Sander Knape| 22-03-2018
$ whoami
Sander Knape
● Technical Team Lead Cloud @ Coolblue (~2.5 years)
● Student @ Utrecht University
○ Bachelor Cognitive Artificial Intelligence
○ Master Business Informatics
● Backend + Frontend development
● Moved more towards (dev)ops @ Coolblue
Expectation Management
Agenda
● Introduction
● Coolblue to Amazon Web Services (AWS)
● Introduction to the Well-Architected Framework
● Go through the 5 pillars:
○ Operational Excellence
○ Security
○ Reliability
○ Performance Efficiency
○ Cost Optimization
>300 online shops & 9 physical stores
Delivery
Revenue in the years
So why the cloud?
Towards the future
● Scalability
● Automation <3
● Be ready for the future
Team Deployment
Finished in 6 months
AWS Well-Architected Framework
Whitepaper
https://d1.awsstatic.com/whitepapers/architecture/AWS_Well-Architected_Framework.pdf
“This document describes the AWS Well-Architected Framework, which enables you to
review and improve your cloud-based architectures and better understand the
business impact of your design decisions. We address general design principles as
well as specific best practices and guidance in five conceptual areas that we define as
the pillars of the Well-Architected Framework.”
- Abstract -
Operational
Excellence
Security Reliability
Performance
Efficiency
Cost
Optimization
Well-architected Framework
Design Principles Best Practices Experience
Platform agnostic
1 - Operational Excellence
Operational excellence
“The operational excellence pillar focuses on running and monitoring systems to deliver
business value, and continually improving processes and procedures. Key topics include
managing and automating changes, responding to events, and defining standards to
successfully manage daily operations.” - AWS Well-Architected Framework
https://d1.awsstatic.com/whitepapers/architecture/AWS-Operational-Excellence-Pillar.pdf
Infrastructure as Code
Coolblue in code
Zero insight
Zero insight
Transparency
Auditability
Reusability
Control for quality
Check, check, double check
Automation
Knowledge is power
Knowledge & Mindset
● AWS != On-premise
● Get knowledge about AWS:
○ Documentation
○ Whitepapers
○ Certification
Architecturing = Lego’ing
Don’t do it alone
● Based on AWS Essentials training
● Updated with the “Coolblue” implementation
● Best practices
● Labs
Share knowledge
2 - Security
Security
“The security pillar focuses on protecting information & systems. Key topics include
confidentiality and integrity of data, identifying and managing who can do what with
privilege management, protecting systems, and establishing controls to detect security
events.” - AWS Well-Architected Framework
https://d1.awsstatic.com/whitepapers/architecture/AWS-Security-Pillar.pdf
Access Denied
Least-privileged authorization
Every entity should have access only exactly to those resources to which it needs access
No more, no less
Identity foundation
AWS accounts
● Testing
● Acceptance
● Production
View database contents
Private vs. Public subnets
Public subnets
Private subnets
Automate best practices
Base boxes
Linting CloudFormation
Still though - scan your environment
3 - Reliability
Reliability
“The reliability pillar focuses on the ability to prevent, and quickly recover from failures to
meet business and customer demand. Key topics include foundational elements around
setup, cross project requirements, recovery planning, and how we handle change.” - AWS
Well-Architected Framework
https://d1.awsstatic.com/whitepapers/architecture/AWS-Reliability-Pillar.pdf
All about those 9’s
All about those 9’s
1 region, 3 AZ’s
● All applications:
○ 1 region
○ 3 Availability Zones
● 99.99% uptime
● Application Design for High Availability
Horizontal multi-AZ scaling
50% 50% 50%
Auto scaling
… Auto healing
Test before you go!
Test before you go!
Blue/Green deployments
Canary releases
Application Design for High Availability
Backups
“A backup isn’t a backup until you have tried to restore it” - Someone
GitLab - DevOops
GitLab - DevOops
Double win: anonymizing backups
4 - Performance efficiency
Performance efficiency
“The performance efficiency pillar focuses on using IT and computing resources efficiently.
Key topics include selecting the right resource types and sizes based on workload
requirements, monitoring performance, and making informed decisions to maintain
efficiency as business needs evolve.” - AWS Well-Architected Framework
https://d1.awsstatic.com/whitepapers/architecture/AWS-Performance-Efficiency-Pillar.pdf
Candy shop
Managed Services over build-your-own
Example list
Build-your-own Managed Service
RabbitMQ SNS/SQS
RavenDB (NoSQL) DynamoDB
MySQL RDS Aurora
Memcached / Redis ElastiCache
HAProxy Application Load Balancer
ELK Managed Splunk
RPM (Application Deployment) CodeDeploy
This is (mostly) in the past now
Oops... do some load tests
Instance Types
● General Purpose
● Compute Optimized
● Memory Optimized
● Accelerated Computing
● Storage Optimized
Automatic load testing
Experiment more often
Development.
Did anyone say CloudFormation?
From Bare Metal to Functions
5 - Cost optimization
Cost optimization
“Cost Optimization focuses on avoiding un-needed costs. Key topics include understanding
and controlling where money is being spent, selecting the most appropriate and right
number of resource types, analyzing spend over time, and scaling to meet business needs
without overspending.” - AWS Well-Architected Framework
https://d1.awsstatic.com/whitepapers/architecture/AWS-Cost-Optimization-Pillar.pdf
But: Tagging everything
TeamCity on Spot
Insights++
Dashboards and reports
Cost responsibility
Responsible for costs
● Costs made transparent with CloudHealth
● Billing reports for the organisation (e.g. PO, Finance) per “team”:
○ Applications
○ Shared resources
○ Development account
● Finance in the driver’s seat in Cost Optimization
So why the Cloud?
Well-archited made much more easy!
● Granular IAM permissions
● Multi-AZ
● Blue/Green and Canary deployments
● Autoscaling and auto healing
● Tags everywhere
● Pay for what we use
● ...
Sander Knape | s.knape@coolblue.nl | https://www.coolblue.nl

Well Architected Framework Presentation @ TU Delft