aws summit london 2016 keynote
TRANSCRIPT
-
W E L C O M EAWS Summit, July 2016
-
W E L C O M EGavin Jackson
Managing Director, AWS UK & Ireland
-
09:45 Keynote | Dr. Werner Vogels, CTO, Amazon.com
12:00 Lunch
12:00 Track Sessions Commence
14:45 Break
15:25 Track Sessions Continue
17:00 Networking Reception
AWS SUMMIT AGENDA
-
UK (Coming Soon)
-
Solutions Architects
Account Managers
Professional Services
Technical Support
Training & Certification
AMAZON WEB SERVICES IN THE UK & IRELAND
-
@AWS_UKI #AWSSummit
-
and many more.
THANKS TO OUR SPONSORS
-
T H A N K Y O U
-
DR WERNER VOGELSCTO, AMAZON.COM
@WERNER
WELCOME
-
FROM 2010
-
AWS grew up fast:
COMPUTE GROWTH Q3 2014 VS Q3 2015
DATA TRANSFER GROWTH
DATABASE SERVICE USAGE GROWTH
88% 102% 113%
-
AWS 10 years later:
ACTIVE CUSTOMERS PER MONTH
RUN RATE YOY GROWTH
1,000,000+ $10B+ 64%
-
THE TECHNOLOGY PLATFORM OF CHOICE
-
LARGEST NUMBER OF START-UP CUSTOMERS
-
LARGEST NUMBER OF ENTERPRISE CUSTOMERS
-
LARGEST NUMBER OF PUBLIC SECTOR CUSTOMERS
-
BROADEST ECOSYSTEM OF SYSTEM INTEGRATORS
-
BROADEST ECOSYSTEM OF ISVS
-
SURVIVAL
EFFICIENCY
TALENT
Digital Transformation
-
SURVIVAL
EFFICIENCY
TALENT
Digital Transformation
Jeff Immelt, GE Chairman & CEO
If you went to bed last night as an industrial company, youre going to wake up this morning as a software and analytics
company.
-
GE is migrating 9000 workloads over to AWSIntends to reduce the number of datacenters from 34 down to 4
-
COMPUTE
STORAGE
DATABASES
NETWORKING
MONITORING
ANALYTICS
APP SERVICES
MOBILE SERVICES
DEV & OPS
IOT
MIGRATION
HYBRID
VIRTUAL DESKTOPS
CORPORATE EMAIL
COLLABORATION
IDENTITY
ACCESS CONTROL
KEY MANAGEMENT
CONFIG COMPLIANCE
AUDITING
BUSINESS APPS
BUSINESS INTELLIGENCE
SECURITY
DEVOPS TOOLS
NETWORKING
REGIONS
AVAILABILITY ZONES
EDGE POPS
GLOBAL NETWORK
GOVCLOUD
PHYSICAL INFRASTRUCTURE
INFRASTRUCTURE SERVICES PLATFORM SERVICES ENTERPRISE SERVICES
SECURITY & COMPLIANCE MARKETPLACE
-
COMPUTE
STORAGE
DATABASES
NETWORKING
MONITORING
PLATFORM SERVICES
ANALYTICS
APP SERVICES
MOBILE SERVICES
DEV & OPS
IOT
ENTERPRISE SERVICES
MIGRATION
HYBRID
VIRTUAL DESKTOPS
CORPORATE EMAIL
COLLABORATION
IDENTITY
ACCESS CONTROL
KEY MANAGEMENT
CONFIG COMPLIANCE
AUDITING
MARKETPLACE
BUSINESS APPS
BUSINESS INTELLIGENCE
SECURITY
DEVOPS TOOLS
NETWORKING
REGIONS
AVAILABILITY ZONES
EDGE POPS
GLOBAL NETWORK
GOVCLOUD
GENERAL PURPOSE (M4) COMPUTE OPTIMIZED (C4) MEMORY OPTIMIZED (R3,
X1) GPU OPTIMIZED (G2) STORAGE OPTIMIZED (D2) IO OPTIMIZED (I2) LOW COST, BURSTABLE (T2) DEDICATED INSTANCES
INFRASTRUCTURE SERVICESPHYSICAL INFRASTRUCTURESECURITY & COMPLIANCE
-
COMPUTE
STORAGE
DATABASES
NETWORKING
MONITORING
OBJECT, ARCHIVE FILESYSTEM & BLOCK
STORE GENERAL PURPOSE
(SSD) PROVISIONED IOPS (SSD) MAGNETIC
ANALYTICS
APP SERVICES
MOBILE SERVICES
DEV & OPS
IOT
MIGRATION
HYBRID
VIRTUAL DESKTOPS
CORPORATE EMAIL
COLLABORATION
IDENTITY
ACCESS CONTROL
KEY MANAGEMENT
CONFIG COMPLIANCE
AUDITING
BUSINESS APPS
BUSINESS INTELLIGENCE
SECURITY
DEVOPS TOOLS
NETWORKING
REGIONS
AVAILABILITY ZONES
EDGE POPS
GLOBAL NETWORK
GOVCLOUD
INFRASTRUCTURE SERVICES PLATFORM SERVICES ENTERPRISE SERVICES MARKETPLACEPHYSICAL INFRASTRUCTURE
SECURITY & COMPLIANCE
-
COMPUTE
STORAGE
DATABASES
NETWORKING
MONITORING
MULTI-AZ REPLICATION READ REPLICAS LIKE FOR LIKE MIGRATION CROSS-ENGINE
MIGRATION
AMAZON AURORA ANALYTICS
APP SERVICES
MOBILE SERVICES
DEV & OPS
IOT
MIGRATION
HYBRID
VIRTUAL DESKTOPS
CORPORATE EMAIL
COLLABORATION
IDENTITY
ACCESS CONTROL
KEY MANAGEMENT
CONFIG COMPLIANCE
AUDITING
BUSINESS APPS
BUSINESS INTELLIGENCE
SECURITY
DEVOPS TOOLS
NETWORKING
REGIONS
AVAILABILITY ZONES
EDGE POPS
GLOBAL NETWORK
GOVCLOUD
PLATFORM SERVICES ENTERPRISE SERVICES MARKETPLACEINFRASTRUCTURE SERVICESPHYSICAL INFRASTRUCTURE
SECURITY & COMPLIANCE
-
SECURITY & COMPLIANCE
COMPUTE
STORAGE
DATABASES
