PaaS – From Code to Running Application using AWS Elastic Beanstalk (DEV323) - AWS re:Invent 2018

© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
PaaS – From Code to Running Application
using AWS Elastic Beanstalk
Bob O’Dell
Principal Product Manager
AWS Developer Tools
D E V 3 2 3
Aaron Bauer
Staff IT Engineer
Qualcomm Incorporated

What the session will cover
• Challenges of web application deployment
• How AWS Elastic Beanstalk simplifies running web applications
on AWS
• AWS Elastic Beanstalk capabilities
• Easily extending AWS Elastic Beanstalk to CI/CD
• Advanced use case with Qualcomm Forge
• Q&A

Common scenario
Develop a new web app or update an existing web app to respond to
customer needs and competitive pressures and make sure to
• Do it yesterday and iterate rapidly
• Deliver at the lowest cost possible
• Eliminate downtime and customer impact
• Adhere to company and compliance standards
• Keep everything else up and running as usual

The challenges – A business perspective
With limited resources, how can we operate and
manage web applications at scale?
How can we accelerate innovation while allowing
different runtimes and technology stacks?
How can we adopt a systematic approach to CI/CD
tools and methodologies?
11
22
13

The challenges – A developer perspective
How can I quickly deploy and test my web
application?
How can I create robust but simple CI/CD?
11
22

Common challenges
Too much time is spent
on things that don’t
deliver business value
You have to integrate
with your existing
repertoire of applications

Running web applications on AWS
Provision / Configure Deploy Manage / Monitor

AWS has multiple services that enable you to run your web application
including
While each service is powerful and simple to use, running a web
application requires that you learn multiple services and leaves the
selection, configuration, and management up to you.
• Amazon EC2, AWS Lambda, Amazon ECS, Amazon EKS, AWS Fargate, LightsailCompute
• Amazon S3, Amazon EFSStorage
• Amazon RDS, DynamoDB, AuroraDatabase
• Elastic Load Balancing, Amazon VPCNetworking
• Application Auto Scaling, AWS CloudFormation, Systems ManagerManagement Tools

Introducing AWS Elastic Beanstalk
The easiest way to get your web applications up and running in minutes
Elastic Beanstalk is a managed service that automatically handles
• Infrastructure provisioning and configuration
• Deployment
• Load balancing
• Auto scaling
• Health monitoring
• Analysis and debugging
• Logging
There is no additional charge for Elastic Beanstalk
Provision /
Configure
Deploy
Manage /
Monitor

AWS Elastic Beanstalk Supports
Platforms containing the
most popular runtimes as
well as Docker images,
allowing you to bring your
own
Elastic Beanstalk also
supports custom platforms
and custom images

Demo 1: Quick web application deployment
Challenge: How can I quickly deploy and test my web application
1
$ eb init
Create your Elastic Beanstalk app01
02
Create the resources and launch the
application
03
$ eb create
Deploy updates
$ eb deploy

What just happened?
Elastic Beanstalk
• Provisioned the necessary infrastructure
resources including Amazon EC2 instances,
security groups, load balancers, and auto
scaling groups
• Configured Amazon Route53 with a unique
domain name that you can define

Your code
HTTP Server
Application Server
Language Interpreter
Operating System
Host
Elastic Beanstalk
• Bundled your source code together
with the corresponding platform (OS,
runtime, application server, and web
server)
• Safely deployed your web application
What just happened?

AWS Elastic Beanstalk
• Applications and environments
• An application can contain multiple environments
• Code is deployed to an environment
• Allows matched deployment types and configurations for your development
stages
• Supports two environment modes: Single Instance and High
Availability
• Deployment and health notifications through Amazon SNS

• Support for:
• Amazon EC2 and Amazon ECS
• Wide selection of Amazon Elastic Compute Cloud (Amazon EC2) instance types
available
• Load Balancers including: Classic, Application, and Network
• Easily extended through Elastic Beanstalk configuration files
(ebextensions)

Application versions
• Every deployment is its own unique
version
• All versions stored in Amazon S3
• Allows easy rollback to a previous
version without having to back out
committed code changes
• Allows you to promote versions
across different environments
within an application

