aws summit london 2016 keynote

179

Click here to load reader

Upload: amazon-web-services

Post on 14-Apr-2017

1.470 views

Category:

Technology


4 download

TRANSCRIPT

  • W E L C O M EAWS Summit, July 2016

  • W E L C O M EGavin Jackson

    Managing Director, AWS UK & Ireland

  • 09:45 Keynote | Dr. Werner Vogels, CTO, Amazon.com

    12:00 Lunch

    12:00 Track Sessions Commence

    14:45 Break

    15:25 Track Sessions Continue

    17:00 Networking Reception

    AWS SUMMIT AGENDA

  • UK (Coming Soon)

  • Solutions Architects

    Account Managers

    Professional Services

    Technical Support

    Training & Certification

    AMAZON WEB SERVICES IN THE UK & IRELAND

  • @AWS_UKI #AWSSummit

  • and many more.

    THANKS TO OUR SPONSORS

  • T H A N K Y O U

  • DR WERNER VOGELSCTO, AMAZON.COM

    @WERNER

    WELCOME

  • FROM 2010

  • AWS grew up fast:

    COMPUTE GROWTH Q3 2014 VS Q3 2015

    DATA TRANSFER GROWTH

    DATABASE SERVICE USAGE GROWTH

    88% 102% 113%

  • AWS 10 years later:

    ACTIVE CUSTOMERS PER MONTH

    RUN RATE YOY GROWTH

    1,000,000+ $10B+ 64%

  • THE TECHNOLOGY PLATFORM OF CHOICE

  • LARGEST NUMBER OF START-UP CUSTOMERS

  • LARGEST NUMBER OF ENTERPRISE CUSTOMERS

  • LARGEST NUMBER OF PUBLIC SECTOR CUSTOMERS

  • BROADEST ECOSYSTEM OF SYSTEM INTEGRATORS

  • BROADEST ECOSYSTEM OF ISVS

  • SURVIVAL

    EFFICIENCY

    TALENT

    Digital Transformation

  • SURVIVAL

    EFFICIENCY

    TALENT

    Digital Transformation

    Jeff Immelt, GE Chairman & CEO

    If you went to bed last night as an industrial company, youre going to wake up this morning as a software and analytics

    company.

  • GE is migrating 9000 workloads over to AWSIntends to reduce the number of datacenters from 34 down to 4

