APN Live-AWS Core Services

Solution Training for Partners:
Technical Foundations
An Introduction to AWS Services
Osemeke Isibor
Partner Solutions Architect
iosemeke@amazon.com
Hong Kong
July 22, 2019

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Quick Recap
What is AWS?
What is an AWS Region?
How many regions do AWS have?
How many AWS Regions in Hong Kong?

Compute
Amazon
EC2
Amazon
ECS
Amazon
Lightsail
AWS Batch
AWS Elastic
Beanstalk
AWS Lambda
Storage
Amazon EFS
Amazon
Glacier
Amazon
S3
AWS Snowball
AWS Storage
Gateway
Amazon EBS
Database
AWS DMS
AWS SMS
Amazon
DynamoDB
Amazon
ElastiCache
Amazon
RDS
Amazon
Redshift
AWS
CodeCommit
AWS
CodeDeploy
AWS
CodePipeline
AWS X-RayAWS
CodeBuild
Developer Tools
Amazon API
Gateway
Amazon
AppStream
AWS Step
Functions
Amazon Elastic
Transcoder
Amazon
SWF
Application
Services
Network
Amazon
CloudFront
Amazon
VPC
Amazon
Route 53
AWS
Direct
Connect
Elastic Load
Balancing
Analytics
Amazon ESAmazon
EMR
Amazon
Kinesis
Amazon
Athena
Amazon
CloudSearc
h
Amazon
QuickSight
AWS Glue
Security, Identity,
Compliance
AWS
CloudHSM
AWS
Directory
Service
AWS
Certificate
Manager
Amazon
Inspector
IAM
AWS WAFAWS KMS
AWS Shield
AWS
Organizations
Management Tools
Amazon
CloudWatch
AWS
CloudFormatio
n
AWS
CloudTrail
AWS
Config
AWS Managed
Services
AWS
OpsWorks
AWS Trusted
Advisor
AWS
Service
Catalog
Artificial
IntelligenceAmazon Lex
Amazon Polly
Amazon
Rekognition
AmazonMachine
Learning
Internet of
Things
AWS IoT
AWS
Greengrass
Mobile Services
Amazon
Cognito
Amazon
MobileAnalytics
AWS
Device Farm
AWS
Mobile Hub
Amazon API
Gateway
Amazon
Pinpoint
Messaging
Amazon
SES
Amazon
SQS
Amazon
SNS
Amazon
Pinpoint
Desktop &
App Streaming Amazon
WorkSpaces
Amazon
AppStream 2.0
Business
Productivity
Amazon
WorkDocs
Amazon
WorkMail
Game Development
Amazon GameLift
What services does AWS offer?

AWS Services

AWS Foundational Services
Amazon
EC2
Amazon ECS
AWS
Lambda
Auto Scaling
Compute
Amazon
RDS
Amazon
DynamoDB
Amazon
Aurora
Amazon
ElastiCache
Databases Security
IAM
AWS KMS AWS Shield
AWS WAFElastic Load
Balancing*
Amazon
VPC*
Amazon
Route 53
VPN
connection
Application
Load
Balancer
AWS Direct
Connect
NetworkingStorage
Amazon
S3
Amazon
Glacier
Amazon EBS Amazon
CloudWatch
AWS
CloudFormation
AWS
CloudTrail
AWS
Config
Management
Amazon EC2
Systems Manager

Amazon Elastic Compute Cloud
(Amazon EC2)
Virtual machine instance running on an AWS hypervisor
Support numerous distributions of Linux or Microsoft
Windows
Complete control of your host operating system with
root and administrator accounts
Responsible for all installed applications
https://aws.amazon.com/ec2/

EC2 Instances: Families and Generations
https://aws.amazon.com/ec2/instance-types/
General-purpose: M4, M5, T2
Compute-optimized: C4, C5
Memory-optimized: R4, X1
Dense-storage: D2, H1, I3
I/O-optimized: HI1, I2
GPU: F1, G3, P2
Micro: T1, T2
Customers can change instance types seamlessly.

https://aws.amazon.com/ec2/instance-types/
EC2 instances: Types and Sizes

EC2 Purchasing Options
On-Demand
Pay for compute capacity by the
second with no long-term
commitments
Spiky workloads, to define needs
Reserved
Make a 1 or 3 Year commitment
and receive a significant
discount off On-Demand prices
Committed, steady-state usage
Spot
Spare EC2 capacity at savings
of up to 90% off On-Demand
prices
Fault-tolerant, dev/test, time-
flexible, stateless workloads
https://aws.amazon.com/ec2/pricing/