NETWORKING
MONITORING
ANALYTICS
APP SERVICES
MOBILE SERVICES
DEV & OPS
IOT
MIGRATION
HYBRID
VIRTUAL DESKTOPS
CORPORATE EMAIL
COLLABORATION
IDENTITY
ACCESS CONTROL
KEY MANAGEMENT
CONFIG COMPLIANCE
AUDITING
BUSINESS APPS
BUSINESS INTELLIGENCE
SECURITY
DEVOPS TOOLS
NETWORKING
REGIONS
AVAILABILITY ZONES
EDGE POPS
GLOBAL NETWORK
GOVCLOUD
IDENTITY POLICIES LOCATION POLICIES TIME-BASED POLICIES INDIVIDUAL API CALLS KEY ROTATION TEMPORARY CREDENTIALS POLICY SIMULATOR
PLATFORM SERVICES ENTERPRISE SERVICES MARKETPLACEINFRASTRUCTURE SERVICESPHYSICAL INFRASTRUCTURE
-
Amazing innovations enabled by agility and a rich collection of services
DELIVERING 10,000 RELEASES IN 3 MONTHS, VERSUS 1 EVERY
6 WEEKS PRE-AWS
MILLIONS OF CONCURRENTPLAYERS AT LAUNCH
SCALING FROM 38 MILLION MESSAGING USERS TO 170
MILLION USERS
ENABLES BUSINESSES TOCOMMUNICATE WITH THEIR
CUSTOMERS, GLOBALLY
ANALYZING 20,000 EXOMES IN DEC 2015, UP FROM 3000
IN 11 MONTHS BEFORE
-
13 Regions
35 Availability Zones
Broad Global Geographic Footprint. Expanding in 2016
-
CTO, FANDUEL
ROBIN SPIRA
-
FOUNDERS LAUNCHED HUBDUB IN 2007
PIVOTED TO FANDUEL AT SXSW IN 2009
FANDUEL PIONEERED DAILY FANTASY SPORTS
OVER 6 MILLION USERS, 4 MILLION APP DOWNLOADS
350K ENTRIES PER DAY IN 2014 TO 2.5M PER DAY IN 2015
FROM STARTUP TO SCALE-UP
-
CAPACITY PLANNING WITH TRADITIONAL HARDWARE IS HARD
TRANSACTION VOLUME JUMPS FROM 10S PER MINUTE TO 1000S PER SECOND
WRITE INTENSIVE PLATFORM - LIMITED SCOPE TO SCALE BY CACHING
DOWNTIME, AT THE WRONG TIME, IS EXPENSIVE
INTERNATIONAL INFRASTRUCTURE MANAGEMENT
Thursday
Sunday
THE CHALLENGE
-
CLOUDFORMATION MULTI-AZ, MULTI-REGION MANAGED SERVICES ENTERPRISE SUPPORT
CONSULTANCY INFRASTRUCTURE EVENT MANAGEMENT INSTANT INCIDENT RESPONSE
HOW WE USE AWS
-
AMAZON AURORA, RDS EVOLVED
AMAZON AURORA TAKES RDS TO THE NEXT LEVEL
RTO HALVED FROM 2 MINUTES TO 60 SECONDS - $1.5M ENTRY FEES
RPO REDUCED TO ZERO - $25K ENTRY FEES PER SECOND
ELASTIC STORAGE
2X - 5X IMPROVEMENT IN WRITE PERFORMANCE
-
OUR RELATIONSHIP WITH AWS
OUR INFRASTRUCTURE TEAM IS HUNDREDS OF PEOPLE, BUT ONLY 12 WORK FOR FANDUEL
WE SPIN UP DOZENS OF MINI-FANDUELS A WEEK
MANAGED TECHNOLOGY MAKES LIFE EASIER
THE AWS TEAM IS ALWAYS HELPING US IMPROVE
-
THE FUTURE
EVENT DRIVEN ARCHITECTURE AND KINESIS
SERVERLESS COMPUTING WITH LAMBDA
UK PRODUCT LAUNCH
SIGN UP READY FOR THE PREMIERSHIP AT FANDUEL.CO.UK
WERE ALSO HIRING - FANDUEL.COM/CAREERS
-
THANK YOU
-
Cloud has removed the constraints for speed and agility
-
Forces Driving New Resource Models
Growing Consumer Power
Intensifying Competition
Decreasing Brand Loyalty
Growing Abundance
Limited Access to Capital
Increasing Uncertainty
-
Uncertainty Requires Different Resource Models
Acquire Resources On Demand
Release Resources When No Longer
Needed
Pay For What You Use
Leverage Others Core Competencies
Turn Fixed Cost Into Variable
-
Uncertainty Drives New Development Models
Smaller, Targeted Applications
Reactive to Customer Needs
More Experimental
Reduce Risk
Deliver Faster
-
Development and Testing is Where Agility Lives
Significant Cost Improvements
Major Productivity Improvements
Faster to MarketTesting with Much Higher Fidelity
Unconstrained Access to Resources
-
ELIMINATE WAIT STATES
Lessons from LEAN:
-
ELIMINATE WAIT STATES
Lessons from LEAN:
-
ELIMINATE WASTE
Lessons from LEAN:
-
ELIMINATE WASTE
Lessons from LEAN:
Waste is anything that does not benefit customers
-
You can switch off your resources when you go home
-
You can switch off your resources when you go home
Typical cost savings up to 75%
-
Its All About Your Applications Not About the Infrastructure
New Application Development
Existing Application Migration
Hybrid Scenarios
-
5 Pillars of Design, Development and Operations
Security Predictable Performance
Reliability Scalability Cost Control
-