  • COMPUTE

    STORAGE

    DATABASES

    NETWORKING

    MONITORING

    ANALYTICS

    APP SERVICES

    MOBILE SERVICES

    DEV & OPS

    IOT

    MIGRATION

    HYBRID

    VIRTUAL DESKTOPS

    CORPORATE EMAIL

    COLLABORATION

    IDENTITY

    ACCESS CONTROL

    KEY MANAGEMENT

    CONFIG COMPLIANCE

    AUDITING

    BUSINESS APPS

    BUSINESS INTELLIGENCE

    SECURITY

    DEVOPS TOOLS

    NETWORKING

    REGIONS

    AVAILABILITY ZONES

    EDGE POPS

    GLOBAL NETWORK

    GOVCLOUD

    PHYSICAL INFRASTRUCTURE

    INFRASTRUCTURE SERVICES PLATFORM SERVICES ENTERPRISE SERVICES

    SECURITY & COMPLIANCE MARKETPLACE

  • COMPUTE

    STORAGE

    DATABASES

    NETWORKING

    MONITORING

    PLATFORM SERVICES

    ANALYTICS

    APP SERVICES

    MOBILE SERVICES

    DEV & OPS

    IOT

    ENTERPRISE SERVICES

    MIGRATION

    HYBRID

    VIRTUAL DESKTOPS

    CORPORATE EMAIL

    COLLABORATION

    IDENTITY

    ACCESS CONTROL

    KEY MANAGEMENT

    CONFIG COMPLIANCE

    AUDITING

    MARKETPLACE

    BUSINESS APPS

    BUSINESS INTELLIGENCE

    SECURITY

    DEVOPS TOOLS

    NETWORKING

    REGIONS

    AVAILABILITY ZONES

    EDGE POPS

    GLOBAL NETWORK

    GOVCLOUD

    GENERAL PURPOSE (M4) COMPUTE OPTIMIZED (C4) MEMORY OPTIMIZED (R3,

    X1) GPU OPTIMIZED (G2) STORAGE OPTIMIZED (D2) IO OPTIMIZED (I2) LOW COST, BURSTABLE (T2) DEDICATED INSTANCES

    INFRASTRUCTURE SERVICESPHYSICAL INFRASTRUCTURESECURITY & COMPLIANCE

  • COMPUTE

    STORAGE

    DATABASES

    NETWORKING

    MONITORING

    OBJECT, ARCHIVE FILESYSTEM & BLOCK

    STORE GENERAL PURPOSE

    (SSD) PROVISIONED IOPS (SSD) MAGNETIC

    ANALYTICS

    APP SERVICES

    MOBILE SERVICES

    DEV & OPS

    IOT

    MIGRATION

    HYBRID

    VIRTUAL DESKTOPS

    CORPORATE EMAIL

    COLLABORATION

    IDENTITY

    ACCESS CONTROL

    KEY MANAGEMENT

    CONFIG COMPLIANCE

    AUDITING

    BUSINESS APPS

    BUSINESS INTELLIGENCE

    SECURITY

    DEVOPS TOOLS

    NETWORKING

    REGIONS

    AVAILABILITY ZONES

    EDGE POPS

    GLOBAL NETWORK

    GOVCLOUD

    INFRASTRUCTURE SERVICES PLATFORM SERVICES ENTERPRISE SERVICES MARKETPLACEPHYSICAL INFRASTRUCTURE

    SECURITY & COMPLIANCE

  • COMPUTE

    STORAGE

    DATABASES

    NETWORKING

    MONITORING

    MULTI-AZ REPLICATION READ REPLICAS LIKE FOR LIKE MIGRATION CROSS-ENGINE

    MIGRATION

    AMAZON AURORA ANALYTICS

    APP SERVICES

    MOBILE SERVICES

    DEV & OPS

    IOT

    MIGRATION

    HYBRID

    VIRTUAL DESKTOPS

    CORPORATE EMAIL

    COLLABORATION

    IDENTITY

    ACCESS CONTROL

    KEY MANAGEMENT

    CONFIG COMPLIANCE

    AUDITING

    BUSINESS APPS

    BUSINESS INTELLIGENCE

    SECURITY

    DEVOPS TOOLS

    NETWORKING

    REGIONS

    AVAILABILITY ZONES

    EDGE POPS

    GLOBAL NETWORK

    GOVCLOUD

    PLATFORM SERVICES ENTERPRISE SERVICES MARKETPLACEINFRASTRUCTURE SERVICESPHYSICAL INFRASTRUCTURE

    SECURITY & COMPLIANCE

  • SECURITY & COMPLIANCE

    COMPUTE

    STORAGE

    DATABASES

    NETWORKING

    MONITORING

    ANALYTICS

    APP SERVICES

    MOBILE SERVICES

    DEV & OPS

    IOT

    MIGRATION

    HYBRID

    VIRTUAL DESKTOPS

    CORPORATE EMAIL

    COLLABORATION

    IDENTITY

    ACCESS CONTROL

    KEY MANAGEMENT

    CONFIG COMPLIANCE

    AUDITING

    BUSINESS APPS

    BUSINESS INTELLIGENCE

    SECURITY

    DEVOPS TOOLS

    NETWORKING

    REGIONS

    AVAILABILITY ZONES

    EDGE POPS

    GLOBAL NETWORK

    GOVCLOUD

    IDENTITY POLICIES LOCATION POLICIES TIME-BASED POLICIES INDIVIDUAL API CALLS KEY ROTATION TEMPORARY CREDENTIALS POLICY SIMULATOR