Health Monitoring
• Real-time health monitoring including load
balancer checks, resource metrics, OS metrics,
and web server logs
• Easily enable AWS X-Ray for additional
analysis and debugging
• Visible through:
• Console enhanced health overview
• Amazon CloudWatch Logs streaming
• Elastic Beanstalk CLI and API for easy
integration into existing workflows

Security and compliance
• Managed updates
• Identity and Access Management
(IAM) instance profiles and service
roles
• AWS CloudTrail and AWS Config
integration

Challenge: Extending to CI/CD
How can I create robust but simple CI/CD across my release stages (dev,
staging, production) with increasingly safer deployment status,
deployment failure reporting, and ongoing health monitoring
1 2 3 4
AWS
CodeBuild
AWS
CodeCommit
AWS
CodePipeline

Extending to CI/CD – AWS developer tools
Source Build Deploy
AWS
CodeCommit
AWS
CodeBuild
AWS CodePipeline
AWS CodeCommit
• Fully managed Git service
AWS CodeBuild
• Fully managed build service that
compiles source code, runs tests, and
produces software packages
AWS CodePipeline
• Continuous deployment service for fast
and reliable application updates

AWS services are plug and play
Challenge: How can we adopt a systematic approach to CI/CD tools and
methodologies while leveraging existing investments
GitHub
repository
Jenkins
Pipeline
1 2 3 4
AWS
CodeBuild

AWS building blocks
For customers or partners who want a deeper level of integration, AWS
services can be consumed through:
• Public API access
• AWS Command Line Interface (AWS CLI) integration
• Elastic Beanstalk CLI integration
Allows customers and partners to build their own application deployment
platforms but still leverage the experience, scale, and breadth of services
provided by AWS

Aaron Bauer
Email: abauer@qualcomm.com

Qualcomm Incorporated
Who is Qualcomm and what do we do?
“We are engineers, scientists and business strategists. We are from many different
countries and speak many different languages. We come from diverse cultures and
have unique perspectives. Together, we focus on a single goal —invent mobile
technology breakthroughs.”

Qualcomm cloud strategy
Why cloud?
• Qualcomm made a strategic direction to move to the cloud to take advantage
of the breadth of services and capabilities offered that weren’t previously
available
• A utility-based cost model provides for transparency to end users and provides
flexibility to test with minimal financial risk
• Development and proof of concepts become simple without large CapEx
• Managed services allow for lower overhead in support and operations
• Allows for a faster time to market

Qualcomm cloud strategy
Why AWS?
• Leading breadth and depth of capabilities
• Unmatched scalability and reliability
• Commitment to innovation
• Dedicated support

Adopting cloud at Qualcomm
Pain points
• Ensuring secure environments
• Creating HA - scalable solutions can be complex and expensive when done incorrectly
• Limited resources (time/people)
• Moving from an enterprise on-premise to a cloud environment requires many changes
• Architecture
• Mindset
• Security
Learning curves
• Increase developer productivity by taking the user element out of cloud
• Offloading the demands and complexity that comes with orchestration to a solution (Forge)

Creating web applications in minutes
• Fully automated & managed AWS infrastructure
• Provides a fully featured environment without knowledge of the services
• Orchestrate a best practice security compliant environment
• Allows users of all knowledge and skill levels to use the same tools
• Provide an intuitive, easy solution that is fast, with results in minutes

Creating web applications in minutes
• Provide support for incremental changes and graceful handling of
failures
• Security first – Follows all of AWS & Qualcomm’s best practices
• Completely abstract the user from AWS (Console, CLI, SDK’s)
• Managed CI/CD pipeline orchestration, resulting in deployed
applications

How did Forge come to be?
Goals and requirements:
• Support a large organization with diverse use cases
• Provide a robust solution incorporating CI/CD
• Make it secure
• Make it easy (not just for customers but for our team as well)
• Make costing transparent
• Integrate with enterprise solutions
• Adherence to best practices

Forge at a glance
• Helped accelerate application deployments 5x for all experience levels
• Reduces architecture consultation and AWS service learning
• Built using AWS services natively rather than a from-scratch approach
• Extensible platform through use of Elastic Beanstalk and AWS
CloudFormation

Forge at a glance
• Prevent infrastructure drift
• Seamless integration to core services for the enterprise
• Single sign-on
• Logging
• Directory services
• DNS

CI/CD with Forge
At its core, Forge is an orchestration
platform helping to provide a
simplified means of running web
applications.
Not all teams have familiarity with
CI/CD; we wanted to make it a
possibility for anyone deploying a
web application to AWS. AWS
Elastic Beanstalk’s direct integration
with AWS CodePipeline makes this
capability simple as a part of Forge.