The Path to Well Architected, Cloud Native Applications
Use the AWS Well Architected Framework
Build on the five pillars of core cloud functionality
Impacts Design, Implementation, Deployment, Operations
It is the path, not the destination
Where you are on the path determines the services you use
-
Virtual Machines Containers Functions
-
The World of Virtual Machines
Per VM Per Hour
Multi-threaded Multi-task
Hours to MonthsAMI Patching
-
The Story of Amazon.com
Monolithic Application Services Microservices
-
TOM BLOMFIELDCEO, MONDO
-
LEGACY DATA CENTER
-
HOW DO WE USE AWS?
AMAZON EC2 AVAILABILITY ZONES
AMAZON S3
AWS CLOUDHSM
AMAZON ECS CONTAINER REGISTRY
-
RESILIENT
SCALABLE
EXTENSIBLE
SECURE
-
THANK YOU
-
The Move to Microservices is Assisted by the Rise of Containers
Small functional building blocks as output of the development process
Minimizing dependency and reducing complexity of dependency management
-
The World of Containers
Minutes to Days Versioning Multi-threaded Single-task
Per VM Per Hour
Container File
-
The Challenges of Container Based Operation
High AvailabilityInfrastructure Management
Security Task SchedulingPipeline Integration
Container Management
Service Discovery
Resource Access
-
Scheduling One Resource is Straightforward
Server
GuestOS
Bins/Libs Bins/Libs
App2App1
-
Scheduling a Cluster is Hard
AZ1
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
AZ2
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
AZ3
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
Server
GuestOS
-
Amazon EC2 Container Service (ECS) The Best Way to Run Your Containers in Production
Container Management
NO Infrastructure Management
Batch and Long Running Task Scheduling
Container Registry
Access to EBS, ELB,
CloudWatch
Integration With IAM
Multi-AZ Aware
-
What is a Container Manager?
Maintains Available Resources Tracks Resource Changes Accepts Resource Requests Guarantees Accuracy and Consistency
-
Amazon ECS
ContainerInstance
DockerTask
Container
ECSAgent
API
ClusterManagementEngine
TaskContainer
ContainerInstance
DockerTask
Container
ECSAgent
TaskContainer
Key/ValueStore
AgentCommunicationService
Amazon ECS
ContainerInstance
DockerTask
Container
ECSAgent
TaskContainer
ELB ELB
Internet User
-
ECS container management is decoupled from container scheduling
-
ECS Container Scheduling
ECS Task scheduler
Run tasks once
Batch jobs
RunTask (random)
StartTask (placed)
Batch jobs Long-running apps
ECS service scheduler
Health management
Scale-up and scale-down
AZ aware
Grouped containers
-
ECS Scheduling
-
ECS Scheduling
-
ECS Scheduling
-
Designed for Use with Other AWS Services
Elastic Load Balancing Amazon Elastic Block Store Amazon Virtual Private Cloud Amazon CloudWatch
AWS Identity and Access Management AWS CloudTrail
-
AmazonCloudWatchLogs AmazonS3
AmazonKinesis
AWSLambda
AmazonElasticsearchService
Amazon ECS
Store
Stream
Process
Search
CloudWatch Logging with awslogs
AmazonCloudWatchLogs
AmazonCloudWatchLogs
AmazonCloudWatchLogs
-
Automatic Service Scaling
AMAZON ECS
Publish metrics
AMAZON CLOUDWATCH
ELASTIC LOAD BALANCING
AMAZON CLOUDWATCH
Auto Scaling ECS service
Auto Scaling group
AUTO SCALING
Availability Zone A Availability Zone B
TASK A
TASK B
TASK CScale in / Scale out policies
Add/remove ECS tasks
Add/remove EC2 instance
Scale in / Scale out policies
Publish metrics
-
ECS is the Best Way to Run Your Containers in Production
-
Some Signs You Are Not at Microservice Level Yet
Different services do coordinated deployments. A change in one service has unexpected consequences or requires a change in other services. Services share a persistence store. You cannot change your service's persistence tier without anyone caring. Engineers need intimate knowledge of the designs and schemas of other teams' services.
