THE FUTURE IS NOW

Amazon Web ServicesServices overview and global infrastructure by Jan Gurda (SPID)

Agenda

1. Very quick introduction to AWS■ Demo of AWS console■ Most important services – subjective list■ On-Premises infrastructure mapped to AWS■ Shared responsibility model

2. AWS global infrastructure■ Regions■ Availability Zones■ Single-AZ vs. Multi-AZ deployment■ Edge Locations

3

■ Who is this presentation for?■ Prerequisites

■ You know what AWS is in general

4

Quick introduction to AWS

■ My subjective list■ Chosen by potential gain it may provide in our project

5

Most commonly used services

■ EC2

■ EC2 Container Service

■ Lambda

6

Compute

■ S3

■ Glacier

■ Cloud Front

■ EBS

7

Storage and Content Delivery

■ RDS

■ DynamoDB

■ ElastiCache

■ Redshift

8

Databases

■ VPC

■ Route53

■ Elastic Load Balancer

9

Networking

■ IAM

10

Security and Identity

■ Simple Queue Service (SQS)

■ Simple Notification Service (SNS)

■ Simple Email Service (SES)

■ Cloud Search

11

Application Services

■ CloudWatch

■ CloudFormation

■ CoudTrail

12

Management Tools

■ Hardware (servers, switches, routers, load balancers …)

■ Power supply (redundant)

■ Internet connection (redundant)

■ Disaster recovery and backups

■ Security

■ Many others …

13

On-Premises infrastructure

14

How OPI maps to AWS

Technology Stack On-Premises Solution AWS Solution

Computation Physical servers, virtualization EC2 instances, Lambda, EC2 Container Service

Storage

• Physical disks (SSD, SCSI, SATA)

• Network-attached storage• Storage area network

EBS, S3, Instance Store

Network Physical routers, VPN, VLAN VPC, Direct Connect, VPN

Content delivery CDN Solutions CloudFront

Database Various RDMS (Oracle, Postgres, MySQL, MongoDB) RDS, DynamoDB

15

How OPI maps to AWSTechnology Stack On-Premises Solution AWS Solution

Load balancing Hardware LB (F5, Cisco etc.)Software LB

ELB, Software LB (running on EC2)

DNS DNS Providers Route53

Scaling Hardware and software clustering, Apache ZooKeeper

Auto Scaling Group, custom software clustering

Analytics Hadoop, Cassandra Elastic MapReduce

Messaging Tibco, RabbitMQ, etc. SQS, SNS

Caching Memcached, Redis ElastiCache

Archiving Tape storage Glacier

16

AWS Shared Responsibility Model

■ Security “in” the cloud■ OS Patching■ Audit Logging■ Anti-malware■ Backups■ Network Access■ Adjust security rules■ Secure network access■ Secure deployed applications

17

■Security “of” the cloud■ 24x7 guards■ Two-factor authentication■ Disk destruction■ Network monitoring■ Intrusion detection■ Limited access■ Secure API endpoints

AWS Shared Responsibility Model

■ What is Region?

■ How to decide which region to choose?■ Latency■ Legal compliance■ Cost■ Features

■ https://aws.amazon.com/about-aws/global-infrastructure/regional-product-services/

■ Currently 11 regions■ AWS GovCloud (US) Region

18

AWS Global Infrastructure - Regions

■ Consists of multiple Availability Zones (AZs)

■ Each AZ is physically isolated from each other

■ AZs are connected through low-latency private links■ Around 25Tbps bandwidth and a latency of 2ms to 1ms

■ AZ is designed as an independent failure zone

19

AWS Global Infrastructure - Regions

20

AWS Global Infrastructure - Regions

21

AWS Global Infrastructure

■ AZ Services, Regional Services and Global Services

■Regional Services – examples■ Auto Scaling Group■ Elastic Load Balancer■ S3■ DynamoDB■ CloudSearch■ SQS

■Global services – examples■ IAM■ Route 53■ Cloud Front

■AZ Services – examples■ EC2■ RDS■ ElastiCache

■ EC2 (or RDS) instances deployed in:

22

Multi AZ vs. Single AZ

Single AZ Multi AZ

Not highly available HA and DR

Lower price (RDS) Higher price

Limited scalability Better scalability

23

Multi AZ vs. Single AZ architecture

■ Suitable for large enterprises

■ Allows maintain extremely high SLAs

■ Costs much more

■ Technically complex to setup correctly

24

Multi-region architecture

■ Get closer to your customers

■ Few dozens of edge locations worldwide

■ Services that use edge locations■ CloudFront■ Route 53

25

Edge locations

■ Q&As

26

Thank you