Cloud Ops: Life after an AWS Migration A presentation delivered by Paul Dunlop (Principal Cloud Architect, API Talent) at the AWS Summit in Auckland, 2017

1. AUCKLAND

2. Cloud Ops
Life after an AWS Migration
Paul Dunlop – Principal Cloud Architect
@pauldunlopnz
@apitalent

10. Somethings Missing!

11. “Service Delivery Platform”
Backups?
Monitoring?Logging?
Active Directory?
Automation?
Service Limits?
Patch Management?
Image
Maintenance?
Identity & Access?
Security?
Hybrid / Network
Connectivity?
Billing?Tagging?
Configuration Management?

12. SDP Exists in Every Account

13. Review SDP Artefacts

14. Network Connectivity
Did Anyone Think About
Routing?
Network Register

16. Identity & Access
User Accounts In Each AWS Account Is Like
Having Local Users On Every Windows
Server. Don’t do it.

17. RPG

18. IAM Roles, Policies, Groups (RPG)

20. Tagging
Security
Billing
Business
Automation

23. Backups
How Can I Use Tags To Backup
My Instances?

25. Patch & Image Management
HOW DO I KEEP MY EC2 INSTANCES
PATCHED
HOW DO I PATCH MY GOLD IMAGES?

26. EC2 Systems Manager

27. EC2 / PATCHES IS SIMILAR TO WSUS
27

30. Configuration Management
HOW DO WE TRACK AWS RESOURCE
STATE AND CONFIGURATION
CHANGES IN AWS?

31. • Config is also Rules based
• Rules can be Lambda functions

32. Enable It
On All
Accounts

33. Security Auditing
AWS CloudTrail
Event Occurs
Generating API
Activity
Cloudtrail
Captures And
Records The API
Activity

34. Enable It
On All
Accounts

35. Pro Tip
System Logs And Application Metrics
Are Not Logged By Default
CloudWatch
Amazon CloudWatch collects and tracks
metrics, collects and monitors log files, set
alarms, and automatically react to changes in
your AWS resources.

37. Bucket Overflow
OPS

38. 38

39. Centralise Logging

41. Optimisation & Automation

42. Service Limits
https://aws.amazon.com/answers/account-management/limit-monitor/

44. • Each AWS account comes
with a Service Delivery
Platform
• Architects should advocate
the Cloud Center of
Excellence and drive new
operational standards
• Automate, Centralise & Log
everything

45. IMPORTANT MESSAGE
BEFORE YOU GO :)

46. API Talent Booth Promotions
Crazy Cloud Native Idea
Migration and Managed Services
This might be an API or other type
of cloud native app. We will select two
best ideas from the jar and implement
them.
We’ll migrate a lucky customers’ workloads
to AWS and provide 12 months managed
services!
JAR 1
JAR 2

47. @pauldunlopnz
@apitalent
Paul Dunlop – Principal Cloud Architect