-
A complex system that works is invariably found to have evolved from a simple system that worked. A complex system designed from scratch never works and cannot be patched up to make it work. You have to start over with
a working simple system. Galls Law
The Power of Simplicity
-
The Power of Simplicity
Fewer Lines of Code, Improved Security
Automated Execution, Increased Reliability and Scalability
Fewer Changes, Less Risk and Cost
Less Features, More Reliable Updates
-
Low CostSecureSimplicity Reliability Scalability Low Latency
Lets Bring the Power of Cloud Native to Execution
-
Serverless Computing
No server is easier to manage than no server
-
Instant content managementAdd inline text editing and localization to your website or app - using just Javascript. No more CMS headaches. No more design restrictions. No more language packs.
-
Virtual Machines Containers Functions
-
DYNAMO DB API GATEWAYLAMBDA
S3
ROUTE 53
CLOUDFRONT ROUTE 53
EDITOR
VISITOR
Serverless Architecture Cost < lunch
-
DYNAMO DB API GATEWAYLAMBDA
S3
ROUTE 53
CLOUDFRONT ROUTE 53
EDITOR
VISITOR
Create & Edit Content
Authenticate with Google OpenID Use Cognito to create IAM role Store drafts in DynamoDB
Serverless Architecture Cost < lunch
-
DYNAMO DB API GATEWAYLAMBDA
S3
ROUTE 53
CLOUDFRONT ROUTE 53
EDITOR
VISITOR
Create & Edit Content
Authenticate with Google OpenID Use Cognito to create IAM role Store drafts in DynamoDBPublish Content
Lambda function creates JSON from draft Store as static file in S3 for reliability
Serverless Architecture Cost < lunch
-
DYNAMO DB API GATEWAYLAMBDA
S3
ROUTE 53
CLOUDFRONT ROUTE 53
EDITOR
VISITOR
Serve Content
Create & Edit Content
Authenticate with Google OpenID Use Cognito to create IAM role Store drafts in DynamoDB
Serve as flat JSON files for performance
Publish Content Lambda function creates JSON from draft Store as static file in S3 for reliability
Serverless Architecture Cost < lunch
-
The World of Lambda Functions
Code Single-threaded Single-task
VersioningMicroseconds to Seconds Per Memory/Second Per Request
Free Tier
-
The State of Lambda
Languages
Node.js (JavaScript) Python Java (Java 8 compatible)
Triggers
S3 Bucket DynamoDB Table Kinesis Stream SNS Notification
-
MOBILE CHAT APP
AD DATA ANALYTICS AND ROUTING
MOBILE APP ANALYTICS
IMAGE CONTENT FILTERING
REAL-TIME VIDEO AD BIDDING
NEWS CONTENT PROCESSING
GENE SEQUENCE SEARCH
CLOUD TELEPHONY
DATA PROCESSING
WEB APPLICATIONS
WEB APPLICATIONSTHREAT INTELLIGENCE AND ANALYTICS
NEWS CONTENT PROCESSING
GAME METRICS ANALYTICS
-
Lambda API Gateway S3 CloudFront DynamoDB Kinesis
ElastiCache CloudSearch ElasticSearch SQSSES SNS
There is No Cattle, There is Only the Herd
-
Amazon API Gateway
Create robust, scalable and secure APIs in minutes
Caching Signing & Authorization SDK GenerationMetering and ThrottlingVersioning
-
Amazon API Gateway
MOBILE APPS
WEBSITES
SERVICES
INTERNET
API GATEWAY CACHE
API GATEWAY
CLOUDWATCH
LAMBDA FUNCTIONS
EC2 ENDPOINTS
ANY OTHER ENDPOINT
-
Amazon API Gateway Role in Mobile
DYNAMO DB
API GATEWAY
LAMBDA
LAMBDA
LAMBDA
RDSS3
MOBILE ANALYTICS
SNS
MOBILE DEVICE
AMAZON COGNITO
MOBILE BACKEND
DATA AND CONTENT
ANALYTICS
NOTIFICATIONS
-
Reference Architecture Serverless Web Application
DYNAMO DB
LAMBDA FUNCTION 2
API GATEWAY
S3 ROUTE 53
LAMBDA FUNCTION 1
www.mydashboard.com
Streams
Static HTML/JS website
Twilio Phone Number or Shortcode
-
Reference Architecture Serverless File Processing
DYNAMO DB
LAMBDA FUNCTION 1
S3
LAMBDA FUNCTION 2
LAMBDA FUNCTION N
S3 SNS
-
Reference Architecture Serverless Stream Processing
DYNAMO DB
LAMBDA FUNCTION 1
S3
CLOUDWATCHKINESIS
LAMBDA FUNCTION 2
Event Ingestion Monitoring & Alarms
-
Reference Architecture Serverless Mobile Backend
DYNAMO DBLAMBDA FUNCTION 1
