallets
• Separate TCPS listener port
• RDS manages sqlnet.ora
• Choose algorithms and level
(requested/required/allowed)

25. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
DATABASE SECURITY
RDS Manages Customer Manages
• Physical infrastructure controls
• Host access
• Operating System version/patches
• HOW database patches are applied
• Database users and privileges
• Access to data (Virtual Private
Database, Oracle Label Security)
• Database Audit
• Network controls (VPC Security
Groups, Network ACL)
• WHEN database patches are
applied

26. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
NETWORK SECURITY

27. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
AUDITING
AWS API Auditing (AWS CloudTrail) Database Auditing (AUDIT_TRAIL)
• Audit user API calls (e.g. Create-,
Modify-, DeleteDBInstance)
• Integrates with AWS CloudWatch Logs
and Events
• Stored in Amazon S3
• Audit in-database operations
(AUDIT/NOAUDIT)
• Retention managed by customer
• Stored on RDS instance (DB, OS, XML)
• DBMS_AUDIT_MGMT
• Location
• Retention

28. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
• Assurance programs for finance,
health care, government, and more
• Shared responsibility model
• AWS à Security of the cloud
• Customer à Security in the cloud
• https://aws.amazon.com/compliance/
COMPLIANCE

29. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
AMAZON RDS RECAP
• Simplify infrastructure management
• Allow DBAs to focus on high-value tasks
• Automation and standardization let you
• Iterate fast and deploy quickly
• Build highly-available, reliable applications
• Run securely

30. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
RESOURCES/WHITEPAPERS
• Amazon RDS
https://aws.amazon.com/rds
• Amazon RDS User Guide
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide
• AWS Free Tier
https://aws.amazon.com/free
• Oracle whitepapers and best practices
https://aws.amazon.com/oracle/resources

31. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
Pop-up Loft
aws.amazon.com/activate
Everything and Anything Startups
Need to Get Started on AWS