Security within Forge
• Source code is encrypted point to point from its origin
• Each application uses a dedicated AWS account to create a security boundary
• Dedicated VPC provides network isolation for each application
• Utilize Parameter Store to provide secure, encrypted storage of sensitive application data
• AWS CloudFormation helps to prevent drift leading to security issues
• All sensitive data encrypted using AWS Key Management Service (AWS KMS)
• All Forge applications are limited to intranet access only

Getting Started
The original functionality
for Forge was just web
applications, but we’ve
developed an extensible
framework for deploying
other common use cases

Creating an application
To deploy a web
application with Forge,
we request a few key
pieces of information
from each user

Stack Configuration
Users are able to pick
configurable options,
such as the region to
deploy into, the instance
type (CPU/RAM), the
platform (language),
among other options
Some of these options
include whether an
application requires a
database or needs to run
24/7

Dynamic costing
One of the important
features of Forge is the
transparency we
provide around cost.
We dynamically update
a cost estimate as a
user configures their
deployment to ensure
they understand what
their stack will cost
each month.

High-level summary
Users are able to view a
list of stacks across all
accounts they have
access to, giving them a
high level view of their
various environments
and quick access to edit
them

Application configuration summary
The summary page for
Forge provides
information in a more
detailed manner about
a given application

Forge secrets
A key component of
Forge is security; we
utilize Parameter Store
to allow users to securely
store application secrets.
Forge makes use of
.ebextensions to allow
application owners to
dynamically and securely
inject these secrets into
their applications at run
time.

Application linking
Forge allows for the
concept of microservices,
or multi-application
services. We understand
an application may be
composed of a separate
UI and backend
application, so we’ve
built the ability to
securely link applications
together.

Forge logs
While Forge
automatically streams
application logs to a
centralized logging
service, Elastic Beanstalk
helps provide this access
to application logs and
we’ve extended this into
the Forge UI. Users are
easily able to download
their application logs, as
well as see information
about the underlying
Beanstalk environment.

Forge summary
With AWS and Forge we were able to
• Make web application deployments a quick and secure process
• Orchestrate best practices
• Accelerate adoption by abstracting the technology from business
needs

AWS Elastic Beanstalk is the easiest way to get your web applications up
and running in minutes
No need to learn, provision, configure, or manage any of the underlying
resources
AWS Elastic Beanstalk helps you spend your time where it matters most -
driving business value

Related breakouts and sessions
Tuesday, November 27
DEV330-R: Use Elastic Beanstalk Blue/Green Deployments to Reduce Downtime & Risk
1:00 p.m. – 2:00 p.m. | Venetian, Level 4, Lando 4305
Wednesday, November 28
DEV330-R1: Use Elastic Beanstalk Blue/Green Deployments to Reduce Downtime & Risk
5:30 p.m. – 6:30 p.m. | Aria East, Level 2, Mariposa 3
Thursday, November 29
Leadership Session (SRV325): Using DevOps, Microservices, and Serverless to Accelerate
Innovation
12:15 – 1:15 PM | Venetian Theatre (Level 2)

Thank you!
Bob O’Dell
Email: bobodell@amazon.com
Aaron Bauer
Email: abauer@qualcomm.com
@_Dad_Ops

PaaS – From Code to Running Application using AWS Elastic Beanstalk (DEV323) - AWS re:Invent 2018

Recommandé

Recommandé

Contenu connexe

Tendances

Tendances (20)

Similaire à PaaS – From Code to Running Application using AWS Elastic Beanstalk (DEV323) - AWS re:Invent 2018

Similaire à PaaS – From Code to Running Application using AWS Elastic Beanstalk (DEV323) - AWS re:Invent 2018 (20)

Plus de Amazon Web Services

Plus de Amazon Web Services (20)

PaaS – From Code to Running Application using AWS Elastic Beanstalk (DEV323) - AWS re:Invent 2018