S3
SNS
API GATEWAY
AMAZON COGNITO
LAMBDA FUNCTION 3
LAMBDA FUNCTION 4
CLOUDSEARCH
CLOUDFRONTMedia Files Repository Content Delivery
Network
Mobile Users
Search Engine
Mobile Push Notifications
LAMBDA FUNCTION 2
Database Stream
-
Reference Architecture Serverless IoT Backend
DYNAMO DB
S3
KINESISCLOUDWATCH
LAMBDA FUNCTION 1
LAMBDA FUNCTION 3
LAMBDA FUNCTION 4
Event Data
Monitoring & Alarms
Event Storage
Event StorageREDSHIFT
Event Analytics
ELASTIC MAPREDUCEEvent AnalyticsCONNECTED DEVICES
Synchronous Calls
SPOT INSTANCES
-
Connective Tissue of AWS Environments
CloudWatch Events
ELB LifeCycle
Hooks
Config Rules
Scheduled Jobs
Ecosystem
-
Amazon Cognito - Your User Pools
Add user sign-up and sign-in easily to your mobile and web
apps
Easy User Management
Launch a simple, secure, low-cost, and fully managed service to create and
maintain a user directory that scales to 100s of millions of users
Managed User Directory
Verify phone numbers and email addresses and offer multi-factor authentication
Enhanced Security Features
1 2 3
-
Amazon Cognito Identity
Federated User Identities
Your users can sign-in through social identity providers such as Facebook, Twitter and
SAML providers and you can control access to AWS resources from your app.
Cognito User Pools
You can easily and securely add sign-up and sign-in functionality to your mobile and web apps with a fully-managed service that scales to support 100s of millions of users.
GuestYour own auth
SAML
-
EmailorPhoneNumberVerification
ForgotPassword
UserSign-upandSign-in
UserProfile
SMS-basedMFA
User Scenarios
ManageusersinaUserPool
SelectEmailandPhoneVerification
CustomizewithLambdaTriggers
SetupPasswordPolicies
CreateandManageUserPools
DefineAttributes
Administrator ScenariosToken-basedAuthentication
SecureRemotePasswordProtocol
SMS-basedMulti-factorAuthentication
Secure Foundation
-
Lambda Hook Example Scenarios
Pre user sign-up Custom validation to accept or deny the sign-up request
Custom message Advanced customization and localization of verification messages
Pre user sign-in Custom validation to accept or deny the sign-in request
Post user sign-in Event logging for custom analytics
Post user confirmation Custom welcome messages or event logging for custom analytics
Customization Using Lambda Hooks
-
Lambda API Gateway S3 CloudFront DynamoDB Kinesis
ElastiCache CloudSearch ElasticSearch SQSSES SNS
There is No Cattle, There is Only the Herd
-
DAVID WASCHA GLOBAL DIRECTOR, NEW PRODUCT DEVELOPMENT, TRAVELEX
-
2016GLOBAL BRAND
TECHNOLOGY COMPANY
ENABLING THE FRICTIONLESS FLOW OF MONEY ACROSS BOARDERS
1976FOUNDED IN LONDON
BRICKS & MORTAR RETAILERS
TRAVEL MONEY
-
SPEED
FLEXIBILITY
INNOVATION
SECURITY
RELIABILITY
TRUSTED BRAND&
-
THE SOLUTIONS
SUPERQUEUE
ROUTE 53 + LAMBDA + SQS
SERVERLESS
2 DEVS X 4 WEEKS WORK
-
WHATS AHEAD?
E-COMMERCEDATA SCIENCE & ANALYTICS
CUSTOMER PLATFORM
NEW PRODUCT LAUNCHES
-
THANK YOU
-
It is a journey
-
Integrated networking
Hybrid app deployments
Integrated networking
Hybrid app deployment
Integrated DevOps Management
Integrated DevOps Management
Realtime data integration
integrated resource management
Integrated networking
Integrated DevOps Management
Integrated networking
Data integration
Hybrid app deployment Integrated networkingIntegrated networking
Integrated security
data integration
Integrated Networking
Automated and integrated back-ups
Hybrid as a Stepping Stone
-
What do customers want from hybrid?
-
Parity: Run The Same Application On-Premises and in the Cloud
Integration: Extend On-Premises Infrastructure into the Cloud
Unification: Seamless Management of On-Premises and the Cloud
What Do Customers Want?
A
B
C
-
How Do We Help Customers Achieve Their Definition of Hybrid?
