Part one of the materials from the June 25 AWS RoadShow in Cambridge. Includes an introduction to AWS, details of who is using AWS and why, an overview of some of the services in the AWS toolbox and the AWS security model.

1. Welcome to AWS
RoadShow
@AWScloud @AWS_UKI
#AWSRoadShow

2. AWS RoadShow Cambridge
Ian Massingham - Technical Evangelist
25 June 2014
ianmas@amazon.com
@IanMmmm

3. What will we cover this morning?
09:30 Registration
10:00 An Introduction to AWS
10:45 Haven Power & AWS – Paul Armstrong
11:00 Proxama & AWS – Jason Gregson
11:15 Break
11:30 Tricks & Tips for Getting Started with AWS

4. What is AWS?
Ian
Massingham
-­‐
Technical
Evangelist
@IanMmmm

5. background

6. Consumer
Business
Tens of millions of active
customer accounts
13 countries:
US, UK, Germany, Japan,
France, Canada, China,
Italy, Brazil, Mexico, India,
Spain, Australia
Seller
Business
Sell on Amazon websites
Use Amazon technology
for your own retail website
Leverage Amazon’s
massive fulfillment centre
network
IT Infrastructure
Business
Cloud computing
infrastructure for hosting
web-scale solutions
Hundreds of thousands of
registered customers in
over 190 countries

7. How did Amazon…
… get into Cloud Computing?

8. AWS Mission
Enable businesses and
developers to use web
services* to build scalable,
sophisticated applications.
*What people now call “the cloud”

10. Not excess capacity!

11. Not excess capacity!
Startups on AWS
Find out more at : aws.amazon.com/solutions/case-studies

12. Powering the Most Popular Internet Businesses
Find out more at : aws.amazon.com/solutions/case-studies
Enterprises on AWS
Find out more at : aws.amazon.com/solutions/case-studies

13. Each day AWS adds the equivalent server
capacity to power Amazon when it was a
global, $7B enterprise

14. utility computing

15. On demand
Pay as you go
Uniform
Available
Utility computing

16. Utility computing
On demand
Pay as you go
Available
Uniform

17. Utility computing

18. Utility computing
Compute
Storage
Security
Scaling
Database
Networking
Monitoring
Messaging
Workflow
DNS
Load
Balancing
Backup
CDN
On demand
Pay as you go
Uniform
Available

19. On
a
global
footprint
Region
US-WEST (N. California)
EU-WEST (Ireland)
ASIA PAC (Tokyo)
ASIA PAC
(Singapore)
US-WEST (Oregon)
SOUTH AMERICA (Sao Paulo)
US-EAST (Virginia)
GOV CLOUD
ASIA PAC
(Sydney)

20. At the end of a web service
aws ec2 run-instances
--image-id ami-a813fadf
--count 3
--placement AvailabilityZone=eu-west-1a
--instance-type m1.small
aws ec2 run-instances
--image-id ami-a813fadf
--count 5
--placement AvailabilityZone=eu-west-1c
--instance-type m1.medium

21. and a rich Management Console

22. elasticity

23. Traditional IT
capacity
Elastic capacity
Capacity
Time
Your IT needs

24. On
and
Off
Fast
Growth
Variable
peaks
Predictable
peaks
Elastic capacity

25. Elastic capacity
On and Off Fast Growth
Predictable peaksVariable peaks
WASTE
CUSTOMER DISSATISFACTION

26. Elastic capacity
Fast GrowthOn and Off
Predictable peaksVariable peaks

27. From one instance…

28. …to thousands

29. and back…

30. exploiting elasticity

31. Sunday Monday Tuesday Wednesday Thursday Friday Saturday
Typical weekly traffic to Amazon.com

32. November traffic to Amazon.com
November

33. November traffic to Amazon.com
Provisioned capacity
November

34. November traffic to Amazon.com
76%
24%
Provisioned capacity
November

35. November 10th 2010
Turned off last physical web server of
Amazon.com

36. November 10th 2010
Turned off last physical web server of
Amazon.com
October 31st 2011
Turned off last web servers supporting
European business

37. November traffic to Amazon.com
November

38. Building a Top500 HPC Cluster on AWS

39. the toolbox

40. Compute Storage
AWS Global Infrastructure
Database
App Services
Deployment & Administration
Networking
Reference Model
security

41. Compute
Storage
AWS
Global
Infrastructure
Database
App
Services
Deployment
&
AdministraKon
Networking
Global infrastructure
Regions
An independent collection of AWS resources in a defined
geography
A solid foundation for meeting location-dependent privacy
and compliance requirements

