AWS RoadShow Dublin - Intro to AWS
2 likes774 views
The AWS Roadshow in Dublin covered key aspects of Amazon Web Services, focusing on cloud computing infrastructure, its vast global network, and diverse service offerings aimed at businesses and developers. Attendees gained insights on AWS's ability to handle web-scale solutions, utilizing services like EC2 for compute capacity, S3 for storage, and RDS for database management. The presentation emphasized the importance of security, compliance, and the shared responsibility model in cloud service deployment.
AWS RoadShow Dublin - Intro to AWS
- 1. Welcome to AWS RoadShow Dublin @AWScloud @AWS_UKI
- 2. AWS RoadShow Dublin Ian Massingham - Technical Evangelist 11 June 2014
- 3. What will we cover this morning? 09:30 Registration 10:00 An Introduction to AWS 10:45 Skill Pages & AWS 11:00 Break 11:15 Tricks & Tips for Getting Started with AWS
- 4. What is AWS? Ian Massingham -‐ Technical Evangelist @IanMmmm
- 5. background
- 6. Deep experience in building and operating global web scale systems About Amazon Web Services ? …get into cloud computing? How did Amazon…
- 7. Consumer Business Tens of millions of active customer accounts 8 countries: US, UK, Germany, Japan, France, Canada, China, Italy Seller Business Sell on Amazon websites Use Amazon technology for your own retail website Leverage Amazon’s massive fulfillment center network IT Infrastructure Business Cloud computing infrastructure for hosting web-scale solutions Hundreds of thousands of registered customers in over 190 countries
- 8. AWS Mission Enable businesses and developers to use web services* to build scalable, sophisticated applications. *What people now call “the cloud”
- 11. Not excess capacity! Startups on AWS Find out more at : aws.amazon.com/solutions/case-studies
- 12. Powering the Most Popular Internet Businesses Find out more at : aws.amazon.com/solutions/case-studies Enterprises on AWS Find out more at : aws.amazon.com/solutions/case-studies
- 13. Each day AWS adds the equivalent server capacity to power Amazon when it was a global, $7B enterprise
- 14. Objects in S3 Trillions of Objects (000,000,000,000s) Servicing over 2 million requests per Second
- 16. On demand Pay as you go Uniform Available Utility computing
- 17. Utility computing On demand Pay as you go Available Uniform
- 19. Utility computing Compute Storage Security Scaling Database Networking Monitoring Messaging Workflow DNS Load Balancing Backup CDN On demand Pay as you go Uniform Available
- 20. On a global footprint Region US-WEST (N. California) EU-WEST (Ireland) ASIA PAC (Tokyo) ASIA PAC (Singapore) US-WEST (Oregon) SOUTH AMERICA (Sao Paulo) US-EAST (Virginia) GOV CLOUD ASIA PAC (Sydney)
- 21. At the end of a web service aws ec2 run-instances --image-id ami-a813fadf --count 3 --placement AvailabilityZone=eu-west-1a --instance-type m1.small aws ec2 run-instances --image-id ami-a813fadf --count 5 --placement AvailabilityZone=eu-west-1c --instance-type m1.medium
- 22. and a rich Management Console
- 23. elasticity
- 25. On and Off Fast Growth Variable peaks Predictable peaks Elastic capacity
- 26. Elastic capacity On and Off Fast Growth Predictable peaksVariable peaks WASTE CUSTOMER DISSATISFACTION
- 27. Elastic capacity Fast GrowthOn and Off Predictable peaksVariable peaks
- 29. …to thousands
- 30. and back…
- 32. Sunday Monday Tuesday Wednesday Thursday Friday Saturday Typical weekly traffic to Amazon.com
- 33. November traffic to Amazon.com November
- 34. November traffic to Amazon.com Provisioned capacity November
- 35. November traffic to Amazon.com 76% 24% Provisioned capacity November
- 36. November 10th 2010 Turned off last physical web server of Amazon.com
- 37. November 10th 2010 Turned off last physical web server of Amazon.com October 31st 2011 Turned off last web servers supporting European business
- 38. November traffic to Amazon.com November
- 39. Building a Top500 HPC Cluster on AWS
- 40. the toolbox
- 41. Compute Storage AWS Global Infrastructure Database App Services Deployment & Administration Networking Reference Model security
- 42. Compute Storage AWS Global Infrastructure Database App Services Deployment & AdministraKon Networking Global infrastructure Regions An independent collection of AWS resources in a defined geography A solid foundation for meeting location-dependent privacy and compliance requirements
- 43. Compute Storage AWS Global Infrastructure Database App Services Deployment & AdministraKon Networking Global infrastructure Availability Zones Designed as independent failure zones Physically separated within a typical metropolitan region
- 44. Compute Storage AWS Global Infrastructure Database App Services Deployment & AdministraKon Networking Global infrastructure Edge Locations To deliver content to end users with lower latency A global network of edge locations Supports global DNS infrastructure (Route53) and Cloud Front CDN Dallas(2) St.Louis Miami JacksonvilleLos Angeles (2) Palo Alto Seattle Ashburn(3) Newark New York (3) Dublin London(2) Amsterdam (2) Stockholm Frankfurt(2) Paris(2) Singapore(2) Hong Kong (2) Tokyo (2) Sao Paulo South Bend San Jose Osaka Milan Sydney Madrid Seoul Mumbai Chennai