-
ON-PREMISES
Virtual Private CloudDirect Connect AWS Config
Storage Gateway
INTEGRATED NETWORKING
Directory ServiceIdentity Federation
INTEGRATED IDENTITY
INTEGRATED MANAGEMENT
AWS CloudTrail
BACKUPS
OpsWorks
DEPLOYMENT
CodeDeployvCenter & System Center Plugins Metered Billing
MARKETPLACE
AWS
Broad Services for Hybrid Applications
-
1 2 3 4 5Fully-Featured
ComputeIntegratedNetworking
Common Controls for Security & Access
Data Integration &Lifecycle Management
Resource andDeployment Management
How Do We Help Customers Achieve Their Definition of Hybrid?
-
1: Fully Featured Compute
Requirement AWS Service
Simultaneous, Self-Service Provisioning of Many VMs
Single-Tenant Compute
Bring Your Own Image / Instance
Amazon EC2
Amazon EC2 Dedicated Instances
BYOL since 2008
AWS SnowballMassive Scale Import / Export
-
Requirement AWS Service
Isolated Network Within RegionIsolated Network Across Regions
Fully Isolated Network Posture
Network Performance Tiers
Global Content Delivery Network
Amazon Virtual Private Cloud (VPC)Amazon VPC Peering
Private Fiber Network Connects AWS RegionsAWS Direct ConnectPrivate Connection from Your DC to AWS
EBS PIOPS + EBS-Optimized InstancesDNS-Based Global Load Balancing Amazon Route 53
Amazon CloudFrontNetwork Forensic Tools Amazon VPC Flow Logs
Web Application Firewall Amazon Web Application Firewall
2: Integrated Networking
-
Requirement AWS Service
Rich, Role-Based Access ControlsSecurity Info & Event Mgmt (SIEM) Integration
Provider-Enabled Encryption Services
Active Directory (AD) Integration/ AD-aaS
Track Resource Inventory and Changes
AWS Identity & Access ManagementAWS CloudTrail
Encryption Baked into AWS ServicesAWS CloudHSMHSM Support
AWS Directory ServiceCentralized Key Management AWS Key Management Service
AWS Config + AWS Config RulesAutomated Security Assessment AWS Inspector
3: Common Controls for Security and Access
-
Simple Import of Massive Data AmountsBulk Object Delete and Retirement Policies
Customer Ownership of Data
Elastic File System
Database Migration and Conversion
AWS SnowballAmazon S3 Multi-Object Delete and Object
PoliciesCustomers Own The Data
Customers Control the Data LocaleCustomer Control Over Data LocaleAmazon Elastic File System (EFS)
Your Databases, Managed Amazon Relational Database Service (RDS)DB Migration Service & Schema Conversion Tool
Data Warehouse Amazon RedshiftData Archival Amazon Glacier
Gateway-Cached Volumes AWS Storage Gateway
Requirement AWS Service
4: Data Integration and Lifecycle Management
-
Requirement AWS Service
Monitor Resources and ApplicationsCreate and Standardize on Best Practices
Automated Operations Management
Build, Publish and Manage APIs
Release Software Using Continuous Delivery
AWS CloudWatchAWS CloudFormation
AWS OpsWorksAWS Service CatalogCentralize and Simplify Software DeploymentsAmazon API Gateway
Automate Code Deployments AWS CodeDeployAWS CodePipelines
Managed Source Control AWS CodeCommitIntegration with Existing Management Tools Plug-Ins for vCenter, System Center, etc.
5: Resource and Deployment Management
-
Fully-FeaturedCompute
IntegratedNetworking
Common Controls for Security & Access
Data Integration &Lifecycle Mgmt
Resource andDeployment Mgmt
Single-Tenant Compute
Bring Your Own Image/License
Simultaneous, Self-Service Provisioning of Many VMs
Integration with Existing Management Tools
Massive Scale Import / Export
Isolated Network Across Regions
Fully Isolated Network Posture
DNS-Based Global Load Balancing
Network Forensic Tools
Web Application Firewall
Isolated Network within Region
Private Connections from Your DC to AWS
Network Performance Tiers
Global Content Delivery Network
Security Info & Event Management (SIEM) Integration
Provider-Enabled Encryption Services
Centralized Key Management
Automated Security Assessment