42. Compute
Storage
AWS
Global
Infrastructure
Database
App
Services
Deployment
&
AdministraKon
Networking
Global infrastructure
Availability Zones
Designed as independent failure zones
Physically separated within a typical metropolitan region

43. Compute
Storage
AWS
Global
Infrastructure
Database
App
Services
Deployment
&
AdministraKon
Networking
Global infrastructure
Edge Locations
To deliver content to end users with lower latency
A global network of edge locations Supports global DNS
infrastructure (Route53) and Cloud Front CDN
Dallas(2)
St.Louis
Miami
JacksonvilleLos Angeles (2)
Palo Alto
Seattle
Ashburn(3)
Newark
New York (3)
Dublin
London(2)
Amsterdam
(2)
Stockholm
Frankfurt(2)
Paris(2)
Singapore(2)
Hong Kong
(2)
Tokyo (2)
Sao Paulo
South Bend
San Jose
Osaka
Milan
Sydney
Madrid
Seoul
Mumbai
Chennai

44. Compute
Storage
AWS
Global
Infrastructure
Database
App
Services
Deployment
&
AdministraKon
Networking
Networking
Direct Connect
Dedicated connection to AWS
VPN Connection
Secure internet connection to AWS
Virtual Private Cloud
Private, isolated section of the AWS Cloud
Route 53
Highly available and scalable Domain Name Service

45. Compute
Storage
AWS
Global
Infrastructure
Database
App
Services
Deployment
&
AdministraKon
Networking
Compute
Vertical Scaling
From $0.02/hr
Elastic Compute Cloud (EC2)
Basic unit of compute capacity
Range of CPU, memory & local disk options
13 Instance types available, from micro to cluster compute
Feature
Details
Flexible
Run
windows
or
linux
distribuKons
Scalable
Wide
range
of
instance
types
from
micro
to
cluster
compute
Machine
Images
ConfiguraKons
can
be
saved
as
machine
images
(AMIs)
from
which
new
instances
can
be
created
Full
control
Full
root
or
administrator
rights
Secure
Full
firewall
control
via
Security
Groups
Monitoring
Publishes
metrics
to
Cloud
Watch
Inexpensive
On-­‐demand,
Reserved
and
Spot
instance
types
VM
Import/Export
Import
and
export
VM
images
to
transfer
configuraKons
in
and
out
of
EC2

46. Compute
Storage
AWS
Global
Infrastructure
Database
App
Services
Deployment
&
AdministraKon
Networking
Compute
Auto-scaling
Automatic provisioning of compute resources based upon
demand, configuration or schedule
Trigger auto-
scaling policy
Feature
Details
Control
Define
minimum
and
maximum
instance
pool
sizes
and
when
scaling
and
cool
down
occurs
Integrated
to
CloudWatch
Use
metrics
gathered
by
CloudWatch
to
drive
scaling
Instance
types
Run
auto
scaling
for
on-­‐demand
instances
and
spot.
CompaKble
with
VPC
aws autoscaling create-auto-scaling-group
--auto-scaling-group-name MyGroup
--launch-configuration-name MyConfig
--availability-zones eu-west-1a
--min-size 4
--max-size 200

47. Compute
Storage
AWS
Global
Infrastructure
Database
App
Services
Deployment
&
AdministraKon
Networking
Compute
Elastic Load Balancing
Create highly scalable applications
Distribute load across EC2 instances in multiple
availability zones
Feature
Details
Auto-­‐scaling
AutomaKcally
scales
to
handle
request
volume
Available
Load
balance
across
instances
in
mulKple
availability
zones
Health
checks
AutomaKcally
checks
health
of
instances
and
takes
them
in
or
out
of
service
Session
sEckiness
Route
requests
to
the
same
instance
Secure
sockets
layer
Supports
SSL
offload
from
web
and
applicaKon
servers
with
flexible
cipher
support
Monitoring
Publishes
metrics
to
Cloud
Watch

48. Compute
Storage
AWS
Global
Infrastructure
Database
App
Services
Deployment
&
AdministraKon
Networking
Storage
S3 - Durable storage, any object
99.999999999% durability of objects
Unlimited storage of objects of any type
Up to 5TB size per object
Feature
Details
Flexible
object
store
Buckets
act
like
drives,
folder
structures
within
Access
control
Granular
control
over
object
permissions
Server-­‐side
encrypEon
256bit
AES
encrypKon
of
objects
MulE-­‐part
uploads
Improved
throughput
&
control
Object
versioning
Archive
old
objects
and
version
new
ones
Object
expiry
AutomaKcally
remove
old
objects
Access
logging
Full
audit
log
of
bucket/object
acKons
Web
content
hosEng
Serve
content
as
web
site
with
built
in
page
handling
NoEficaEons
Receive
noKficaKons
on
key
events
Import/Export
Physical
device
import/export
service