    PLATFORM SERVICES ENTERPRISE SERVICES MARKETPLACEINFRASTRUCTURE SERVICESPHYSICAL INFRASTRUCTURE

  • Amazing innovations enabled by agility and a rich collection of services

    DELIVERING 10,000 RELEASES IN 3 MONTHS, VERSUS 1 EVERY

    6 WEEKS PRE-AWS

    MILLIONS OF CONCURRENTPLAYERS AT LAUNCH

    SCALING FROM 38 MILLION MESSAGING USERS TO 170

    MILLION USERS

    ENABLES BUSINESSES TOCOMMUNICATE WITH THEIR

    CUSTOMERS, GLOBALLY

    ANALYZING 20,000 EXOMES IN DEC 2015, UP FROM 3000

    IN 11 MONTHS BEFORE

  • 13 Regions

    35 Availability Zones

    Broad Global Geographic Footprint. Expanding in 2016

  • CTO, FANDUEL

    ROBIN SPIRA

  • FOUNDERS LAUNCHED HUBDUB IN 2007

    PIVOTED TO FANDUEL AT SXSW IN 2009

    FANDUEL PIONEERED DAILY FANTASY SPORTS

    OVER 6 MILLION USERS, 4 MILLION APP DOWNLOADS

    350K ENTRIES PER DAY IN 2014 TO 2.5M PER DAY IN 2015

    FROM STARTUP TO SCALE-UP

  • CAPACITY PLANNING WITH TRADITIONAL HARDWARE IS HARD

    TRANSACTION VOLUME JUMPS FROM 10S PER MINUTE TO 1000S PER SECOND

    WRITE INTENSIVE PLATFORM - LIMITED SCOPE TO SCALE BY CACHING

    DOWNTIME, AT THE WRONG TIME, IS EXPENSIVE

    INTERNATIONAL INFRASTRUCTURE MANAGEMENT

    Thursday

    Sunday

    THE CHALLENGE

  • CLOUDFORMATION MULTI-AZ, MULTI-REGION MANAGED SERVICES ENTERPRISE SUPPORT

    CONSULTANCY INFRASTRUCTURE EVENT MANAGEMENT INSTANT INCIDENT RESPONSE

    HOW WE USE AWS

  • AMAZON AURORA, RDS EVOLVED

    AMAZON AURORA TAKES RDS TO THE NEXT LEVEL

    RTO HALVED FROM 2 MINUTES TO 60 SECONDS - $1.5M ENTRY FEES

    RPO REDUCED TO ZERO - $25K ENTRY FEES PER SECOND

    ELASTIC STORAGE

    2X - 5X IMPROVEMENT IN WRITE PERFORMANCE

  • OUR RELATIONSHIP WITH AWS

    OUR INFRASTRUCTURE TEAM IS HUNDREDS OF PEOPLE, BUT ONLY 12 WORK FOR FANDUEL

    WE SPIN UP DOZENS OF MINI-FANDUELS A WEEK

    MANAGED TECHNOLOGY MAKES LIFE EASIER

    THE AWS TEAM IS ALWAYS HELPING US IMPROVE

  • THE FUTURE

    EVENT DRIVEN ARCHITECTURE AND KINESIS

    SERVERLESS COMPUTING WITH LAMBDA

    UK PRODUCT LAUNCH

    SIGN UP READY FOR THE PREMIERSHIP AT FANDUEL.CO.UK

    WERE ALSO HIRING - FANDUEL.COM/CAREERS

  • THANK YOU

  • Cloud has removed the constraints for speed and agility

  • Forces Driving New Resource Models

    Growing Consumer Power

    Intensifying Competition

    Decreasing Brand Loyalty

    Growing Abundance

    Limited Access to Capital

    Increasing Uncertainty

  • Uncertainty Requires Different Resource Models

    Acquire Resources On Demand

    Release Resources When No Longer

    Needed

    Pay For What You Use

    Leverage Others Core Competencies

    Turn Fixed Cost Into Variable

  • Uncertainty Drives New Development Models

    Smaller, Targeted Applications

    Reactive to Customer Needs

    More Experimental

    Reduce Risk

    Deliver Faster

  • Development and Testing is Where Agility Lives

    Significant Cost Improvements

    Major Productivity Improvements

    Faster to MarketTesting with Much Higher Fidelity

    Unconstrained Access to Resources

  • ELIMINATE WAIT STATES

    Lessons from LEAN:

  • ELIMINATE WAIT STATES

    Lessons from LEAN:

  • ELIMINATE WASTE

    Lessons from LEAN:

  • ELIMINATE WASTE

    Lessons from LEAN:

    Waste is anything that does not benefit customers

  • You can switch off your resources when you go home

  • You can switch off your resources when you go home

    Typical cost savings up to 75%

  • Its All About Your Applications Not About the Infrastructure

    New Application Development

    Existing Application Migration

    Hybrid Scenarios

  • 5 Pillars of Design, Development and Operations

    Security Predictable Performance

    Reliability Scalability Cost Control

  • The Path to Well Architected, Cloud Native Applications

    Use the AWS Well Architected Framework

    Build on the five pillars of core cloud functionality

    Impacts Design, Implementation, Deployment, Operations

    It is the path, not the destination

    Where you are on the path determines the services you use

  • Virtual Machines Containers Functions

  • The World of Virtual Machines

    Per VM Per Hour

    Multi-threaded Multi-task

    Hours to MonthsAMI Patching

  • The Story of Amazon.com

    Monolithic Application Services Microservices

  • TOM BLOMFIELDCEO, MONDO

  • LEGACY DATA CENTER

  • HOW DO WE USE AWS?

    AMAZON EC2 AVAILABILITY ZONES

    AMAZON S3

    AWS CLOUDHSM

    AMAZON ECS CONTAINER REGISTRY

  • RESILIENT

    SCALABLE

    EXTENSIBLE

    SECURE

  • THANK YOU

  • The Move to Microservices is Assisted by the Rise of Containers

    Small functional building blocks as output of the development process

    Minimizing dependency and reducing complexity of dependency management

  • The World of Containers

    Minutes to Days Versioning Multi-threaded Single-task

    Per VM Per Hour

    Container File

  • The Challenges of Container Based Operation

    High AvailabilityInfrastructure Management

    Security Task SchedulingPipeline Integration

    Container Management

    Service Discovery

    Resource Access

  • Scheduling One Resource is Straightforward

    Server

    GuestOS

    Bins/Libs Bins/Libs

    App2App1

  • Scheduling a Cluster is Hard

    AZ1

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    AZ2

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    AZ3

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

    Server

    GuestOS

  • Amazon EC2 Container Service (ECS) The Best Way to Run Your Containers in Production

    Container Management

    NO Infrastructure Management

    Batch and Long Running Task Scheduling

    Container Registry

    Access to EBS, ELB,

    CloudWatch

    Integration With IAM

    Multi-AZ Aware

  • What is a Container Manager?

    Maintains Available Resources Tracks Resource Changes Accepts Resource Requests Guarantees Accuracy and Consistency

  • Amazon ECS

    ContainerInstance

    DockerTask

    Container

    ECSAgent

    API

    ClusterManagementEngine

    TaskContainer

    ContainerInstance

    DockerTask

    Container

    ECSAgent

    TaskContainer

    Key/ValueStore

    AgentCommunicationService

    Amazon ECS

    ContainerInstance

    DockerTask

    Container

    ECSAgent

    TaskContainer

    ELB ELB

    Internet User

  • ECS container management is decoupled from container scheduling

  • ECS Container Scheduling

    ECS Task scheduler

    Run tasks once

    Batch jobs

    RunTask (random)

    StartTask (placed)

    Batch jobs Long-running apps

    ECS service scheduler

    Health management

    Scale-up and scale-down

    AZ aware

    Grouped containers

  • ECS Scheduling

  • ECS Scheduling

  • ECS Scheduling

  • Designed for Use with Other AWS Services

    Elastic Load Balancing Amazon Elastic Block Store Amazon Virtual Private Cloud Amazon CloudWatch