Amazon Elastic Compute Cloud (EC2)
Auto Scaling Groups
Scale Amazon EC2 instances seamlessly and automatically
Launch or terminate instances to meet desired capacity
Keeps capacity balanced across AZs
Replace unhealthy or unreachable instances
Policy-based. Integrates with other AWS services
Use Cases:
Dynamic scaling - Optimize EC2 resources rapidly
Reduce cost. Manage pricing.
Fleet management – Balance. Recover from failures.
https://aws.amazon.com/ec2/autoscaling/

Amazon Container Services (ECS/EKS)
Elastic Container Service and Elastic Container Service for
Kubernetes
AWS runs the EC2 cluster management for you
Eliminates the complexity of operating container infrastructure
Use Cases
Deploy microservices to speed innovation
Batch processing
Migrate legacy applications without requiring code changes
Accelerate machine learning
https://aws.amazon.com/ecs/

AWS Fargate
Allows customers to run containers without managing a cluster.
Leverages Amazon ECS and EKS
Launch tens of thousands of containers in seconds
Integrates with auto scaling for optimal utilization
https://aws.amazon.com/fargate/

AWS Lambda
A stateless compute service that runs code in response to an event
Triggers in milliseconds.
Billed in 100ms increments. Pay only for what you use.
No virtual servers required.
Use Cases:
Building modular, scalable, lightweight applications
Serverless data processing on demand
Use AWS Step-Functions to orchestrate Lambda architectures
Perform data validation, filtering, sorting, or other transformations.
Image thumb-nailing, in-app activity, website clicks, or output from devices
https://aws.amazon.com/lambda/

Amazon Elastic Block Storage (EBS)
Block storage volumes for use with Amazon EC2 instances
Persistent storage attached to EC2 instances as native disk
Formatted using a standard OS file system (e.g. ext4 or NTFS)
Scalable, high-performance storage for applications
Use Cases
Boot/root volumes for EC2 instances
Data volumes for enterprise applications such as SAP, Microsoft
Exchange and Microsoft SharePoint.
Relational or NoSQL databases supporting millions of users.
https://aws.amazon.com/ebs/

Amazon Simple Storage Service
(Amazon S3)
Highly scalable, reliable, fast, durable object storage
Store and retrieve any amount of data from anywhere on the
web using HTTP or HTTPS.
A workhorse service that serves many purposes
Use cases:
Application file hosting
Backup for disaster recovery
Static web hosting
Streaming data
Data lakes
https://aws.amazon.com/s3/

Choice of storage classes on Amazon S3
Standard
Standard –
Infrequent Access
Amazon
Glacier
One Zone –
Infrequent Access
Active data Archive dataInfrequently accessed data

Amazon S3 One Zone-IA
An S3 storage class built for easily re-creatable data
Designed on a single Availability Zone
Still 99.9999999% durable but less available and resilient - for
20% less cost
Use it for:
Mobile or Enterprise backup data
Off-site compliance data
Disaster recovery data
Derived analysis data

Data Lakes
Central Storage
Secure, Cost Effective
Storage in S3
S3
Catalog & Search
Access & Search Metadata
DynamoDB Amazon ES
Access & User Interface
Give your users easy & secure access
API Gateway IAM Cognito
Protect & Secure
Use entitlements to ensure data is secure and users identities are verified
Security Token
Service
Cloudwatch Cloudtrail KMS
Athena Quicksight EMR Redshift
Processing & Analytics
Use predictive and prescriptive
analytics to gain better understanding
Kinesis
Firehose Direct Connect Snowball DMS
Data Ingestion
Get your data into S3
quickly and securely

Amazon Glacier
Long term storage solution
Optimized for data that is infrequently accessed
Minutes to hours to begin accessing stored data
Extremely low cost
Use Cases:
Long-term storage
Data archiving
Data lifecycle automation
https://aws.amazon.com/glacier/

Amazon Virtual Private Cloud
Amazon VPC
Isolated virtual subnets in the AWS Cloud
Secure, performant, highly-configurable
Support rich security
Use Cases:
Host both public and private resources
Organize/isolate applications components
Isolate resources by logical entity, group, sensitivity, or function
Extend on-prem networks into the cloud
https://aws.amazon.com/vpc/

