Oracle RDBMS is the most widely used of the commercial relational databases. We’ll look at how to run Oracle on the AWS Cloud, with examples of organizations using it.

1. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
Oracle on AWS
Tarik Makota
tmak@amazon.com
Partner Solutions Architect

2. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
• Easy to Administer
• Scalable and fast
• Available and durable
• Secure
• Inexpensive
• Oracle licensing
• Managed infrastructure
• Available in minutes
• Manage parameters and options
across instances
• Web console, CLI, SDK, AWS
CloudFormation templates
AMAZON RELATIONAL DATABASE SERVICE

3. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
• Easy to administer
• Scalable and fast
• Available and durable
• Secure
• Inexpensive
• Oracle licensing
AMAZON RELATIONAL DATABASE SERVICE
Storage
SSD, Magnetic
Compute
CPU, RAM, network

4. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
• Easy to administer
• Scalable and fast
• Available and durable
• Secure
• Inexpensive
• Oracle licensing
• Automatic host replacement
• Managed high availability
• Managed backups
• Durable storage—Amazon EBS
and Amazon S3
AMAZON RELATIONAL DATABASE SERVICE

5. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
• Easy to administer
• Scalable and fast
• Available and durable
• Secure
• Inexpensive
• Oracle licensing
• VPC by default
• VPN/Direct Connect to
on-premises
• Encryption at rest—KMS, TDE,
HSM
• Encryption in transit
• Strong account controls
AMAZON RELATIONAL DATABASE SERVICE

6. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
• Easy to administer
• Scalable and fast
• Available and durable
• Secure
• Inexpensive
• Oracle licensing
• Pay for what you use
• Trade CAPEX for OPEX
• Scale down when appropriate
• Reserved instances
AMAZON RELATIONAL DATABASE SERVICE

7. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
• Easy to administer
• Scalable and fast
• Available and durable
• Secure
• Inexpensive
• Oracle licensing
• License included (LI)
• License included in instance price
• 11.2.0.4 SE1
• 12.1.0.2 SE2
• Bring your own license (BYOL)
• Use existing licenses/agreements
• Manage your own licenses and
support
• 11.2.0.4 EE, SE, SE1
• 12.1.0.2 EE, SE2
AMAZON RELATIONAL DATABASE SERVICE

8. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
• On-Premises • EC2 • RDS
AMAZON RELATIONAL DATABASE SERVICE
App optimization
Scaling
High availability
Database backups
DB s/w patching
DB s/w install
OS patching
OS installation
Server maintenance
Hardware lifecycle
Power/HVAC/Network
App optimization
Scaling
High availability
Database backups
DB s/w patching
DB s/w install
OS patching
OS installation
Server maintenance
Hardware lifecycle
Power/HVAC/Network
App optimization
Scaling
High availability
Database backups
DB s/w patching
DB s/w install
OS patching
OS installation
Server maintenance
Hardware lifecycle
Power/HVAC/Network
Youmanage
AWSmanages

9. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
RECENT NEW FEATURES
• Deprecation of 11.2.0.2, 11.2.0.3, 12.1.0.1
• Huge pages
• Snapshot upgrade
• R4 instance class
• Start/stop (all engines)
• Flexible Reserved Instances (all engines)
• Storage—up to 16 TB, faster scaling (all engines)

10. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
RECENT NEW/UPDATED OPTIONS
• Spatial (requires EE + Spatial and Graph Option license)
• Locator
• Multimedia
• Oracle Application Express—now supports 5.0.4, 5.1.2 (4.1.1, 4.2.6)
• Oracle SQLTXPLAIN (SQLT)
• Oracle Enterprise Manager Agent—now supports OMS 13cR1, 13cR2

11. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
SCALING RDS
Compute Storage
• Change CPU/Memory/Networking via
instance class
• Scale up or down as needed
• Brief outage
• Consider new instance classes
• Change
• Size (increase only)
• Type
• IOPS
• Online (with some performance impact)

12. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
SCALING RDS
Year 1 Year 2 Year 3 Year 4 Year 5
On-Premises Actual Workload RDS Oracle

13. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
HUGE PAGES
• Improved memory and CPU utilization
• Enable via RDS Parameter Group
1. Disable Automatic Memory Management
2. Enable Automatic Shared Memory Management
3. Set use_large_pages to “ONLY”
• RDS automation takes care of kernel parameters
• Will be enabled by default on future instance classes (>100 GiB)
• Improved memory utilization
• Improved CPU utilization

14. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
ADMINISTERING RDS ORACLE
On-Premises Amazon RDS
ALTER SYSTEM…; RDS Parameter Groups
Install features RDS Option Groups
ALTER DATABASE…;
GRANT…;
exec rdsadmin.rdsadmin_util…;
grant…;
Backups/RMAN RDS Snapshots
OEM, tools OEM, tools

15. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
AWS GLOBAL INFRASTRUCTURE

16. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
REGIONS AND AVAILABILITY ZONES
Availability
Zone B
Region 1
Availability
Zone C
Availability
Zone A
Availability
Zone B
Region 2
Availability
Zone C
Availability
Zone A
Internet

17. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
RDS SINGLE-AZ
Availability Zone A
RDS primary
Availability Zone B Availability Zone C
Application Application Application

18. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
RDS MULTI-AZ
Availability Zone A
RDS primary
Availability Zone B
RDSsecondary
Availability Zone C
Application Application Application
DNS
CNAME

19. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
RDS MULTI-AZ FAILOVER
Availability Zone A
RDS primary
Availability Zone B
RDSsecondary
Availability Zone C
Application Application Application
DNS
CNAME

20. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
RDS MULTI-AZ FAILOVER
Availability Zone A
RDS secondary
Availability Zone B
RDSprimary
Availability Zone C
Application Application Application
DNS
CNAME

21. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
RDS MULTI-AZ FAILOVER
DNS
CNAME
Availability Zone A Availability Zone B
RDSPrimary
Availability Zone C
Application Application Application

22. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
MULTI-AZ FAILOVER
UP Identify failure Crash recovery UP
DNS propagation
Typical failover time 1–2 minutest0 tN

23. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
ENCRYPTION AT REST
Oracle Transparent Data
Encryption (TDE)
Oracle TDE with Hardware
Security Module
(TDE_HSM)
RDS Storage Encryption
EE + ASO EE + ASO All editions/engines
• RDS manages wallet and
keys
• RDS manages wallet
• Customer manages HSM
device
• EBS volume encryption
• Completely transparent
to host/database
• Customer manages keys
with Amazon KMS

24. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
ENCRYPTION IN TRANSIT
SSL Option Native Network Encryption (NNE)
All Oracle editions (no longer requires ASO as of 11.2)
• RDS manages wallets, certificates
• Customer imports RDS root certificates
into client wallets
• Separate TCPS listener port
• RDS manages sqlnet.ora
• Choose algorithms and level
(requested/required/allowed)

25. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
DATABASE SECURITY
RDS Manages Customer Manages
• Physical infrastructure controls
• Host access
• Operating System version/patches
• HOW database patches are applied
• Database users and privileges
• Access to data (Virtual Private
Database, Oracle Label Security)
• Database Audit
• Network controls (VPC Security
Groups, Network ACL)
• WHEN database patches are
applied

26. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
NETWORK SECURITY

27. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
AUDITING
AWS API Auditing (AWS CloudTrail) Database Auditing (AUDIT_TRAIL)
• Audit user API calls (e.g. Create-,
Modify-, DeleteDBInstance)
• Integrates with AWS CloudWatch Logs
and Events
• Stored in Amazon S3
• Audit in-database operations
(AUDIT/NOAUDIT)
• Retention managed by customer
• Stored on RDS instance (DB, OS, XML)
• DBMS_AUDIT_MGMT
• Location
• Retention

28. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
• Assurance programs for finance,
health care, government, and more
• Shared responsibility model
• AWS  Security of the cloud
• Customer  Security in the cloud
• https://aws.amazon.com/compliance/
COMPLIANCE

29. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
AMAZON RDS RECAP
• Simplify infrastructure management
• Allow DBAs to focus on high-value tasks
• Automation and standardization let you
• Iterate fast and deploy quickly
• Build highly-available, reliable applications
• Run securely

30. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
RESOURCES/WHITEPAPERS
• Amazon RDS
https://aws.amazon.com/rds
• Amazon RDS User Guide
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide
• AWS Free Tier
https://aws.amazon.com/free
• Oracle whitepapers and best practices
https://aws.amazon.com/oracle/resources

31. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved
aws.amazon.com/activate
Everything and Anything Startups
Need to Get Started on AWS