[금융고객을 위한 Resiliency in the Cloud] 금융사의 Resiliency를 위한 AWS Solution 소개
0 likes123 views
The document details the 'Resiliency in the Cloud Workshop 2023' for financial services customers, emphasizing the importance of resilience against failures and disruptions in cloud infrastructure. It introduces AWS solutions for high availability, disaster recovery, and backup strategies, highlighting various approaches such as pilot light and warm standby. Additionally, it discusses AWS regions, availability zones, and backup services to manage data security and operational efficiency.
[금융고객을 위한 Resiliency in the Cloud] 금융사의 Resiliency를 위한 AWS Solution 소개
- 1. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. F I N A N C I A L S E R V I C E S Resiliency 를 위한 AWS Solution 소개 Jeonghun Sim Solutions Architect AWS
- 2. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | Everything fails, all the time.” Werner Vogels CTO, Amazon.com © 2021, Amazon Web Services, Inc. or its affiliates. All rights reserved. “
- 3. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | # rm –rf *
- 4. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | Resilience 4 A B I L I T Y O F A W O R K L O A D T O R E C O V E R F R O M I N F R A S T R U C T U R E O R S E R V I C E D I S R U P T I O N S High Availability Resistance to common failures through design and operational mechanisms Disaster Recovery Returning to operations within specific targets for more rare but highly impactful failures Core services, design goals to meet availability goals Backup & Recovery, Data Bunkering, Managed RPO/RTO Continuous Improvement CI/CD, Code Refinement, Operational Testing, Observability/Monitoring The mental model
- 5. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. High Availability 5
- 6. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | High availability (HA) 6 A B O U T A P P L I C A T I O N A V A I L A B I L I T Y Smaller scale, more frequent events: • Component failures • Network issues • Load spikes Measures mean over time: • “The 9’s” (99.99% available)
- 7. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | AWS Regions and Availability Zones (AZs) 7 A W S R E G I O N S A R E P H Y S I C A L L O C A T I O N S A R O U N D T H E W O R L D W H E R E W E C L U S T E R D A T A C E N T E R S 30 AWS Regions worldwide AWS Regions Announced Regions Data center Data center Data center Each AZ includes one or more discrete data centers Data centers, each with redundant power, networking, and connectivity, housed in separate facilities. Each AWS Region has multiple AZs Transit Transit AZ AZ AZ A Region is a physical location in the world
- 8. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | AWS Regions and Availability Zones (AZs) 8 A W S R E G I O N S A R E P H Y S I C A L L O C A T I O N S A R O U N D T H E W O R L D W H E R E W E C L U S T E R D A T A C E N T E R S Availability Zone 1 Availability Zone 2 VPC AWS Cloud Instance Amazon RDS Primary instance Instance Amazon RDS Standby instance Network Load Balancer Amazon EC2 Auto Scaling Amazon RDS
- 9. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. Disaster Recovery 9
- 10. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | Disaster recovery (DR) 10 A B O U T B U S I N E S S C O N T I N U I T Y Larger scale, less frequent, events: • Natural disasters • Technical failures • Human actions Measures a one-time event: • Recovery Time • Recovery Point Natural Disaster Technical Failure Human Actions
- 11. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | Recovery Point and Recovery Time Objective (RPO/RTO) 11 How much data can you afford to recreate or lose? How quickly must you recover? What is the cost of downtime? Disaster Recovery Point (RPO) Recovery Time (RTO) Data loss Down time
- 12. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | Strategies for disaster recovery 12 Backup & restore Pilot light Active/active Warm standby RPO / RTO: Hours RPO / RTO: 10s of minutes RPO / RTO: Minutes RPO / RTO: Real-time • Lower-priority use cases • Provision all AWS resources after event • Restore backups after event • Cost $ • Data live • Services idle • Provision some AWS resources and scale after event • Cost: $$ • Always running, but smaller • Business critical • Scale AWS resources after event • Cost $$$ • Zero downtime • Near-zero data loss • Mission Critical Services • Cost $$$$ Active/passive strategies
- 13. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. DR Backup & ReStore 13
- 14. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | BACKUP & RESTORE 14 B A C K U P A N D R E S T O R E I S A S U I T A B L E A P P R O A C H F O R M I T I G A T I N G A G A I N S T D A T A L O S S O R C O R R U P T I O N