- 45. Compute Storage AWS Global Infrastructure Database App Services Deployment & AdministraKon Networking Networking Direct Connect Dedicated connection to AWS VPN Connection Secure internet connection to AWS Virtual Private Cloud Private, isolated section of the AWS Cloud Route 53 Highly available and scalable Domain Name Service
- 46. Compute Storage AWS Global Infrastructure Database App Services Deployment & AdministraKon Networking Compute Vertical Scaling From $0.02/hr Elastic Compute Cloud (EC2) Basic unit of compute capacity Range of CPU, memory & local disk options 13 Instance types available, from micro to cluster compute Feature Details Flexible Run windows or linux distribuKons Scalable Wide range of instance types from micro to cluster compute Machine Images ConfiguraKons can be saved as machine images (AMIs) from which new instances can be created Full control Full root or administrator rights Secure Full firewall control via Security Groups Monitoring Publishes metrics to Cloud Watch Inexpensive On-‐demand, Reserved and Spot instance types VM Import/Export Import and export VM images to transfer configuraKons in and out of EC2
- 47. Compute Storage AWS Global Infrastructure Database App Services Deployment & AdministraKon Networking Compute Auto-scaling Automatic provisioning of compute resources based upon demand, configuration or schedule Trigger auto- scaling policy Feature Details Control Define minimum and maximum instance pool sizes and when scaling and cool down occurs Integrated to CloudWatch Use metrics gathered by CloudWatch to drive scaling Instance types Run auto scaling for on-‐demand instances and spot. CompaKble with VPC aws autoscaling create-auto-scaling-group --auto-scaling-group-name MyGroup --launch-configuration-name MyConfig --availability-zones eu-west-1a --min-size 4 --max-size 200
- 48. Compute Storage AWS Global Infrastructure Database App Services Deployment & AdministraKon Networking Compute Elastic Load Balancing Create highly scalable applications Distribute load across EC2 instances in multiple availability zones Feature Details Auto-‐scaling AutomaKcally scales to handle request volume Available Load balance across instances in mulKple availability zones Health checks AutomaKcally checks health of instances and takes them in or out of service Session sEckiness Route requests to the same instance Secure sockets layer Supports SSL offload from web and applicaKon servers with flexible cipher support Monitoring Publishes metrics to Cloud Watch
- 49. Compute Storage AWS Global Infrastructure Database App Services Deployment & AdministraKon Networking Storage S3 - Durable storage, any object 99.999999999% durability of objects Unlimited storage of objects of any type Up to 5TB size per object Feature Details Flexible object store Buckets act like drives, folder structures within Access control Granular control over object permissions Server-‐side encrypEon 256bit AES encrypKon of objects MulE-‐part uploads Improved throughput & control Object versioning Archive old objects and version new ones Object expiry AutomaKcally remove old objects Access logging Full audit log of bucket/object acKons Web content hosEng Serve content as web site with built in page handling NoEficaEons Receive noKficaKons on key events Import/Export Physical device import/export service
- 51. Compute Storage AWS Global Infrastructure Database App Services Deployment & AdministraKon Networking Storage Elastic Block Store High performance block storage device 1GB to 1TB in size Mount as drives to instances Feature Details High performance file system Mount EBS as drives and format as required Flexible size Volumes from 1GB to 1TB in size Secure Private to your instances Available Replicated within an Availability Zone Backups Volumes can be snapsho`ed for point in Kme restore Monitoring Detailed metrics captured via Cloud Watch
- 52. Compute Storage AWS Global Infrastructure Database App Services Deployment & AdministraKon Networking Database Relational Database Service Database-as-a-Service No need to install or manage database instances Scalable and fault tolerant configurations Feature Details PlaMorm support Create MySQL, PostgreSQL, Microsob SQL Server and Oracle RDBMS Preconfigured Get started instantly with sensible default secngs Automated patching Keep your database plaeorm up to date automaKcally Backups AutomaKc backups and point in Kme recovery and full DB backups Backups Volumes can be snapsho`ed for point in Kme restore Failover Automated failover to slave hosts in event of a failure ReplicaEon Easily create read-‐replicas of your data and seamlessly replicate data across availability zones
- 53. Compute Storage AWS Global Infrastructure Database App Services Deployment & AdministraKon Networking Database Amazon RelaKonal Database Service (Amazon RDS) databases stores forum threads, site content, and project configuraKon data. High availability MulE-‐AZ database deployment to handle live game metadata and user-‐generated content. Enterprise-‐grade fault tolerance for protecKng customer data. By managing Eme-‐consuming database administraEon tasks, Amazon RDS allows SEGA to focus on business criKcal applicaKons.