50. Compute
Storage
AWS
Global
Infrastructure
Database
App
Services
Deployment
&
AdministraKon
Networking
Storage
Elastic Block Store
High performance block storage device
1GB to 1TB in size
Mount as drives to instances
Feature
Details
High
performance
file
system
Mount
EBS
as
drives
and
format
as
required
Flexible
size
Volumes
from
1GB
to
1TB
in
size
Secure
Private
to
your
instances
Available
Replicated
within
an
Availability
Zone
Backups
Volumes
can
be
snapsho`ed
for
point
in
Kme
restore
Monitoring
Detailed
metrics
captured
via
Cloud
Watch

51. Compute
Storage
AWS
Global
Infrastructure
Database
App
Services
Deployment
&
AdministraKon
Networking
Database
Relational Database Service
Database-as-a-Service
No need to install or manage database instances
Scalable and fault tolerant configurations
Feature
Details
PlaMorm
support
Create
MySQL,
PostgreSQL,
Microsob
SQL
Server
and
Oracle
RDBMS
Preconfigured
Get
started
instantly
with
sensible
default
secngs
Automated
patching
Keep
your
database
plaeorm
up
to
date
automaKcally
Backups
AutomaKc
backups
and
point
in
Kme
recovery
and
full
DB
backups
Backups
Volumes
can
be
snapsho`ed
for
point
in
Kme
restore
Failover
Automated
failover
to
slave
hosts
in
event
of
a
failure
ReplicaEon
Easily
create
read-­‐replicas
of
your
data
and
seamlessly
replicate
data
across
availability
zones

52. Compute
Storage
AWS
Global
Infrastructure
Database
App
Services
Deployment
&
AdministraKon
Networking
Database
Amazon
RelaKonal
Database
Service
(Amazon
RDS)
databases
stores
forum
threads,
site
content,
and
project
configuraKon
data.
High
availability
MulE-­‐AZ
database
deployment
to
handle
live
game
metadata
and
user-­‐generated
content.
Enterprise-­‐grade
fault
tolerance
for
protecKng
customer
data.
By
managing
Eme-­‐consuming
database
administraEon
tasks,
Amazon
RDS
allows
SEGA
to
focus
on
business
criKcal
applicaKons.

53. Compute
Storage
AWS
Global
Infrastructure
Database
App
Services
Deployment
&
AdministraKon
Networking
Database
DynamoDB
Provisioned throughput NoSQL database
Fast, predictable performance
Fully distributed, fault tolerant architecture
Feature
Details
Provisioned
throughput
Dial
up
or
down
provisioned
read/write
capacity
Predictable
performance
Average
single
digit
millisecond
latencies
from
SSD
backed
infrastructure
Strong
consistency
Be
sure
you
are
reading
the
most
up
to
date
values
Fault
tolerant
Data
replicated
across
availability
zones
Monitoring
Integrated
to
Cloud
Watch
Secure
Integrates
with
AWS
IdenKty
and
Access
Management
(IAM)
ElasEc
MapReduce
Integrates
with
ElasKc
MapReduce
for
complex
analyKcs
on
large
datasets

54. Compute
Storage
AWS
Global
Infrastructure
Database
App
Services
Deployment
&
AdministraKon
Networking
Database
Redshift
Managed Massively Parallel Petabyte Scale Data Warehouse
Streaming Backup/Restore to S3
Extensive Security
2 TB -> 1.6 PB
RDS Dynamo
DB
Redshift

55. Compute
Storage
AWS
Global
Infrastructure
Database
App
Services
Deployment
&
AdministraKon
Networking
Application Services
CloudFront
World-wide content distribution network
Easily distribute content to end users
with low latency, high data transfer
speeds, and no commitments.
Feature
Details
Fast
MulKple
world-­‐wide
edge
locaKons
to
serve
content
as
close
to
your
users
as
possible
Integrated
with
other
services
Works
seamlessly
with
S3
and
EC2
origin
servers
Dynamic
content
Supports
staKc
and
dynamic
content
from
origin
servers
Streaming
Supports
rtmp
from
S3
and
includes
support
for
live
streaming
from
Adobe
FMS
and
Microsob
Media
Server
London
Paris
NY
Served from S3
/images/*
3
Served from EC2
*.php
2
Single CNAME
www.mysite.com
1