- 15. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | BACKUP & RESTORE 15 B A C K U P A N D R E S T O R E I S A S U I T A B L E A P P R O A C H F O R M I T I G A T I N G A G A I N S T D A T A L O S S O R C O R R U P T I O N •Amazon Elastic Block Store (Amazon EBS) snapshot •Amazon DynamoDB backup •Amazon RDS snapshot •Amazon Aurora DB snapshot •Amazon EFS backup (when using AWS Backup) •Amazon Redshift snapshot •Amazon Neptune snapshot •Amazon DocumentDB •Amazon FSx for Windows File Server , Amazon FSx for Lustre , Amazon FSx for NetApp ONTAP , and Amazon FSx for OpenZFS •Amazon Elastic Block Store (Amazon EBS) volumes •Amazon EC2 instances •Amazon Relational Database Service (Amazon RDS) databases (including Amazon Aurora databases) •Amazon DynamoDB tables •Amazon Elastic File System (Amazon EFS) file systems •AWS Storage Gateway volumes •Amazon FSx for Windows File Server; Amazon FSx for Lustre;; Amazon FSx for NetApp ONTAP; and Amazon FSx for OpenZFS BACKUP & STORE AWS Service AWS Backup
- 16. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | AWS Backup 16 A F U L L Y - M A N A G E D , P O L I C Y - B A S E D B A C K U P S E R V I C E T H A T M A K E S I T E A S Y T O C E N T R A L L Y M A N A G E A N D A U T O M A T E T H E B A C K U P O F D A T A A C R O S S A W S S E R V I C E S AWS Backup Supported AWS Services Backup Plan Backups Operators Admin AWS CloudTrail RDS Storage Gateway Aurora DynamoDB EC2 EBS EFS AWS SNS AWS IAM With AWS Backup, you can: • Create backup plans that orchestrate backup operations per policy • Secure backups and manage restore processes • Set user access permissions to managed resources controlled via IAM • Setup notifications and logging through Amazon SNS and AWS CloudTrail
- 17. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | AWS Backup 17 A F U L L Y - M A N A G E D , P O L I C Y - B A S E D B A C K U P S E R V I C E T H A T M A K E S I T E A S Y T O C E N T R A L L Y M A N A G E A N D A U T O M A T E T H E B A C K U P O F D A T A A C R O S S A W S S E R V I C E S AWS Backup Supported AWS Services Backup Plan Backups Operators Admin AWS CloudTrail RDS Storage Gateway Aurora DynamoDB EC2 EBS EFS AWS SNS AWS IAM With AWS Backup, you can: • Create backup plans that orchestrate backup operations per policy • Secure backups and manage restore processes • Set user access permissions to managed resources controlled via IAM • Setup notifications and logging through Amazon SNS and AWS CloudTrail
- 18. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | AWS Backup 18
- 19. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | AWS Backup 19
- 20. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | AWS Backup • Increased productivity and reduced the # hours needed to do backups by 80% • Reduced operational costs associated with backup by 50% • Increased accuracy of snapshots from 80% to 100% Company: Santos Industry: Oil & Gas Country: Australia Company: Rackspace Industry: Software & Internet Country: United States • Allocated development resources on core customer activities • Reduced time to deploy customer environments • Improved productivity with reduced # of failures due to greater resiliency
- 21. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. DR Pilot Light 21
- 22. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | Pilot Light 22 W I T H T H E P I L O T L I G H T A P P R O A C H , Y O U R E P L I C A T E Y O U R D A T A F R O M O N E R E G I O N T O A N O T H E R A N D P R O V I S I O N A C O P Y O F Y O U R C O R E W O R K L O A D I N F R A S T R U C T U R E
- 23. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | Pilot Light 23 W I T H T H E P I L O T L I G H T A P P R O A C H , Y O U R E P L I C A T E Y O U R D A T A F R O M O N E R E G I O N T O A N O T H E R A N D P R O V I S I O N A C O P Y O F Y O U R C O R E W O R K L O A D I N F R A S T R U C T U R E •Amazon Simple Storage Service (Amazon S3) Replication •Amazon RDS read replicas •Amazon Aurora global databases •Amazon DynamoDB global tables •Amazon DocumentDB global clusters •Global Datastore for Amazon ElastiCache for Redis Pilot Light AWS Service AWS Elastic Disaster Recovery
- 24. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | AWS Elastic Disaster Recovery 24 C O N T I N U O U S R E P L I C A T I O N O F O N - P R E M I S E S A N D C L O U D S E R V E R S W I T H A W S A S Y O U R E L A S T I C R E C O V E R Y S I T E On-premises to AWS AWS Region to AWS Region Cloud to AWS
- 25. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | AWS Elastic Disaster Recovery 25
- 26. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | AWS Elastic Disaster Recovery 26