What is Amazon VPC?
Your own logically isolated section of the Amazon Web
Services (AWS) cloud
By default, your VPC has no access to the internet, nor are
instances addressable from the internet
You have complete control over your virtual networking
environment
Proven and well-understood networking concepts:
User defined IP address range
Subnets
Route tables
Access control lists
Network gateways
A way to gain agility as well as additional security

VPCs as Strategy
Like any production application, AWS
solutions should be deployed in a
landscape of multiple environments
Each environment should be in its own
Amazon VPC
At a minimum, consider production
and development VPC environments
Can make sense to add environments
for test, future development (“dev+1”),
staging, and other purposes
Remember, AWS environments with
intermittent use (such as test) can be
stopped when not in use, helping to
limit costs
Test VPC
Users
Quick Start Design with Test, Production, and Development VPCs
Archive
Logs Bucket
S3 Lifecycle
Policies to
Glacier
CloudTrailAWS Config
Rules
CloudWatch
Alarms
NAT
us-east-1b
Bastion
us-east-1c
Potential use
for security
appliances for
monitoring,
logging, etc.

Corporate Datacenter Connectivity
Ways to connect to resources in your VPC:
Over the internet
Virtual private network (VPN) using IPSec
Configured in minutes
AWS Direct Connect
Service provided by Amazon Partner Network (APN) Partners
Private link
https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/endpoint-service.html

Corporate Datacenter Connectivity

Amazon Elastic Load Balancing (ELB)
Automatically distributes incoming application traffic
Incorporates new resources as applications scale, automatically
Detects and accommodates application faults
Pool AWS cloud and on-premises resources seamlessly
Integrates with other AWS services
Route 53
Internet Gateway
Identity and Access Management
https://aws.amazon.com/elasticloadbalancing/

Application Load Balancer
Part of Elastic Load Balancing (ELB)
Balances load at the application layer (Layer 7)
Supports HTTPS termination and offload
Improves application security
Routes requests based upon the content requested (URL).
Use case:
HTTP and HTTPS traffic
Advanced request routing
Microservices and container-based applications.
https://aws.amazon.com/about-aws/whats-new/2016/08/announcing-application-load-balancer-
for-elastic-load-balancing/

Network Load Balancer (NLB)
Ultra-low latency handles tens of millions of requests per second
“IP-per-AZ” feature improves performance, and fault-tolerance
Preserves the source IP address and ports for incoming connections
Connections can be open for months or years
Supports failover between IP addresses within and across regions
Use Case:
Hard-coded IP address
Microservices
https://aws.amazon.com/elasticloadbalancing/details/#compare

Amazon CloudFront
Content delivery network (CDN) with optimization
Distribute content to end users with low latency and high data
transfer rates
Broad, geographic presence beyond AWS Regions
Accelerate data uploaded from end users
Use cases:
Accelerating web application performance
Caching static web content and frequent database query results
Offloading TLS termination
Currently 187 Edge Locations
https://aws.amazon.com/cloudfront/

Amazon Route 53
Global Domain Name System (DNS) service
Highly available and scalable – 100% availability SLA
Critical tool integrated with many AWS services
Use Cases:
Optimized Routing
Failover
Geolocation Compliance
Integrated with other AWS services
Micro-segmentation
https://aws.amazon.com/route53/

Amazon Relational Database Service
Managed service for MySQL, Oracle, Microsoft SQL Server,
MariaDB, and Amazon Aurora
Handles time-consuming database management tasks, such as
backups, patch management, and replication
Works with existing code, applications, and tools
Use Cases:
Any applications requiring a relational database
Improving database performance, availability and scalability
https://aws.amazon.com/rds/

Amazon Aurora
MySQL/PostgreSQL-compatible relational database service
Part of Amazon RDS
Higher performance than standard MySQL and PostgreSQL
High-availability without complex server management
Scales and optimizes storage automatically
Use Cases
Any application that uses a relational database
Replace on-premises or AWS EC2-hosted MySQL or PostgreSQL
https://aws.amazon.com/rds/aurora/

Amazon DynamoDB
Fast, flexible, fully-managed, NoSQL database service
Single-digit millisecond latency at any scale
Highly available, replicated across multiple availability zones and
between regions
Use Cases:
High-performance database applications
Ad Tech
Big Data
Gaming
Mobile/IoT
https://aws.amazon.com/dynamodb/

Amazon ElastiCache
A fully-managed open-source-compatible, Redis and
Memcached service.
Improves performance by retrieving data from high-throughput
and low-latency, in-memory data stores.
Use Cases:
Gaming
Ad-Tech
Financial Services
Healthcare
IoT
https://aws.amazon.com/elasticache/