    AWS Identity and Access Management AWS CloudTrail

  • AmazonCloudWatchLogs AmazonS3

    AmazonKinesis

    AWSLambda

    AmazonElasticsearchService

    Amazon ECS

    Store

    Stream

    Process

    Search

    CloudWatch Logging with awslogs

    AmazonCloudWatchLogs

    AmazonCloudWatchLogs

    AmazonCloudWatchLogs

  • Automatic Service Scaling

    AMAZON ECS

    Publish metrics

    AMAZON CLOUDWATCH

    ELASTIC LOAD BALANCING

    AMAZON CLOUDWATCH

    Auto Scaling ECS service

    Auto Scaling group

    AUTO SCALING

    Availability Zone A Availability Zone B

    TASK A

    TASK B

    TASK CScale in / Scale out policies

    Add/remove ECS tasks

    Add/remove EC2 instance

    Scale in / Scale out policies

    Publish metrics

  • ECS is the Best Way to Run Your Containers in Production

  • Some Signs You Are Not at Microservice Level Yet

    Different services do coordinated deployments. A change in one service has unexpected consequences or requires a change in other services. Services share a persistence store. You cannot change your service's persistence tier without anyone caring. Engineers need intimate knowledge of the designs and schemas of other teams' services.

  • A complex system that works is invariably found to have evolved from a simple system that worked. A complex system designed from scratch never works and cannot be patched up to make it work. You have to start over with

    a working simple system. Galls Law

    The Power of Simplicity

  • The Power of Simplicity

    Fewer Lines of Code, Improved Security

    Automated Execution, Increased Reliability and Scalability

    Fewer Changes, Less Risk and Cost

    Less Features, More Reliable Updates

  • Low CostSecureSimplicity Reliability Scalability Low Latency

    Lets Bring the Power of Cloud Native to Execution

  • Serverless Computing

    No server is easier to manage than no server

  • Instant content managementAdd inline text editing and localization to your website or app - using just Javascript. No more CMS headaches. No more design restrictions. No more language packs.

  • Virtual Machines Containers Functions

  • DYNAMO DB API GATEWAYLAMBDA

    S3

    ROUTE 53

    CLOUDFRONT ROUTE 53

    EDITOR

    VISITOR

    Serverless Architecture Cost < lunch

  • DYNAMO DB API GATEWAYLAMBDA

    S3

    ROUTE 53

    CLOUDFRONT ROUTE 53

    EDITOR

    VISITOR

    Create & Edit Content

    Authenticate with Google OpenID Use Cognito to create IAM role Store drafts in DynamoDB

    Serverless Architecture Cost < lunch

  • DYNAMO DB API GATEWAYLAMBDA

    S3

    ROUTE 53

    CLOUDFRONT ROUTE 53

    EDITOR

    VISITOR

    Create & Edit Content

    Authenticate with Google OpenID Use Cognito to create IAM role Store drafts in DynamoDBPublish Content

    Lambda function creates JSON from draft Store as static file in S3 for reliability

    Serverless Architecture Cost < lunch

  • DYNAMO DB API GATEWAYLAMBDA

    S3

    ROUTE 53

    CLOUDFRONT ROUTE 53

    EDITOR

    VISITOR

    Serve Content

    Create & Edit Content

    Authenticate with Google OpenID Use Cognito to create IAM role Store drafts in DynamoDB

    Serve as flat JSON files for performance

    Publish Content Lambda function creates JSON from draft Store as static file in S3 for reliability

    Serverless Architecture Cost < lunch

  • The World of Lambda Functions

    Code Single-threaded Single-task

    VersioningMicroseconds to Seconds Per Memory/Second Per Request

    Free Tier

  • The State of Lambda

    Languages

    Node.js (JavaScript) Python Java (Java 8 compatible)