- 27. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | AWS Elastic Disaster Recovery 27
- 28. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | AWS Elastic Disaster Recovery 28 Domestic reference Company: Thomson Reuters Industry: Solutions Country: Canada Company: Tyler Rechnologies Industry: IT Country: U.S Company: Southeast Iowa Regional Industry: Health Country: USA •Replicated over 120 TB of data from 300 servers •Set up a recovery site in the cloud •Eliminated its manual DR process •Optimized spending on its disaster recovery process •Enhanced its security and compliance •Protects more than 4,300 virtual machines running Windows Server operating systems •Minimizes recovery time objectives for 12x faster recovery time than other evaluated solutions •Recovers entire data centers in case of large-scale IT disruption •Scales DR infrastructure footprint with business growth •Set up a recovery site on AWS for its EHR solution •Replicated 61 on-premises servers comprising 14 TB of data •Improved RTO by 67% and RPO by 50% •Enhanced disaster recovery testing capabilities •Gained near-real-time visibility into the health of servers
- 29. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. DR Warm Standby 29
- 30. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | Warm Standby 30 T H E W A R M S T A N D B Y A P P R O A C H I N V O L V E S E N S U R I N G T H A T T H E R E I S A S C A L E D D O W N , B U T F U L L Y F U N C T I O N A L , C O P Y O F Y O U R P R O D U C T I O N E N V I R O N M E N T I N A N O T H E R R E G I O N .
- 31. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. DR Multi-Site Active/Active 31
- 32. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | Multi Site Active-Active 32 M U L T I - S I T E A C T I V E / A C T I V E S E R V E S T R A F F I C F R O M A L L R E G I O N S T O W H I C H I T I S D E P L O Y E D , W H E R E A S H O T S T A N D B Y S E R V E S T R A F F I C O N L Y F R O M A S I N G L E R E G I O N , A N D T H E O T H E R R E G I O N ( S ) A R E O N L Y U S E D F O R D I S A S T E R R E C O V E R Y .
- 33. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | Route53 ARC 33 A M A Z O N R O U T E 5 3 A P P L I C A T I O N R E C O V E R Y C O N T R O L L E R G I V E S Y O U I N S I G H T S I N T O W H E T H E R Y O U R A P P L I C A T I O N S A N D R E S O U R C E S A R E R E A D Y F O R R E C O V E R Y . Routing Controls 1 Routing Controls 3 Routing Controls 4 REGION 1 REG1-AZ1 REG1-AZ2 Routing Controls 2 Routing Controls 5 Routing Controls 6 REGION 2 REG2-AZ1 REG2-AZ2 ON ON ON OFF OFF OFF Active Standby Control Panel Routing Control
- 34. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | Resilience Hub 34 A N E W A P P L I C A T I O N R E S I L I E N C E S E R V I C E T H A T P R O V I D E S C U S T O M E R S A C E N T R A L P L A C E T O D E F I N E , V A L I D A T E , A N D T R A C K T H E R E S I L I E N C E O F T H E I R A P P L I C A T I O N S O N A W S . Resilience Hub Users Add application Define resilience targets Assess app resilience Implement remediations Test app resilience Track resilience posture CI/CD pipeline
- 35. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | Resilience Hub 35
- 36. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. Chaos Engineering (Fault Injection Simulator) 36
- 37. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES |
- 38. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | Chaos Engineering 38 C H A O S E N G I N E E R I N G I S T H E D I S C I P L I N E O F E X P E R I M E N T I N G O N A S O F T W A R E S Y S T E M I N P R O D U C T I O N I N O R D E R T O B U I L D C O N F I D E N C E I N T H E S Y S T E M ’ S C A P A B I L I T Y T O W I T H S T A N D T U R B U L E N T A N D U N E X P E C T E D C O N D I T I O N S Steady state Plan: Hypothesis Do: Run experiment Check: Verify Act: Improve Steady state Unplanned stress Identify problem Resolve problem Verify resolution Reactive Usual engineering loop Chaos engineering loop Proactive Incident
- 39. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | Supported fault injections Stop, reboot and terminate instance(s) (EC2) API throttling/internal error/unavailable error (EC2) Increased memory or CPU load (EC2) Kill process (EC2) Latency injection (EC2) Drain container instances (ECS) Increase memory or CPU consumption per task (ECS) Terminate node group instances (EKS) Systems Manager send command (SSM) Database stop, reboot, and failover (RDS)
- 40. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES |
- 41. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023 FINANCIAL SERVICES | © 2022, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. Thank you! Jeonghun Sim (jeonghun@amazon.com)