1. AWS Cloud
School | London
March 2012

2. Hello

3. Thank you

4. Understand the
services, tools and
patterns for building
highly available
services in the cloud

6. There Will Be Code

7. A brief history of
A prelude
AWS

8. Consumer Seller
business business

9. Decades of experience
Operations, management and
scale

10. Programmatic access

11. Unexpected innovation

12. Blinding flash of
the obvious

14. Five years young

15. Infrastructure services

16. Compute Storage
Placeholder
Services
Databases
& Support

17. Idea Results

18. Idea Results
Heavy lifting

19. Scale
Redundancy
Orchestration
70%
Idea Results
Heavy lifting
Capacity
Management Procurement

20. 30%
Idea Results
Infrastructure

21. Idea Results
AWS

22. Idea Results
AWS

23. Five things I wish
I’d known when I
was getting
started.

24. 1: Signing up

25. On the web

28. Free tier
For new customers:
aws.amazon.com/free

29. 750 hours of compute
10Gb network attached storage
5Gb object storage
750 hours of compute
Key/value store, notifications,
messaging

30. 2: Interacting

31. API driven
HTTP, REST, SOAP

32. CLI

33. ec2-run-instances

34. SDK
Java, Python, Ruby, .Net, PHP,
iOS and Android

35. Management
console

36. Linux

37. Certificate-based
root access

38. mza$ ssh -i web/us-east/aws-web.pem root@ec2-204-236-247-
169.compute-1.amazonaws.comLast login: Wed Jun 22 11:15:20 2011
from 82.26.6.99 __| __|_ ) CentOS _| ( / v5.4
___|___|___| HVMx64 Welcome to an EC2 Public Image
)[root@ip-10-17-135-244 ~]#

39. Windows

40. Administrator
access

42. 3: Storage options

43. Ephemeral storage

44. Included
with
compute
Ephemeral storage
Lost at Not backed
termination up

45. When it’s gone,
it’s gone

46. Elastic Block Store

47. Network Mount as
attached volume
Elastic Block Store
Snapshot Persistent

48. S3
Hands-
on

49. Highly Highly
durable available
S3
Tolerant to
two
simultaneou

50. 99.999999999%
durability

51. Objects in S3
Billions of objects
762B
500k peak transactions per second

52. Charging model

53. Pay as you go

54. Gb/month

55. ECU/hour

56. No minimum

57. No subscriptions

58. Pricing tiers

59. Consolidated
billing

60. Options

61. On-demand

62. Reserved
instances

63. Spot Market
Hands-
on

64. Bandwidth

65. Free inbound

66. Import/Export

67. Pricing calculator

68. aws.amazon.com/calculator

69. 5. Availability Zones

71. us-east-1
us-west-1
us-west-2
us-gov-west-1
eu-west-1
ap-southeast-1
ap-northeast-1
sa-east-1

72. eu-west-1a
eu-west-1b eu-west-1c

73. Building blocks
Foundational services

74. Compute

75. EC2
Elastic Compute Cloud

76. Elastic compute
infrastructure
Hands-
on

77. ECU:
EC2 Compute Unit
Equivalent to 1.0 - 1.2 GHz 2007 Opteron
or 2007 Xeon

78. Instance types

79. Micro Cluster
$0.02 $2.10

80. Standard (m1)
1 ECU. 1.7 Gb memory.
160 Gb ephemeral storage.

81. High memory (m2)
Up to 26 ECU. 8 cores. 68.4 Gb memory.
1.69 Tb ephemeral storage.

82. High CPU (c1)
Up to 20 ECU. 8 cores. 7 Gb memory.
1.69 Tb ephemeral storage.

83. Higher performance

84. Analytics workloads

85. Bandwidth intensive

86. CC:
Cluster Compute

88. Placement groups

89. Full bisectional
bandwidth

90. November 2011

91. GPU computation

92. CloudWatch
Included with all instances
and block storage

93. Custom metrics

95. Storage

96. S3
Simple Storage Service

97. Files in directories

98. Objects in buckets

99. http://s3.amazonaws.com/bucketname/objectid
http://bucketname.s3.amazonaws.com/objectid

100. https://s3.amazonaws.com/bucketname/objectid
https://bucketname.s3.amazonaws.com/objectid