    Triggers

    S3 Bucket DynamoDB Table Kinesis Stream SNS Notification

  • MOBILE CHAT APP

    AD DATA ANALYTICS AND ROUTING

    MOBILE APP ANALYTICS

    IMAGE CONTENT FILTERING

    REAL-TIME VIDEO AD BIDDING

    NEWS CONTENT PROCESSING

    GENE SEQUENCE SEARCH

    CLOUD TELEPHONY

    DATA PROCESSING

    WEB APPLICATIONS

    WEB APPLICATIONSTHREAT INTELLIGENCE AND ANALYTICS

    NEWS CONTENT PROCESSING

    GAME METRICS ANALYTICS

  • Lambda API Gateway S3 CloudFront DynamoDB Kinesis

    ElastiCache CloudSearch ElasticSearch SQSSES SNS

    There is No Cattle, There is Only the Herd

  • Amazon API Gateway

    Create robust, scalable and secure APIs in minutes

    Caching Signing & Authorization SDK GenerationMetering and ThrottlingVersioning

  • Amazon API Gateway

    MOBILE APPS

    WEBSITES

    SERVICES

    INTERNET

    API GATEWAY CACHE

    API GATEWAY

    CLOUDWATCH

    LAMBDA FUNCTIONS

    EC2 ENDPOINTS

    ANY OTHER ENDPOINT

  • Amazon API Gateway Role in Mobile

    DYNAMO DB

    API GATEWAY

    LAMBDA

    LAMBDA

    LAMBDA

    RDSS3

    MOBILE ANALYTICS

    SNS

    MOBILE DEVICE

    AMAZON COGNITO

    MOBILE BACKEND

    DATA AND CONTENT

    ANALYTICS

    NOTIFICATIONS

  • Reference Architecture Serverless Web Application

    DYNAMO DB

    LAMBDA FUNCTION 2

    API GATEWAY

    S3 ROUTE 53

    LAMBDA FUNCTION 1

    www.mydashboard.com

    Streams

    Static HTML/JS website

    Twilio Phone Number or Shortcode

  • Reference Architecture Serverless File Processing

    DYNAMO DB

    LAMBDA FUNCTION 1

    S3

    LAMBDA FUNCTION 2

    LAMBDA FUNCTION N

    S3 SNS

  • Reference Architecture Serverless Stream Processing

    DYNAMO DB

    LAMBDA FUNCTION 1

    S3

    CLOUDWATCHKINESIS

    LAMBDA FUNCTION 2

    Event Ingestion Monitoring & Alarms

  • Reference Architecture Serverless Mobile Backend

    DYNAMO DBLAMBDA FUNCTION 1

    S3

    SNS

    API GATEWAY

    AMAZON COGNITO

    LAMBDA FUNCTION 3

    LAMBDA FUNCTION 4

    CLOUDSEARCH

    CLOUDFRONTMedia Files Repository Content Delivery

    Network

    Mobile Users

    Search Engine

    Mobile Push Notifications

    LAMBDA FUNCTION 2

    Database Stream

  • Reference Architecture Serverless IoT Backend

    DYNAMO DB

    S3

    KINESISCLOUDWATCH

    LAMBDA FUNCTION 1

    LAMBDA FUNCTION 3

    LAMBDA FUNCTION 4

    Event Data

    Monitoring & Alarms

    Event Storage

    Event StorageREDSHIFT

    Event Analytics

    ELASTIC MAPREDUCEEvent AnalyticsCONNECTED DEVICES

    Synchronous Calls

    SPOT INSTANCES

  • Connective Tissue of AWS Environments

    CloudWatch Events

    ELB LifeCycle

    Hooks

    Config Rules

    Scheduled Jobs

    Ecosystem

  • Amazon Cognito - Your User Pools

    Add user sign-up and sign-in easily to your mobile and web

    apps

    Easy User Management

    Launch a simple, secure, low-cost, and fully managed service to create and

    maintain a user directory that scales to 100s of millions of users

    Managed User Directory

    Verify phone numbers and email addresses and offer multi-factor authentication

    Enhanced Security Features

    1 2 3

  • Amazon Cognito Identity

    Federated User Identities

    Your users can sign-in through social identity providers such as Facebook, Twitter and

    SAML providers and you can control access to AWS resources from your app.

    Cognito User Pools

    You can easily and securely add sign-up and sign-in functionality to your mobile and web apps with a fully-managed service that scales to support 100s of millions of users.

    GuestYour own auth

    SAML

  • EmailorPhoneNumberVerification

    ForgotPassword

    UserSign-upandSign-in

    UserProfile

    SMS-basedMFA

    User Scenarios

    ManageusersinaUserPool

    SelectEmailandPhoneVerification

    CustomizewithLambdaTriggers

    SetupPasswordPolicies

    CreateandManageUserPools

    DefineAttributes

    Administrator ScenariosToken-basedAuthentication

    SecureRemotePasswordProtocol

    SMS-basedMulti-factorAuthentication

    Secure Foundation

  • Lambda Hook Example Scenarios

    Pre user sign-up Custom validation to accept or deny the sign-up request

    Custom message Advanced customization and localization of verification messages

    Pre user sign-in Custom validation to accept or deny the sign-in request

    Post user sign-in Event logging for custom analytics

    Post user confirmation Custom welcome messages or event logging for custom analytics

    Customization Using Lambda Hooks

  • Lambda API Gateway S3 CloudFront DynamoDB Kinesis

    ElastiCache CloudSearch ElasticSearch SQSSES SNS

    There is No Cattle, There is Only the Herd

  • DAVID WASCHA GLOBAL DIRECTOR, NEW PRODUCT DEVELOPMENT, TRAVELEX

  • 2016GLOBAL BRAND

    TECHNOLOGY COMPANY

    ENABLING THE FRICTIONLESS FLOW OF MONEY ACROSS BOARDERS

    1976FOUNDED IN LONDON

    BRICKS & MORTAR RETAILERS

    TRAVEL MONEY

  • SPEED

    FLEXIBILITY

    INNOVATION

    SECURITY

    RELIABILITY

    TRUSTED BRAND&

  • THE SOLUTIONS

    SUPERQUEUE

    ROUTE 53 + LAMBDA + SQS

    SERVERLESS

    2 DEVS X 4 WEEKS WORK

  • WHATS AHEAD?

    E-COMMERCEDATA SCIENCE & ANALYTICS

    CUSTOMER PLATFORM

    NEW PRODUCT LAUNCHES

  • THANK YOU

  • It is a journey

  • Integrated networking

    Hybrid app deployments

    Integrated networking

    Hybrid app deployment

    Integrated DevOps Management

    Integrated DevOps Management

    Realtime data integration

    integrated resource management

    Integrated networking

    Integrated DevOps Management

    Integrated networking

    Data integration

    Hybrid app deployment Integrated networkingIntegrated networking

    Integrated security

    data integration

    Integrated Networking

    Automated and integrated back-ups

    Hybrid as a Stepping Stone

  • What do customers want from hybrid?

  • Parity: Run The Same Application On-Premises and in the Cloud

    Integration: Extend On-Premises Infrastructure into the Cloud

    Unification: Seamless Management of On-Premises and the Cloud

    What Do Customers Want?