Rich, Role-Based Access Controls
Hardware Security Module (HSM) Support
Active Directory (AD) Integration / AD-aaS
Track Resource Inventory and Changes
Bulk Object Delete and Data Lifecycle Mgmt PoliciesCustomer Ownership Of Data
Many Scalable Database Engines
Data WarehouseData Archival
Simple Import of Massive Data Amounts
Customer Control Over Data Locale
Elastic File System
Database Migration and Conversion Tools
Gateway Cached Volumes
Create and Standardize on Best Practices
Automate Operations Management
Release Software Using Continuous Delivery
Monitor Resources And Applications
Centralize and Simplify Software Deployments
Build, Publish and Manage APIs
Managed Source Control
1 2 3 4 5
CustomerDatacenter
Integration with Existing Management Tools
Core Requirements for Hybrid IT
AWS
-
IntegratedNetworking
Common Controls for Security & Access
Data Integration &Lifecycle Management
Resource andDeployment Management
CustomerDatacenter
Rich Partner Ecosystem for Hybrid Architectures
> 70 Direct Connect Partners
Single pane of glass for security management
Integrated Dev/Ops Management Across On-Prem & AWS
Integrated back-up and data management
AWS
-
AWS Marketplace Procurement in EuropeSupport for Hybrid Software Deployments
Through Elastic MeteringAWS Marketplace Now Supports EU-based
ISVs as SellersEU ISVs Currently Listing with
AWS Marketplace
Database & Business Intelligence
Media & Communications
HPC & StorageSecurity & Monitoring
Security &
Business Applications
-
The Journey to AWS is a Well Trodden Path
DEVELOPMENT& TEST
ALL TOGETHER NEW APPLICATIONS
DIGITAL
ANALYTICS
MOBILEDC MIGRATION
MISSIONCRITICAL APPS
ALL IN
1 2 3 4
-
JAMES MUNSONDIRECTOR, DIGITAL SERVICES & TECHNOLOGY, DRIVER AND VEHICLE STANDARDS AGENCY
-
AN AGENCY WITHIN THE DEPARTMENT FOR TRANSPORT
WE IMPROVE ROAD SAFETY IN BRITAIN
350M INCOME & EXPENDITURE
4,500 EMPLOYEES
500 OPERATIONAL SITES
SAFETY STANDARDS SERVICE
-
22,834GARAGES
80,000USERS
42 millionTESTS PER YEAR
65 millionREVENUE
6 billionCAR TAX
COLLECTION
30 millionPASSES PER YEAR
35 AVERAGE MOT FEE
1bn+WORTH OF GARAGE
TRANSACTIONS
MOT - THE CASE FOR CHANGE10 YEAR PFI OUTSOURCED CONTRACT TURNKEY SOLUTION BASED ON PAY PER PASS PROFIT DRIVEN MAINFRAME BASED SYSTEM: END OF LIFE DEDICATED GARAGE HARDWARE EXPENSIVE TO OPERATE UNABLE TO DRIVE EFFICIENCIES FOR USERS
ONE COMPUTER REFRESH OVER 10 YEARS DIAL UP CONNECTION NO MOBILE SUPPORT
-
HOW WE SOLVED THE CHALLENGE
DEVELOPING THE MOT SERVICEEMBEDDED AGILE WAYS OF WORKING
FOCUS ON MVP FIRST RELEASE
INDEPENDENT CLOUD REVIEW
10 WEEKS TO BUILD OUT PRODUCTION ONTO THE AWS CLOUD
TRANSITION TO LIVE HALF WAY OVER ONE WEEKEND
SERVICE DESIGN APPROACHMULTI VENDOR, BLENDED AGILE TEAMS
CLOUD BASED SCALABLE SOLUTION
MOBILE CAPABILITY BYO DEVICES
INTERNAL SERVICE OWNERSHIP
INTERNAL DIGITAL CAPABILITY
INTERNAL SAVINGS TO REINVEST IN THE SERVICE
Service
Digital Ops
MOT Service
-
WHAT DID WE ACHIEVE? Service
Digital Ops
MOT ServiceSWITCHED OFF OLD SERVICE ON TIME
EMBEDDED SERVICE MANAGEMENT
BLENDED DELIVERY TEAMS
EMPOWERED DECISION MAKING
CLOUD ENABLED SERVICE
VISIBLE BACKLOG OF CHANGE
WEEKLY RELEASES
AT 50% OF THE COST OF THE OLD SERVICE
-
DVSA TECHNOLOGY FUTURE PLANS
MAKING USE OF AWS FEATURES FOR 3AZ BLUE/GREEN DEPLOYMENT & AUTOSCALING
USING THE DATA MOT HISTORY, API FOR CONSUMER SERVICES
CONTINUOUS BACKLOG OF IMPROVEMENT ACTIVITIES
NEW SERVICES : CONTINUE TO EXPAND INTERNAL DIGITAL CAPABILITY : BUILDING OUR TECHNOLOGY CAPABILITIES
-
THANK YOU
-
Statcast Personal Finances
Healthcare
Digital
Web E-commerce
App Platform
Digital Services
Media Web SitesDigital Products CRM
Digital Media
Digital Services
Education Analytics
From Experiments to Digital Transformation
-
2014 2015 2016
E.G. INNOVATION LABS, MOBILE APP PILOTS, HACKATHONS
