Ever wonder why some companies are able to achieve business goals around Amazon Redshift adoption at breakneck speed? Does figuring out the right architecture for a Amazon Redshift deployment for your organization keep you up at night? Proven patterns and “quickstart” environments are the keys to success. As a stakeholder in your company’s success, you want to bring a clear and concise business solution to the table that fits the business need. In this session, we focus on using infrastructure as code to present a variety of common Amazon Redshift deployment patterns used across other AWS customers so that you can hit the ground running. Additionally, presentations coupled with hands-on labs reinforce the patterns presented in this session.

2. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Enabling Your Organization’s Amazon
Redshift Adoption—Going from Zero to Hero
Kevin Fallis
Senior Specialist Solutions Architect
Amazon Web Services
A N T 3 0 7

3. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Agenda
 Review lab goals (5 minutes)
 Lab setup (5 minutes)
 Review what you are building (5 minutes)
 Amazon Redshift environment considerations and patterns (15
minutes)
 Hands-on labs (105 minutes)

4. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Lab goals
 Single line of business (Hub) – AWS CloudFormation
 Build an end to end secure Amazon Redshift deployment that will be used as
the foundation for a mutli-account line of business strategy
 Learn how to control data access
 Multiple lines of business (LOB) – AWS Service Catalog
 Leverage a second AWS account to create a second line of business that is
created from a prebuilt standard

5. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

6. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Instructions
• Each student will have two prebuilt AWS accounts
• Each one of you will have lab credentials for two AWS accounts, which you will use for the
labs
• Please refrain from using personal accounts during the lab
• Each account has been validated to manage limits and other concerns
• Navigate to the following URL: https://chilp.it/57d377a
• Follow the instructions on the static website starting with the lab
instructions
• You will leverage AWS Service Catalog to build out the end-to-end
solution across two accounts

7. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

8. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Pattern overview – Hub and LOB foundation
Shared S3 StackNetwork Stack
Portal Stack
Starting with VPC, build
out the security, routing
and foundation for the
solution.
Build in cross account
permissions to share data
between lines of business
Access your deployment via a
portal built on EC2 and
accessed by RDP
Amazon Redshift Stack
Create a Redshift cluster to load
in data from and work with data
in S3 with in Spectrum
App Stream 2.0 Stack
Lock down your environment
with VDI. Provide a consistent,
secure interface for your users.

9. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

10. “[Amazon] Redshift allows us to quickly spin up
clusters and provide our data scientists with a fast
and easy method to access data and generate
insights”
Bradley Todd
Technology Architect, Liberty Mutual

11. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Build a foundation for Amazon Redshift environments
• Purpose-built components
that are extensible and allow
deployment consistency
• Easy assembly of
components to create a
solution
• Consistent environments to
limit operational complexity
• Ease of deployment
• Lease privilege access and
clear lines of responsibility

12. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Automation is the key
To move quickly, you need to surround your Amazon Redshift data
warehouse deployments with automation and managed services
Governance AWS
Service Catalog
Consistency
AWS
CloudFormation
Operations
AWS
Managed Services
Control access
and cost
Infrastructure
as code
Heavy lifting
minimized

13. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Considerations for building your environments
Solution
Services
Sources
How do I bring data
into my
environment and
prepare it?
Who or what is
consuming the data and
at what frequency?
Sizes
How much
data are we
talking about?
Security
Who can access the
data, from where,
and at what levels?

14. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Data sources
Incident
data
Trade data
Sales data Device data
Insurance
data
Advertising
data
Data sources and
types determine
data prep strategy
• How often
• How long
• How granular
• What format
• What business rules
Fixed
format
Databases
Delimited
Column
compressed
JSONStreaming

15. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Data size
• Aggregate data larger than
~2 PB?
• Super fast or fast enough?
• Is my data growing?
• How long do I need the
data?

16. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Data security and compliance

17. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Security levers
Encryption
Users and
groups
Table-level
access
Purpose-
built views
Logging Auditing
Threat
detection
Incident
response
Proactive Reactive

18. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Data services and data consumers
Employees Consultants
Applications Monitoring
Security &
compliance

19. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

20. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Line of business solution
AWS Region
VPC Service VPCs
Availabilityzone2Availabilityzone1
Publicsubnet
Privatesubnet
Publicsubnet
Privatesubnet
S3
Endpoint
S3
Endpoint
RS
ENI
Cross
Account Role
AppStream
ENI

21. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Network stack
AWS Region
VPC Service VPCs
Availabilityzone2Availabilityzone1
Publicsubnet
Privatesubnet
Publicsubnet
Privatesubnet

22. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Shared S3 stack
AWS Region
VPC Service VPCs
Availabilityzone2Availabilityzone1
Publicsubnet
Privatesubnet
Publicsubnet
Privatesubnet
S3
Endpoint
S3
Endpoint
Cross
Account Role

23. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Amazon Redshift stack
AWS Region
VPC Service VPCs
Availabilityzone2Availabilityzone1
Publicsubnet
Privatesubnet
Publicsubnet
Privatesubnet
S3
Endpoint
S3
Endpoint
RS
ENI
Cross
Account Role

24. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Portal stack
AWS Region
VPC Service VPCs
Availabilityzone2Availabilityzone1
Publicsubnet
Privatesubnet
Publicsubnet
Privatesubnet
S3
Endpoint
S3
Endpoint
RS
ENI
Cross
Account Role

25. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Amazon App Stream 2.0 stack
AWS Region
VPC Service VPCs
Availabilityzone2Availabilityzone1
Publicsubnet
Privatesubnet
Publicsubnet
Privatesubnet
S3
Endpoint
S3
Endpoint
RS
ENI
Cross
Account Role
AppStream
ENI

26. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Overall solution
AWS Region
VPC Service VPCs
Availabilityzone2Availabilityzone1
Publicsubnet
Privatesubnet
Publicsubnet
Privatesubnet
S3
Endpoint
S3
Endpoint
RS
ENI
Cross
Account Role
AppStream
ENI

27. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

28. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

29. Thank you!
© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Kevin Fallis
Senior Specialist Solutions Architect
Amazon Web Services
kffallis@amazon.com

30. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.