    A

    B

    C

  • How Do We Help Customers Achieve Their Definition of Hybrid?

  • ON-PREMISES

    Virtual Private CloudDirect Connect AWS Config

    Storage Gateway

    INTEGRATED NETWORKING

    Directory ServiceIdentity Federation

    INTEGRATED IDENTITY

    INTEGRATED MANAGEMENT

    AWS CloudTrail

    BACKUPS

    OpsWorks

    DEPLOYMENT

    CodeDeployvCenter & System Center Plugins Metered Billing

    MARKETPLACE

    AWS

    Broad Services for Hybrid Applications

  • 1 2 3 4 5Fully-Featured

    ComputeIntegratedNetworking

    Common Controls for Security & Access

    Data Integration &Lifecycle Management

    Resource andDeployment Management

    How Do We Help Customers Achieve Their Definition of Hybrid?

  • 1: Fully Featured Compute

    Requirement AWS Service

    Simultaneous, Self-Service Provisioning of Many VMs

    Single-Tenant Compute

    Bring Your Own Image / Instance

    Amazon EC2

    Amazon EC2 Dedicated Instances

    BYOL since 2008

    AWS SnowballMassive Scale Import / Export

  • Requirement AWS Service

    Isolated Network Within RegionIsolated Network Across Regions

    Fully Isolated Network Posture

    Network Performance Tiers

    Global Content Delivery Network

    Amazon Virtual Private Cloud (VPC)Amazon VPC Peering

    Private Fiber Network Connects AWS RegionsAWS Direct ConnectPrivate Connection from Your DC to AWS

    EBS PIOPS + EBS-Optimized InstancesDNS-Based Global Load Balancing Amazon Route 53

    Amazon CloudFrontNetwork Forensic Tools Amazon VPC Flow Logs

    Web Application Firewall Amazon Web Application Firewall

    2: Integrated Networking

  • Requirement AWS Service

    Rich, Role-Based Access ControlsSecurity Info & Event Mgmt (SIEM) Integration

    Provider-Enabled Encryption Services

    Active Directory (AD) Integration/ AD-aaS

    Track Resource Inventory and Changes

    AWS Identity & Access ManagementAWS CloudTrail

    Encryption Baked into AWS ServicesAWS CloudHSMHSM Support

    AWS Directory ServiceCentralized Key Management AWS Key Management Service

    AWS Config + AWS Config RulesAutomated Security Assessment AWS Inspector

    3: Common Controls for Security and Access

  • Simple Import of Massive Data AmountsBulk Object Delete and Retirement Policies

    Customer Ownership of Data

    Elastic File System

    Database Migration and Conversion

    AWS SnowballAmazon S3 Multi-Object Delete and Object

    PoliciesCustomers Own The Data

    Customers Control the Data LocaleCustomer Control Over Data LocaleAmazon Elastic File System (EFS)

    Your Databases, Managed Amazon Relational Database Service (RDS)DB Migration Service & Schema Conversion Tool

    Data Warehouse Amazon RedshiftData Archival Amazon Glacier

    Gateway-Cached Volumes AWS Storage Gateway

    Requirement AWS Service

    4: Data Integration and Lifecycle Management

  • Requirement AWS Service

    Monitor Resources and ApplicationsCreate and Standardize on Best Practices

    Automated Operations Management

    Build, Publish and Manage APIs

    Release Software Using Continuous Delivery

    AWS CloudWatchAWS CloudFormation

    AWS OpsWorksAWS Service CatalogCentralize and Simplify Software DeploymentsAmazon API Gateway

    Automate Code Deployments AWS CodeDeployAWS CodePipelines

    Managed Source Control AWS CodeCommitIntegration with Existing Management Tools Plug-Ins for vCenter, System Center, etc.

