VMware Cloud on AWS is a jointly engineered cloud service that delivers the VMware Software Defined Data Center (SDDC) as a service running on the AWS global infrastructure. It allows customers to seamlessly run applications across both on-premises VMware environments and AWS, while gaining access to native AWS services. The service is operated and supported by both VMware and AWS, and provides customers consistency with VMware tools while leveraging the scale and breadth of AWS services.

1. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Jason Joel
Director of Product Management, VMware
Paul Bockelman
Sr. Manager, Specialist Solutions Architect (WWPS), Amazon Web Services
198239
Transform Government IT with VMware
Cloud on AWS, an Integrated Hybrid
Solution

2. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Two powerful
forces coming together

3. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Leading compute, storage and network
virtualization capabilities
Support for a broad range of workloads
De-facto standard for the enterprise DC
Flexible consumption economics
Broadest set of cloud services
Global scale and reach
Jointly engineered solution delivers the best of VMware and AWS for customers
A truly compelling and differentiated solution

4. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VMware Cloud on AWS - benefits
VMware SDDC technologies you know and trust delivered as a
service on the world's most popular public cloud
Rich VMware SDDC
delivered as a cloud
service on AWS
AWS
Consistency and
familiarity of VMware
technologies
Direct access to the
power of native
AWS services
Existing and new
apps with
Containers
and VMs
Easy workload
portability and
hybrid capabilities

5. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VMware Cloud on AWS - service overview
AWS Global Infrastructure
VMware Cloud on AWS
Powered by VMware Cloud Foundation
AWS Global Infrastructure
Customer Data
Center
vSphere
incl. VIC
vSAN NSX
Operational
Management
Native AWS
Services
vRealize Suite, ISV ecosystem
vCentervCenter
• VMware Software Defined Datacenter on
dedicated Amazon EC2 bare metal instances
• Powered by VMware Cloud Foundation
• Full operational consistency with on-premises
vSphere deployments
• Seamless workload portability and hybrid
operations
• On-demand capacity & flexible consumption
with hourly and reserved instances
• Global AWS footprint, reach, availability
• Direct access to native AWS services
Service Highlights
AWS CLI

6. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VMware Cloud on AWS is a cloud service
Jointly engineered, one-stop shop for customers
Service is delivered, operated, sold and supported by VMware & its partners
AWS Global Infrastructure
VMware Cloud on AWS
Powered by VMware Cloud Foundation
vSphere vSAN NSX
Single support owner

7. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Global reach, delivered over time
US West
Oregon (3)
N. California (3)
GovCloud-West
US-West (3)
US East
N. Virginia (6)
Ohio (3)
Canada
Central (2)
South America
São Paulo (3)
Europe
Ireland (3)
Paris (3)
Asia Pacific
Singapore (2)
Tokyo (4)
Osaka-Local (1)
Seoul (2)
Mumbai (2)
Sydney (3)*
New region (coming soon)
Bahrain, Hong Kong, Sweden,
AWS GovCloud (US-East)
#
Region and number of
availability zones
China
Beijing (2)
Ningxia (2)
London (3)
Frankfurt (3)
Announced
Announced

8. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Use-cases for a broad range of cloud strategies
Customer can decide strategically across on-premises data center and cloud
On-Demand Capacity
DR and backup
Maintain
Expand
On-demand capacity
Cloud Migration
Application migration
Data center consolidation
Consolidate
Or Close
Migrate
Next-Generation Apps
Application modernization
Test and Development

9. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VMware Cloud on AWS Milestones
Aug 2017
VMware and AWS Announce
Initial Availability
• Oregon Region
• 4 Host SDDC
• Hybrid Linked Mode
Nov 2017
Mission-Critical, Production
Workloads at Scale
• Virginia Region
• 32 Host SDDC
• 1 & 3 Year Host Subscriptions
• AWS Direct Connect
• VMware Site Recovery
• VMware HCX
Mar 2018
EMEA expansion
• London Region
• MSP Program
• Credit Card Payment
• vSAN Dedup & Compress
Jun 2018
Enterprise Compliance
• Frankfurt Region
• Multi-AZ SDDC
• Multi-Cluster SDDC
• Single Host SDDC
• Elastic DRS
• VM-Host Affinity
• VMware Horizon 7.5

10. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VMware Cloud on AWS Compliance Certifications
SOC 1, SOC 2, SOC 3
CSA STAR Self-Assessment
ISO 27001, 27017, 20718
GDPR compliance
Work in Process
FedRAMP+ (High baseline)
DoD, Cloud Computing Security
Requirements Guide (IL4/5)
HIPAA BAA
More Coming
Soon!

11. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VMware Cloud on AWS GovCloud
• VMware plans to operate a dedicated instance of VMware Cloud on AWS on AWS
GovCloud
• VMware is standing up a US Persons on US soil Service Operations team and Security
Operations Center and are expanding the existing VMware Federal Global Support and
Services team to support the service.
• Working to obtain a FedRAMP+ High Certification
• Working to meet the requirements for a Provisional Authority for by the Defense Information
Systems Agency (DISA) for Impact Level (IL) 4/5 workloads, as defined in the Department
of Defense (DoD) Cloud Computing (CC) Security Requirements Guide (SRG)
• Be compliant with the International Traffic in Arms Regulations (ITAR)

12. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VMware Cloud on AWS GovCloud Timeline
Timeframe Objective
June 2018 Setup an a new instance of VMware Cloud on AWS in AWS GovCloud
2H 2018 Make the VMware Cloud on AWS GovCloud instance generally available
2H 2018 Targeting to achieve FedRAMP High Ready status
2H 2018 Targeting to be “In-Process” for FedRAMP High ATO with a sponsoring agency
TBD Complete ITAR training and ensure compliance
TBD File paperwork to obtain a Provisional Authority for by the Defense Information
Systems Agency (DISA) for Impact Level (IL) 4/5 workloads
TBD Submit a version of the FedRAMP System Security Package for Authority to
Operate VMware Cloud on AWS at a Moderate level on AWS US East/West
TBD Leverage FedRAMP efforts to comply with CJIS requirements - TBD

13. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VMware Cloud on AWS GovCloud feature set
• VMware Cloud on AWS GovCloud will
offer the same fundamental features
as the commercial offering.
• It is deployed from the same codebase
as the commercial service so that
updates can be done frequently.
• Running SDDCs today with hardware
in multiple GovCloud availability
zones.
• Minor differences around on-boarding
process, authentication, and a few
minor features like in-product support
and tutorials that currently use third-
party software.

14. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VMware Cloud on AWS
technical details

15. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VMware Cloud on AWS – characteristics
On-Demand
• VMware Software Defined Datacenter
Delivered as a Cloud Service
Latest Software
• vCSA, ESXi, NSX, vSAN, Managed by
VMware
Dynamic Capacity
• DRS/HA Compute Cluster (Intel x86)
• vSAN Storage Cluster (NVMe Flash)
• NSX Network Virtualization (ENA)
• Multi-AZ Stretch Clusters
ESXi
NSX
vSphere
vSAN
Software Defined Data Center

16. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VMware Cloud on AWS – technical components
ESXi
NSX
vSphere
vSAN
Software Defined Data Center
Compute
• Bare Metal
• I3.16XL Equivalent
• 36 Cores/72 vCPUs
• 512GiB Memory
• 15TiB* NVMe All-Flash Storage
• 25Gb ENA
Hypervisor
• ESXi
• 4 to 32 Host Cluster
• Maintained by VMware
• No SSH/Root
• No VIBs/Plugins
Storage
• vSAN
• Aggregate Instance Storage
• All Flash (Capacity/Cache)
• No EBS/EFS as shared storage for hosts, but
VM’s can mount EFS
• VM Storage Policies
Network and Security
• NSX
• Logical Networks
• North/South Firewalling
• Compute/Management Gateways
• IPSec Termination
• NAT
vSphere
• VMware Managed
• Delegated Permissions
• Hybrid Linked Mode

17. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VMware Cloud on AWS - account structure
VMware Cloud
SDDC account
• Is owned, operated, and paid
• Private to VMware Cloud SDDC
• Full access to the
• A new AWS account to run SDDC resources
• Is owned, operated, and paid directly by VMware
• Is single tenant for all SDDC resources

18. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Accessing VMware Cloud on AWS
• Hybrid Linked-Mode
• Logical network configuration
• Virtual machine administration
• VM storage policies
• Add and remove ESXi hosts
• Console user and role management
• Firewall configuration
• EIP and NAT configuration
• VPN connectivityhttps://vmc.vmware.com
vSphere H5
Web Client

19. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VMware Cloud on AWS
design pattern and sample architecture

20. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VMware
Cloud ENI
Customer Data
Center
IGW
DMZ-Out(Public)
VPC S3
Endpoint
Amazon
CloudWatch
AWS
CloudTrail
Amazon
S3
ESXi ESXi ESXi ESXi
Resource Pool
DMZ-In
(Private)
App(Private)
DMZ-Out
(Public)
IGW
Compute
Gateway
Compute
Gateway
Management
Gateway
OS
RWP
OS
DB2
OS
APP2
OS
DB1
OS
APP1
VMware Cloud on AWS - base topology
AWS Region Services
Amazon EC2
AZ A AZ B AZ C
VMware Cloud VPC AWS Customer VPC
Reverse Web Proxy

21. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VMware Cloud on AWS – CAP/TIC topology
Customer Data Center
VMware Cloud VPC
AWS Cloud
AWS Customer VPC
Co-Location
TIC/CAP
VGW
VGW
Direct
Connect
Customer
IAP
ESXi
Amazon
S3

22. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VMware Cloud on AWS – sample hybrid architecture
VMware Cloud VPC
ESXi
Amazon EC2
ESXi ESXi ESXi
Resource Pool
RDS
Aurora
(shared)
AWS Customer VPC
AZ A AZ B AZ C
OS
DB1
SSL Encrypted
Traffic
OS
APP2
OS
APP1
OS
RWP
DMZ-Out(Public)
DMZ-In
(Private)
App(Private)
DMZ-Out
(Public) ACM
ELB
NFS S3-backed
Cluster File System
Reverse Web Proxy &
Application Load-
Balancer
OS
APP2
OS
APP2
OS
VMware
Cloud ENI
VGWVGW
Compute
Gateway
Compute
Gateway
Management
Gateway
VPC S3
Endpoint
Amazon
CloudWatch
AWS
CloudTrail
Amazon
S3
AWS Region Services
OS
DB2
Reverse Web Proxy
Customer Data
Center
Co-Location
VIF(s)
TIC/CAP

23. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Voice of the customer…
Mark Silis
Associate Vice President, Information Systems and Technology, MIT

24. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VMware Cloud on AWS - more information
For product information, pricing and more…
https://cloud.vmware.com/vmc-aws
To keep up to date on the VMware Cloud on AWS Roadmap…
https://cloud.vmware.com/vmc-aws/roadmap
If you are interested in more information about VMware Cloud on AWS GovCloud, please
reach out to AWS, VMware, and/or Partner Account Team, and visit:
https://cloud.vmware.com/govcloud/stay-informed
Follow us on AWS too…
https://aws.amazon.com/vmware/

25. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Please complete the session survey in
the summit mobile app.

26. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Thank You!