- 54. Compute Storage AWS Global Infrastructure Database App Services Deployment & AdministraKon Networking Database DynamoDB Provisioned throughput NoSQL database Fast, predictable performance Fully distributed, fault tolerant architecture Feature Details Provisioned throughput Dial up or down provisioned read/write capacity Predictable performance Average single digit millisecond latencies from SSD backed infrastructure Strong consistency Be sure you are reading the most up to date values Fault tolerant Data replicated across availability zones Monitoring Integrated to Cloud Watch Secure Integrates with AWS IdenKty and Access Management (IAM) ElasEc MapReduce Integrates with ElasKc MapReduce for complex analyKcs on large datasets
- 55. Compute Storage AWS Global Infrastructure Database App Services Deployment & AdministraKon Networking Database Redshift Managed Massively Parallel Petabyte Scale Data Warehouse Streaming Backup/Restore to S3 Extensive Security 2 TB -> 1.6 PB RDS Dynamo DB Redshift
- 56. Compute Storage AWS Global Infrastructure Database App Services Deployment & AdministraKon Networking Application Services CloudFront World-wide content distribution network Easily distribute content to end users with low latency, high data transfer speeds, and no commitments. Feature Details Fast MulKple world-‐wide edge locaKons to serve content as close to your users as possible Integrated with other services Works seamlessly with S3 and EC2 origin servers Dynamic content Supports staKc and dynamic content from origin servers Streaming Supports rtmp from S3 and includes support for live streaming from Adobe FMS and Microsob Media Server London Paris NY Served from S3 /images/* 3 Served from EC2 *.php 2 Single CNAME www.mysite.com 1
- 57. Compute Storage AWS Global Infrastructure Database App Services Deployment & AdministraKon Networking Application Services Amazon SQS Processing task/ processing trigger Processing results Amazon SQS Reliable, highly scalable, queue service for storing messages as they travel between instances Feature Details Reliable Messages stored redundantly across mulKple availability zones Simple Simple APIs to send and receive messages Scalable Unlimited number of messages Secure AuthenKcaKon of queues to ensure controlled access
- 58. Compute Storage AWS Global Infrastructure Database App Services Deployment & AdministraKon Networking Deployment & Admin Elastic Beanstalk One-click deployment from Eclipse, Visual Studio and Git Rapid deployment of applications All AWS resources automatically created Feature Details PlaMorm support Containers for Java, .net and PHP Resource creaEon Creates load balancer, instances, autoscaling and monitoring automaKcally Monitoring & Logs Integrated with Cloud Watch and consolidates server logs Versioning Manage versions of applicaKons and easily rollback deployments NoEficaEons Receive alerts on key events Full resource access Access all underlying AWS resources as necessary
- 59. Compute Storage AWS Global Infrastructure Database App Services Deployment & AdministraKon Networking Deployment & Admin OpsWorks DevOps focused managed application stacks Underlying Chef recipes allow for complete customisation Feature Details PlaMorm support Chef recipes allows for community expansion for plaeorm components such as Solr, NgniX etc Resource creaEon Customizable deployments, rollback, parKal deployments, patch management, automaKc instance scaling, and auto healing Layered Manage logical applicaKon layers and combine into stacks.
- 60. Compute Storage AWS Global Infrastructure Database App Services Deployment & AdministraKon Networking Cloud Formation Automate creation of ‘stacks’ in a repeatable way Scripting framework for AWS resource creation Feature Details PlaMorm support Support for AWS resources from EC2 to IAM Resource creaEon Creates AWS resources behind the scenes and reports on progress DeclaraEve Specify stacks in JSON format and source control your environments Customizable Drive stack creaKon with parameters Deployment & Admin
- 61. Compute Storage AWS Global Infrastructure Database App Services Deployment & AdministraKon Networking Deployment & Admin Identity & Access Management Granular control of user rights with AWS Automated granting of EC2 service rights Software Developer Kits Comprehensive support of programming models for using AWS services
- 62. + others WorkSpaces Cloud Search Simple Email Service Simple Workflow Service Simple Notification Service ElastiCache (Memcache & Redis) Elastic MapReduce CloudWatch …and more to come!
- 64. Foundation Services Compute Storage Database Networking AWS Global Infrastructure Regions Availability Zones Edge Locations Amazon Shared responsibility
- 65. Foundation Services Compute Storage Database Networking Client-side Data Encryption & Data Integrity Authentication Server-side Encryption (File System and/or Data) Network Traffic Protection (Encryption/Integrity/Identity) Platform, Applications, Identity & Access Management Operating System, Network & Firewall Configuration Customer Data Amazon Shared responsibility You AWS Global Infrastructure Regions Availability Zones Edge Locations
- 66. Certifications SOC 1 Type 2 (formerly SAS-70) ISO 27001 PCI DSS for EC2, S3, EBS, VPC, RDS, ELB, IAM FISMA Moderate Compliant Controls HIPAA & ITAR Compliant Architecture Physical Security Datacenters in nondescript facilities Physical access strictly controlled Must pass two-factor authentication at least twice for floor access Physical access logged and audited HW, SW, Network Systematic change management Phased updates deployment Safe storage decommission Automated monitoring and self- audit Advanced network protection Security standards http://aws.amazon.com/security