101. Large object support
5Tb

102. Parallel uploads

103. Import/Export

104. Managed
encryption

105. Reduced
redundancy storage
99.99% durability

106. EBS
Elastic Block Store

107. Flexible, off-
instance block
storage

108. Scalable
1Gb to 1Tb

109. Attached to a
running instance
Exposed as a device

110. Snapshot to S3

111. Public Datasets

112. Databases

113. Databases on EC2

114. Oracle and MySQL

115. RDS
Relational Database Service

116. Managed
MySQL/Oracle

117. Scalable storage

118. Instance type

119. Automatic backups

120. Point in time
recovery

121. High availability

122. Read replicas

123. SimpleDB
High scale. Highly available.
Key/attribute store

124. No server to
provision or manage

125. Messaging &
notifications

126. Simple Queue
Service
Hands-
on

127. Simple Notification
Service

128. Elasticity

129. Traditional
capacity is static

130. Capacity
Predicted capacity
Estimated
demand
Time

131. Capacity
Infrastructure
Infrastructure
Investment Estimated
demand
Barrier to
entry
Time

132. Capacity
Infrastructure
Real
demand
Time

133. Capacity
Elastic
capacity
Real
demand
Time

134. Businesses are
constrained

135. Removing
constraints

136. Constrained by
static
infrastructure

137. Unconstrained
by scale

138. 30,000 cores

139. Unconstrained
by cost

140. Optimising for
price

141. On-demand

142. Reserved
capacity

143. Light utilisation
15 to 40% utilisation
Lower costs up to 33%
Use cases:
DR, periodic processing

144. Medium utilisation
The “old” RI
41 to 79% utilisation
Lower costs up to 49%
Use cases:
Web apps, heavy processing

145. Heavy utilisation
80%+ utilisation
Lower costs up to 59%
Use cases:
Databases, HPC, always-on infrastructure

148. Spot Instances
Hands-
on

151. On-demand
+ Reserved
+ Spot

152. “21st Century
architectures”

153. Unconstrained
by time
Upcoming demo day, VC meeting,
impatience, exploratory “spike”

154. 1 instance
for
100 hours

155. 100 instances
for
1 hour

156. Automation

157. Application tier
Code Configuration

158. Application tier
Code Configuration
Service tier
Integration
Operating system
settings
Launch configuration Services + configuration

159. Application tier
Code Configuration
Service tier
Integration
Operating system
settings
Launch configuration Services + configuration
Infrastructure tier
AMIs Architecture Multi-AZ
Scaling rules Security groups Middleware

160. Value baked into
each tier

161. Service tier
Configuration & optimisation
Technology choices

162. Infrastructure tier
Architecture. Configuration.

163. Automation
maximises
this value

164. CloudFormation
Hands-
on

165. Template

166. Template
Defines a full infrastructure stack

167. Template CloudFormation
Provisioned
resources

168. Auto-scaling
RDS
EC2 SNS
SimpleDB
EBS SQS
Resources
Elastic Beanstalk CloudWatch
Security groups Tags

169. Complete
definition
Atomic, idempotent provisioning.

170. Bootstrap
Hands-
on

171. Chef & Puppet

172. Ensuring
security

173. Shared
responsibility

174. Requirement
based access

175. Certification

176. ISO 27001

177. SAS70 Type II

178. Service
Organisation
Controls (SOC 1)
SSAE 16 and ISAE 3702

179. FISMA Moderate

180. HIPAA

181. ITAR
AWS GovCloud (US)

182. Data access
control
Detailed logging

183. Data stays local

184. Identity & Access
Control
Hands-
on

185. Account

186. Account
DBA Developer Sys admin Finance
Roles

187. Account
DBA Developer Sys admin Finance
Roles
Sally
Robert
Users
Chris

188. Security credentials
Multifactor authentication
Management console access
Data read/write access
API level access

189. Account
DBA Developer Sys admin Finance
Roles
Sally
Robert
Users
Chris

190. Networking
controls

191. Virtual Private
Cloud

192. Virtual network
topology

193. IP address range
Public and private subnets
Routing tables
Network gateways

194. Network access
control

195. Inbound ACLs
Outbound ACLs
IPsec VPN

196. Public subnet
Public facing website

197. Public subnet
Network ACLs + security groups
Private subnet
Multi-tier applications

198. Public subnet
Private subnet
IPsec VPN
On-premise
Extend your data centre

199. Private subnet
IPsec VPN
On-premise
Extend your data centre

200. aws.amazon.com/security

201. End of Part One