E.G. ONLINE BANKING, STREAM DATA PROCESSING
E.G. MOBILE BANKING APPA Strategic,
Phased Migration
DEVELOP & TEST
PRODUCTION
EXPERIMENTATION
-
The Destination for Many Enterprises: All In
-
TRAINING & CERTIFICATION
Four Key Components of Migration
-
TRAINING & CERTIFICATION
DATA MIGRATION
Four Key Components of Migration
-
SMALL & FREQUENT
HUGE,LESS FREQUENT
MEDIUM &OFTEN
PERSISTANTCONNECTIVITY
Moving Data to the Cloud
-
PERSISTANTCONNECTIVITY
HUGE,LESS FREQUENT
MEDIUM &OFTEN
SMALL & FREQUENT
Moving Data to the Cloud
-
SMALL & FREQUENT
HUGE,LESS FREQUENT
MEDIUM &OFTEN
PERSISTANTCONNECTIVITY
Moving Data to the Cloud
-
KINESIS STREAMSBUILD CUSTOM APPLICATIONS TO
COLLECT & ANALYZE STREAMING DATA
Real Time Streaming Data with Amazon Kinesis
-
KINESIS STREAMSBUILD CUSTOM APPLICATIONS TO
COLLECT & ANALYZE STREAMING DATA
KINESIS FIREHOSEEASILY LOAD STREAMING
DATA INTO AWS
Real Time Streaming Data with Amazon Kinesis
-
KINESIS STREAMSBUILD CUSTOM APPLICATIONS TO
COLLECT & ANALYZE STREAMING DATA
KINESIS FIREHOSEEASILY LOAD STREAMING
DATA INTO AWS
Real Time Streaming Data with Amazon Kinesis
-
KINESIS ANALYTICSRUN STANDARD SQL QUERIES
OVER STREAMING DATA
KINESIS STREAMSBUILD CUSTOM APPLICATIONS TO
COLLECT & ANALYZE STREAMING DATA
KINESIS FIREHOSEEASILY LOAD STREAMING
DATA INTO AWS
Real Time Streaming Data with Amazon Kinesis
-
SMALL & FREQUENT
HUGE,LESS FREQUENT
MEDIUM &OFTEN
PERSISTANTCONNECTIVITY
Moving Data to the Cloud
-
LONG DISTANCEFROM AWS REGION
LARGE SIZE OBJECTS
LARGE NUMBER OF OBJECTS
Moving Data to the Cloud: Limited by the Speed of Light
-
Can we use the AWS Global Network to speed up data in both directions?
-
Accelerate transfers to Amazon S3 using the AWS Edge network
Amazon S3 Transfer Acceleration
-
300% faster for most use cases
Even faster in others
No cost unless its faster
Amazon S3 Transfer Acceleration
-
VIDEO COLLABORATION
VIDEO ANALYSIS
CINEMATIC VIRTUAL REALITY
Amazon S3 Transfer Acceleration Results
-
SMALL & FREQUENT
HUGE,LESS FREQUENT
MEDIUM &OFTEN
PERSISTANTCONNECTIVITY
Moving Data to the Cloud
-
SNOWBALL
PETABYTE SCALE
DATA TRANSPORT SERVICE
-
LARGE CUSTOMER DATASET
END-TO-ENDCUSTODY
CUSTOMER DATASETLOADED
-
10 SNOWBALLS CONNECTED TO YOUR DMZ = THE THROUGHPUT OF A 100G NETWORK CONNECTION
-
30 TIMES670+ MILLION
AROUND THE WORLDOBJECTS MOVED
Snowball Momentum Builds
-
Growing Snowball:
NEW 80T SNOWBALLDEVICE
NEW
-
Growing Snowball:
NEW 80T SNOWBALLDEVICE
NORTHERN CALIFORNIA, DUBLIN & SYDNEY
NEW
-
NEW 80T SNOWBALLDEVICE
ALL AWS REGIONSBY END OF 2016
NORTHERN CALIFORNIA, DUBLIN & SYDNEY
Growing Snowball:
NEW
-
SMALL & FREQUENT
HUGE,LESS FREQUENT
MEDIUM &OFTEN
PERSISTANTCONNECTIVITY
Moving Data to the Cloud
-
SMALL & FREQUENT
HUGE,LESS FREQUENT
MEDIUM &OFTEN
PERSISTANTCONNECTIVITY
Moving Data to the Cloud
-
TRAINING & CERTIFICATION
DATA MIGRATION
DATABASEMIGRATION
Four Key Components of Migration
-
ON-PREMISES DATABASES
AWS Database Migration Service
-
Migrate Between Database Engines
ENGINE A
SCHEMA CONVERSION TOOL
SCHEMA & DATA TRANSFORMATION
DATABASE MIGRATION SERVICE
CONVERT DATABASEFUNCTIONS
TablesPartitonsSequences
ViewsStored ProceduresTriggersFunctions
ENGINE B
-
Amazon Aurora
-
TRAINING & CERTIFICATION
DATA MIGRATION
DATABASEMIGRATION
APPLICATION MIGRATION
Four Key Components of Migration
-
AWS Application Discovery ServiceAutomate the discovery of data center applications and their
dependencies
-
Simplify Application Discovery with AWS ADS
Automatically discovers app inventory
Measures performance baseline
Identifies app and infrastructure dependencies
Data encrypted with Amazon KMS
-
Get Help with Migration from ISV and SI Partners
-
TRAINING & CERTIFICATION
DATA MIGRATION
DATABASEMIGRATION
APPLICATION MIGRATION
Four Key Components of Migration
-
It is a journey
-
There Has Never Been a Better Time to Build!
-
GO BUILD!