    5: Resource and Deployment Management

  • Fully-FeaturedCompute

    IntegratedNetworking

    Common Controls for Security & Access

    Data Integration &Lifecycle Mgmt

    Resource andDeployment Mgmt

    Single-Tenant Compute

    Bring Your Own Image/License

    Simultaneous, Self-Service Provisioning of Many VMs

    Integration with Existing Management Tools

    Massive Scale Import / Export

    Isolated Network Across Regions

    Fully Isolated Network Posture

    DNS-Based Global Load Balancing

    Network Forensic Tools

    Web Application Firewall

    Isolated Network within Region

    Private Connections from Your DC to AWS

    Network Performance Tiers

    Global Content Delivery Network

    Security Info & Event Management (SIEM) Integration

    Provider-Enabled Encryption Services

    Centralized Key Management

    Automated Security Assessment

    Rich, Role-Based Access Controls

    Hardware Security Module (HSM) Support

    Active Directory (AD) Integration / AD-aaS

    Track Resource Inventory and Changes

    Bulk Object Delete and Data Lifecycle Mgmt PoliciesCustomer Ownership Of Data

    Many Scalable Database Engines

    Data WarehouseData Archival

    Simple Import of Massive Data Amounts

    Customer Control Over Data Locale

    Elastic File System

    Database Migration and Conversion Tools

    Gateway Cached Volumes

    Create and Standardize on Best Practices

    Automate Operations Management

    Release Software Using Continuous Delivery

    Monitor Resources And Applications

    Centralize and Simplify Software Deployments

    Build, Publish and Manage APIs

    Managed Source Control

    1 2 3 4 5

    CustomerDatacenter

    Integration with Existing Management Tools

    Core Requirements for Hybrid IT

    AWS

  • IntegratedNetworking

    Common Controls for Security & Access

    Data Integration &Lifecycle Management

    Resource andDeployment Management

    CustomerDatacenter

    Rich Partner Ecosystem for Hybrid Architectures

    > 70 Direct Connect Partners

    Single pane of glass for security management

    Integrated Dev/Ops Management Across On-Prem & AWS

    Integrated back-up and data management

    AWS

  • AWS Marketplace Procurement in EuropeSupport for Hybrid Software Deployments

    Through Elastic MeteringAWS Marketplace Now Supports EU-based

    ISVs as SellersEU ISVs Currently Listing with

    AWS Marketplace

    Database & Business Intelligence

    Media & Communications

    HPC & StorageSecurity & Monitoring

    Security &

    Business Applications

  • The Journey to AWS is a Well Trodden Path

    DEVELOPMENT& TEST

    ALL TOGETHER NEW APPLICATIONS

    DIGITAL

    ANALYTICS

    MOBILEDC MIGRATION

    MISSIONCRITICAL APPS

    ALL IN

    1 2 3 4

  • JAMES MUNSONDIRECTOR, DIGITAL SERVICES & TECHNOLOGY, DRIVER AND VEHICLE STANDARDS AGENCY

  • AN AGENCY WITHIN THE DEPARTMENT FOR TRANSPORT

    WE IMPROVE ROAD SAFETY IN BRITAIN

    350M INCOME & EXPENDITURE

    4,500 EMPLOYEES

    500 OPERATIONAL SITES

    SAFETY STANDARDS SERVICE

  • 22,834GARAGES

    80,000USERS

    42 millionTESTS PER YEAR

    65 millionREVENUE

    6 billionCAR TAX

    COLLECTION

    30 millionPASSES PER YEAR

    35 AVERAGE MOT FEE

    1bn+WORTH OF GARAGE

    TRANSACTIONS

    MOT - THE CASE FOR CHANGE10 YEAR PFI OUTSOURCED CONTRACT TURNKEY SOLUTION BASED ON PAY PER PASS PROFIT DRIVEN MAINFRAME BASED SYSTEM: END OF LIFE DEDICATED GARAGE HARDWARE EXPENSIVE TO OPERATE UNABLE TO DRIVE EFFICIENCIES FOR USERS