AWS Identity & Access Management
A core AWS security service
Create and manage AWS users, roles and groups
Manage fine-grained access control to AWS resources
Control what operations a user or service can perform
Integrates with Microsoft Active Directory using SAML identity
federation and AWS Directory Service (AD Connector)
Allows scalable, consistent security and auditability
Multi-factor authentication for highly privileged users
https://aws.amazon.com/iam/

• Access to specific services.
• Access to console and/or APIs.
• Access to Customer Support (Business and Enterprise).
IAM Users, Groups and Roles
• Access to specific services.
• Access to console and/or APIs.
Temporary Security Credentials
• Access to all subscribed services.
• Access to billing.
• Access to console and APIs.
• Access to Customer Support.
Account Owner ID (Root Account)
AWS Principals

AWS Key Management Service
(AWS KMS)
Managed service that simplifies management and use of
encryption keys
Integrated with many AWS services
Integrated with AWS CloudTrail to provide auditable logs of key
usage for regulatory and compliance activities
https://aws.amazon.com/kms/

AWS Web Application Firewall
(AWS WAF)
Protects web applications
Filter traffic based on custom rules
Easy to deploy as part of Amazon CloudFront or ELB
Provides real-time metrics and detailed request data
Configure manually or via an AWS API
Integrate third-party, workload-optimized, AWS WAF configuration rules
AWS Firewall Manager synchronizes AWF WAF rules across multiple-
accounts
https://aws.amazon.com/waf/

AWS Shield (Standard or Advanced)
Guards against distributed denial of service (DDoS) attacks
AWS Shield Standard
Addresses common layer 3(network)-4(transport) DDoS incidents e.g
ICMP flood
Monitors network flows for quick attack detection
Mitigates service impacts automatically
AWS Shield Advanced
Enhanced DDoS detection and response
Supports customized WAF rules against sophisticated attacks
Includes AWS DDoS Response Team 24x7
Covers cost of increased resource utilization due to attack
https://aws.amazon.com/shield/

AWS CloudWatch
Monitoring service for AWS cloud resources and applications
Collect and track metrics, monitor log files, and set alarms
Gain visibility into resource utilization, application performance, and
operational health
Set alarms to send notifications or take other automated actions
Supports custom dashboards
Use cases:
Cost management; billing alerts
https://aws.amazon.com/cloudwatch/

AWS CloudTrail
Managed service that records all AWS API calls for your account
Records information about API calls to AWS service
Delivers results in log files for automatic response
Use cases:
Security, alerting
Compliance
Troubleshooting
Remediation
https://aws.amazon.com/cloudtrail/

AWS CloudFormation
Service to create and manage a collection of related AWS resources to
duplicate consistency across environments
Describe sets of AWS resources using template file called “stacks”
Customize values for different application environments and regions
Maintain and update infrastructure as code (IaC)
Use Cases
Standardize application deployments for scale and consistency
Test, designs and automatically rollback the newly provisioned resources
Replicate service architectures globally in minutes
https://aws.amazon.com/cloudformation/

AWS Config
Managed service for tracking AWS inventory and configuration, and configuration
change notification.
AWSConfig
Amazon
EC2
Amazon
VPC
Amazon
EBS
AWS
CloudTrail
Change
management
Audit
compliance
Security
analysis
Troubleshooting Discovery

Popular AWS Marketplace Vendors by Category
Security BIStorage MediaDatabaseNetworking DevOps
Operating
Systems

AWS Advanced Services
Big Data Analytics and AI/ML

Fast at scale
Columnar storage
technology to improve
I/O efficiency and scale
query performance
Secure
Audit everything; encrypt
data end-to-end;
extensive certification
and compliance
Open file formats
Analyze optimized data
formats on the latest
SSD, and all open data
formats in Amazon S3
Inexpensive
As low as $1,000 per
terabyte per year, 1/10th
the cost of traditional
data warehouse
solutions; start at $0.25
per hour
$
Amazon Redshift—Data Warehousing

S3 data lakeRedshift data
Redshift Spectrum
query engine • Exabyte Redshift SQL queries against S3
• Join data across Redshift and S3
• Scale compute and storage separately
• Stable query performance and unlimited concurrency
• CSV, ORC, Grok, Avro, & Parquet data formats
• Pay only for the amount of data scanned
Amazon Redshift Spectrum
Extend the data warehouse to exabytes of data in S3 data lake