56. Compute
Storage
AWS
Global
Infrastructure
Database
App
Services
Deployment
&
AdministraKon
Networking
Application Services
Amazon SQS
Processing task/
processing trigger
Processing results
Amazon SQS
Reliable, highly scalable, queue
service for storing messages as they
travel between instances
Feature
Details
Reliable
Messages
stored
redundantly
across
mulKple
availability
zones
Simple
Simple
APIs
to
send
and
receive
messages
Scalable
Unlimited
number
of
messages
Secure
AuthenKcaKon
of
queues
to
ensure
controlled
access

57. Compute
Storage
AWS
Global
Infrastructure
Database
App
Services
Deployment
&
AdministraKon
Networking
Deployment & Admin
Elastic Beanstalk
One-click deployment from Eclipse, Visual Studio and Git
Rapid deployment of applications
All AWS resources automatically created
Feature
Details
PlaMorm
support
Containers
for
Java,
.net
and
PHP
Resource
creaEon
Creates
load
balancer,
instances,
autoscaling
and
monitoring
automaKcally
Monitoring
&
Logs
Integrated
with
Cloud
Watch
and
consolidates
server
logs
Versioning
Manage
versions
of
applicaKons
and
easily
rollback
deployments
NoEficaEons
Receive
alerts
on
key
events
Full
resource
access
Access
all
underlying
AWS
resources
as
necessary

58. Compute
Storage
AWS
Global
Infrastructure
Database
App
Services
Deployment
&
AdministraKon
Networking
Deployment & Admin
OpsWorks
DevOps focused managed application stacks
Underlying Chef recipes allow for complete customisation
Feature
Details
PlaMorm
support
Chef
recipes
allows
for
community
expansion
for
plaeorm
components
such
as
Solr,
NgniX
etc
Resource
creaEon
Customizable
deployments,
rollback,
parKal
deployments,
patch
management,
automaKc
instance
scaling,
and
auto
healing
Layered
Manage
logical
applicaKon
layers
and
combine
into
stacks.

59. Compute
Storage
AWS
Global
Infrastructure
Database
App
Services
Deployment
&
AdministraKon
Networking
Cloud Formation
Automate creation of ‘stacks’ in a repeatable way
Scripting framework for AWS resource creation
Feature
Details
PlaMorm
support
Support
for
AWS
resources
from
EC2
to
IAM
Resource
creaEon
Creates
AWS
resources
behind
the
scenes
and
reports
on
progress
DeclaraEve
Specify
stacks
in
JSON
format
and
source
control
your
environments
Customizable
Drive
stack
creaKon
with
parameters
Deployment & Admin

60. Compute
Storage
AWS
Global
Infrastructure
Database
App
Services
Deployment
&
AdministraKon
Networking
Deployment & Admin
Identity & Access Management
Granular control of user rights with AWS
Automated granting of EC2 service rights
Software Developer Kits
Comprehensive support of programming models for using AWS
services

61. + others
WorkSpaces
Cloud Search
Simple Email Service
Simple Workflow Service
Simple Notification Service
ElastiCache (Memcache & Redis)
Elastic MapReduce
CloudWatch
…and more to come!

62. security & compliance

63. Foundation Services
Compute Storage Database Networking
AWS Global Infrastructure
Regions
Availability Zones
Edge Locations
Amazon
Shared responsibility

64. Foundation Services
Compute Storage Database Networking
Client-side Data Encryption & Data
Integrity Authentication
Server-side Encryption
(File System and/or Data)
Network Traffic Protection
(Encryption/Integrity/Identity)
Platform, Applications, Identity & Access Management
Operating System, Network & Firewall Configuration
Customer Data
Amazon
Shared responsibility
You
AWS Global Infrastructure
Regions
Availability Zones
Edge Locations

65. Certifications
SOC 1 Type 2 (formerly
SAS-70)
ISO 27001
PCI DSS for EC2, S3, EBS,
VPC, RDS, ELB, IAM
FISMA Moderate Compliant
Controls
HIPAA & ITAR Compliant
Architecture
Physical Security
Datacenters in nondescript
facilities
Physical access strictly
controlled
Must pass two-factor
authentication at least twice for
floor access
Physical access logged and
audited
HW, SW, Network
Systematic change
management
Phased updates deployment
Safe storage decommission
Automated monitoring and self-
audit
Advanced network protection
Security standards
http://aws.amazon.com/security