    ONE COMPUTER REFRESH OVER 10 YEARS DIAL UP CONNECTION NO MOBILE SUPPORT

  • HOW WE SOLVED THE CHALLENGE

    DEVELOPING THE MOT SERVICEEMBEDDED AGILE WAYS OF WORKING

    FOCUS ON MVP FIRST RELEASE

    INDEPENDENT CLOUD REVIEW

    10 WEEKS TO BUILD OUT PRODUCTION ONTO THE AWS CLOUD

    TRANSITION TO LIVE HALF WAY OVER ONE WEEKEND

    SERVICE DESIGN APPROACHMULTI VENDOR, BLENDED AGILE TEAMS

    CLOUD BASED SCALABLE SOLUTION

    MOBILE CAPABILITY BYO DEVICES

    INTERNAL SERVICE OWNERSHIP

    INTERNAL DIGITAL CAPABILITY

    INTERNAL SAVINGS TO REINVEST IN THE SERVICE

    Service

    Digital Ops

    MOT Service

  • WHAT DID WE ACHIEVE? Service

    Digital Ops

    MOT ServiceSWITCHED OFF OLD SERVICE ON TIME

    EMBEDDED SERVICE MANAGEMENT

    BLENDED DELIVERY TEAMS

    EMPOWERED DECISION MAKING

    CLOUD ENABLED SERVICE

    VISIBLE BACKLOG OF CHANGE

    WEEKLY RELEASES

    AT 50% OF THE COST OF THE OLD SERVICE

  • DVSA TECHNOLOGY FUTURE PLANS

    MAKING USE OF AWS FEATURES FOR 3AZ BLUE/GREEN DEPLOYMENT & AUTOSCALING

    USING THE DATA MOT HISTORY, API FOR CONSUMER SERVICES

    CONTINUOUS BACKLOG OF IMPROVEMENT ACTIVITIES

    NEW SERVICES : CONTINUE TO EXPAND INTERNAL DIGITAL CAPABILITY : BUILDING OUR TECHNOLOGY CAPABILITIES

  • THANK YOU

  • Statcast Personal Finances

    Healthcare

    Digital

    Web E-commerce

    App Platform

    Digital Services

    Media Web SitesDigital Products CRM

    Digital Media

    Digital Services

    Education Analytics

    From Experiments to Digital Transformation

  • 2014 2015 2016

    E.G. INNOVATION LABS, MOBILE APP PILOTS, HACKATHONS

    E.G. ONLINE BANKING, STREAM DATA PROCESSING

    E.G. MOBILE BANKING APPA Strategic,

    Phased Migration

    DEVELOP & TEST

    PRODUCTION

    EXPERIMENTATION

  • The Destination for Many Enterprises: All In

  • TRAINING & CERTIFICATION

    Four Key Components of Migration

  • TRAINING & CERTIFICATION

    DATA MIGRATION

    Four Key Components of Migration

  • SMALL & FREQUENT

    HUGE,LESS FREQUENT

    MEDIUM &OFTEN

    PERSISTANTCONNECTIVITY

    Moving Data to the Cloud

  • PERSISTANTCONNECTIVITY

    HUGE,LESS FREQUENT

    MEDIUM &OFTEN

    SMALL & FREQUENT

    Moving Data to the Cloud

  • SMALL & FREQUENT

    HUGE,LESS FREQUENT

    MEDIUM &OFTEN

    PERSISTANTCONNECTIVITY

    Moving Data to the Cloud

  • KINESIS STREAMSBUILD CUSTOM APPLICATIONS TO

    COLLECT & ANALYZE STREAMING DATA

    Real Time Streaming Data with Amazon Kinesis

  • KINESIS STREAMSBUILD CUSTOM APPLICATIONS TO

    COLLECT & ANALYZE STREAMING DATA

    KINESIS FIREHOSEEASILY LOAD STREAMING

    DATA INTO AWS

    Real Time Streaming Data with Amazon Kinesis

  • KINESIS STREAMSBUILD CUSTOM APPLICATIONS TO

    COLLECT & ANALYZE STREAMING DATA

    KINESIS FIREHOSEEASILY LOAD STREAMING

    DATA INTO AWS

    Real Time Streaming Data with Amazon Kinesis

  • KINESIS ANALYTICSRUN STANDARD SQL QUERIES

    OVER STREAMING DATA

    KINESIS STREAMSBUILD CUSTOM APPLICATIONS TO

    COLLECT & ANALYZE STREAMING DATA

    KINESIS FIREHOSEEASILY LOAD STREAMING

    DATA INTO AWS

    Real Time Streaming Data with Amazon Kinesis

  • SMALL & FREQUENT

    HUGE,LESS FREQUENT

    MEDIUM &OFTEN

    PERSISTANTCONNECTIVITY

    Moving Data to the Cloud

  • LONG DISTANCEFROM AWS REGION

    LARGE SIZE OBJECTS

    LARGE NUMBER OF OBJECTS

    Moving Data to the Cloud: Limited by the Speed of Light

  • Can we use the AWS Global Network to speed up data in both directions?

  • Accelerate transfers to Amazon S3 using the AWS Edge network

    Amazon S3 Transfer Acceleration

  • 300% faster for most use cases

    Even faster in others

    No cost unless its faster

    Amazon S3 Transfer Acceleration

  • VIDEO COLLABORATION

    VIDEO ANALYSIS

    CINEMATIC VIRTUAL REALITY

    Amazon S3 Transfer Acceleration Results

  • SMALL & FREQUENT

    HUGE,LESS FREQUENT

    MEDIUM &OFTEN

    PERSISTANTCONNECTIVITY

    Moving Data to the Cloud

  • SNOWBALL

    PETABYTE SCALE

    DATA TRANSPORT SERVICE

  • LARGE CUSTOMER DATASET

    END-TO-ENDCUSTODY

    CUSTOMER DATASETLOADED

  • 10 SNOWBALLS CONNECTED TO YOUR DMZ = THE THROUGHPUT OF A 100G NETWORK CONNECTION

  • 30 TIMES670+ MILLION

    AROUND THE WORLDOBJECTS MOVED

    Snowball Momentum Builds

  • Growing Snowball:

    NEW 80T SNOWBALLDEVICE

    NEW

  • Growing Snowball:

    NEW 80T SNOWBALLDEVICE

    NORTHERN CALIFORNIA, DUBLIN & SYDNEY

    NEW

  • NEW 80T SNOWBALLDEVICE

    ALL AWS REGIONSBY END OF 2016

    NORTHERN CALIFORNIA, DUBLIN & SYDNEY

    Growing Snowball:

    NEW

  • SMALL & FREQUENT

    HUGE,LESS FREQUENT

    MEDIUM &OFTEN

    PERSISTANTCONNECTIVITY

    Moving Data to the Cloud

  • SMALL & FREQUENT

    HUGE,LESS FREQUENT

    MEDIUM &OFTEN

    PERSISTANTCONNECTIVITY

    Moving Data to the Cloud

  • TRAINING & CERTIFICATION

    DATA MIGRATION

    DATABASEMIGRATION

    Four Key Components of Migration

  • ON-PREMISES DATABASES

    AWS Database Migration Service

  • Migrate Between Database Engines

    ENGINE A

    SCHEMA CONVERSION TOOL

    SCHEMA & DATA TRANSFORMATION

    DATABASE MIGRATION SERVICE

    CONVERT DATABASEFUNCTIONS

    TablesPartitonsSequences

    ViewsStored ProceduresTriggersFunctions

    ENGINE B

  • Amazon Aurora

  • TRAINING & CERTIFICATION

    DATA MIGRATION

    DATABASEMIGRATION

    APPLICATION MIGRATION

    Four Key Components of Migration

  • AWS Application Discovery ServiceAutomate the discovery of data center applications and their

    dependencies

  • Simplify Application Discovery with AWS ADS

    Automatically discovers app inventory

    Measures performance baseline

    Identifies app and infrastructure dependencies

    Data encrypted with Amazon KMS

  • Get Help with Migration from ISV and SI Partners

  • TRAINING & CERTIFICATION

    DATA MIGRATION

    DATABASEMIGRATION

    APPLICATION MIGRATION

    Four Key Components of Migration

  • It is a journey

  • There Has Never Been a Better Time to Build!

  • GO BUILD!