Low cost
Flexible billing with per-
second billing, EC2 spot,
reserved instances and
auto-scaling to reduce
costs 50–80%
$
Easy
Launch fully managed
Hadoop & Spark in
minutes; no cluster
setup, node provisioning,
cluster tuning
Latest versions
Updated with the latest
open source frameworks
within 30 days of release
Use S3 storage
Process data directly in
the S3 data lake securely
with high performance
using the EMRFS
connector
Data Lake
1001100001001010111
0010101011100101010
0000111100101100101
010001100001
Amazon EMR—Big Data Processing

Amazon Elasticsearch Service
Easy to Use
Fully managed;
Deploy production-ready
clusters in minutes
Secure
Secure access with VPC
to keep all traffic within
AWS network
Open
Direct access to
Elasticsearch open-source
APIs; supports Logstash
and Kibana
Available
Zone awareness
replicates data between
two AZs; automatically
monitors & replaces
failed nodes
$

Amazon Kinesis—Real Time
time
Load data streams
into AWS data stores
Kinesis Data
Firehose
Build custom
applications that
analyze data streams
Kinesis Data
Streams
Capture, process, and
store video streams
for analytics
Kinesis Video
Streams
Analyze data streams
with SQL
Kinesis Data
Analytics
SQL

Amazon Athena—Interactive Analysis
Interactive query service to analyze data in Amazon S3 using standard SQL
No infrastructure to set up or manage and no data to load
Ability to run SQL queries on data archived in Amazon Glacier (coming soon)
Query Instantly
Zero setup cost; just
point to S3 and
start querying
SQL
Open
ANSI SQL interface,
JDBC/ODBC drivers,
multiple formats,
compression types,
and complex joins and
data types
Easy
Serverless: zero
infrastructure, zero
administration
Integrated with
QuickSight
Pay per query
Pay only for queries
run; save 30–90% on
per-query costs
through compression
$

Amazon QuickSight
easy
Empower
everyone
Seamless
connectivity
Fast analysis Serverless

Sample Big Data Analytics Pipeline
Ad-hoc access to data using Athena
Athena can query
aggregated datasets as well

Amazon ML Stack
M L F R A M E W O R K S &
I N F R A S T R U C T U R E
A I S E R V I C E S
R E K O G N I T I O N
I M A G E
P O L L Y T R A N S C R I B E T R A N S L A T E C O M P R E H E N D L E XR E K O G N I T I O N
V I D E O
Vision Speech Language Chatbots
A M A Z O N
S A G E M A K E R
B U I L D T R A I N
F O R E C A S T
Forecasting
T E X T R A C T P E R S O N A L I Z E
Recommendations
D E P L O Y
Pre-built algorithms & notebooks
Data labeling (G R O U N D T R U T H )
One-click model training & tuning
Optimization (N E O )
One-click deployment & hosting
M L S E R V I C E S
Fr a m e w o r k s I nte r f a c e s I nf r a s tr uc tur e
E C 2 P 3
& P 3 N
E C 2 C 5 F P G A s G R E E N G R A S S E L A S T I C
I N F E R E N C E
Reinforcement learningAlgorithms & models ( A W S M A R K E T P L A C E
F O R M A C H I N E L E A R N I N G )

Key Takeaways
AWS has the deepest and broadest set of services for you to build your solution.
To choose the right services for your project, start with your customers goal
then walk backwards.
AWS has resources to in place to guide your in your cloud adoption journey.
The best way to learn is to try it out.

Next Step: Builders Welcome
AWS Free Tier - https://aws.amazon.com/free/
Check out your SDK of choice. - https://aws.amazon.com/tools/
Go build something!

Next Step: AWS Certifications

Keeping Up
AWS Announcements and Updates
• AWS: What’s New? http://aws.amazon.com/new/
• AWS blog - https://aws.amazon.com/blogs/aws/
• AWS podcast - https://aws.amazon.com/podcasts/aws-podcast/
• APN blog - https://aws.amazon.com/blogs/apn/
• This is MY Architecture YouTube channel - https://aws.amazon.com/this-is-
my-architecture/
• AWS loft schedule - https://aws.amazon.com/start-ups/loft/
• @awscloud twitter - https://twitter.com/awscloud

APN Live-AWS Core Services

Recommandé

Recommandé

Contenu connexe

Tendances

Tendances (20)

Similaire à APN Live-AWS Core Services

Similaire à APN Live-AWS Core Services (20)

Plus de Amazon Web Services

Plus de Amazon Web Services (20)

APN Live-AWS Core Services