AWS Summit 2014 Melbourne - Breakout 5 Increased agility, elasticity, focus on core business, optimized costs, and better security are all good outcomes when it comes to working with AWS. But, for an enterprise with many existing complex applications, integrated operations, and sophisticated teams, this integration and transition requires thought and planning. Within this session, we will start with a typical enterprise customer and work backwards step by step to show how an extreme IT makeover it possible with reusable examples; demonstrating that an application doesn’t have to be written for cloud to realize cloud’s benefits. Many large-scale shops are already leveraging AWS without sacrificing what they are good at, and we will explain the framework for kicking off this initiative within your own organization. Presenter: Richard Busby, Solutions Architect, Amazon Web Services

1. © 2014 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified, or distributed in whole or in part without the express consent of Amazon.com, Inc.
Extend your Datacenter
with the AWS Cloud
Richard Busby,
Solutions Architect, Amazon Web Services

2. Target state
Corporate data center
AWS cloud
Ops Team
Ops Tools
Existing investment
Lots of complex apps
Fixed cost
Static
New environment
Lots of complex apps
Flexible
Utility cost
New services

3. How do we get there?
Kickoff Plan Build Migrate Run Review

4. Kickoff
• Sponsor?
• Timeframes?
• Success criteria?
• Are we solving a business issue?
• In-house skills or partner?
Useful AWS resources
– “Overview of Security Processes” whitepaper
– “Your first hour on AWS” Summit presentation
– “Using AWS in the context of Australian Privacy Considerations” whitepaper
– AWS Operational Checklists
– AWS Architecture Center and reference architectures

5. Plan: candidate use case / workload
Typical candidates
Spikey workloads (eg web)
Test/dev environments
Analytics
Backup and archiving
Disaster recovery
CRM-test
ERP
CRM
AD
Website
SharePoint
SharePoint-test
Monitoring
email
Corporate data center

6. Plan: SharePoint as an example
Multiple tiers
Crawl server
Other apps
Query server
Search DB
Content DB
Other data
Web tier
Web tier
Administration
backup
ERP
Monitoring
Directory
External dependencies
Operational processes
Backup
Monitoring
Alerting
Reporting
Patching
Upgrades

7. Plan: what needs to change?
Possible changes
HA methodology
Latency
OS deployment
Backup and recovery
Disaster recovery
Unlikely to change
App architecture
Monitoring
Data structures

8. Build: Networking
AWS Direct Connect
VPN connection
Virtual private cloud
Search DB
Crawl server
Web tier
Content DB
Other apps
Web tier
Other data
Query server
Administration
router
Internet gateway
VPC subnet
VPC subnet
VPC subnet
VPC subnet
Corporate data center
AWS cloud

9. Build: CloudFormation
"VPC" : {
"Type" : "AWS::EC2::VPC",
"Properties" : {
"EnableDnsSupport" : "true",
"EnableDnsHostnames" : "true",
"CidrBlock" : { “10.0.0.0/8” },
"Tags" : [
{ "Key" : "Application", "Value" : { "Ref" :
"AWS::StackName" } },
{ "Key" : "Network", "Value" : ”My_VPC" }
]
}
},

10. Build: Services
AWS Direct Connect
VPN connection
AD DC
DNS
Virtual private cloud
Search DB
Crawl server
Web tier
Content DB
Other apps
Web tier
Other data
Query server
Administration
App-level backup
Corporate data center
AWS cloud

11. Build: Monitoring and alerting
Virtual private cloud
AWS Direct Connect
VPN connection
CloudWatch
CloudTrail
Search DB
Crawl server
Web tier
Content DB
Other apps
Web tier
Other data
Query server
Administration
AWS Management
Console
CloudWatch
Logs
Corporate data center
AWS cloud

12. Build: Monitoring and alerting

13. Build: Monitoring and alerting

14. Build: Monitoring and alerting
Virtual private cloud
AWS Direct Connect
VPN connection
CloudWatch
CloudTrail
Search DB
Crawl server
Web tier
Content DB
Other apps
Web tier
Other data
Query server
Administration
CloudWatch
Logs
Existing
Monitoring
tools
Corporate data center
AWS cloud

15. Build: Monitoring and alerting
Virtual private cloud
AWS Direct Connect
VPN connection
CloudWatch
CloudTrail
Search DB
Crawl server
Web tier
Content DB
Other apps
Web tier
Other data
Query server
Administration
CloudWatch
Logs
Monitoring
Corporate data center
AWS cloud

16. Build: Monitoring and alerting

17. Migrate: AWS Management Portal for vCenter
Virtual private cloud
AWS Direct Connect
VPN connection
Search DB
Crawl server
Web tier
Content DB
Other apps
Web tier
Other data
Query server
Administration
Management
portal for vCenter
Web tier
Crawl server
Search DB
Web tier
Other apps
Content DB
Administration
Query server
Other data
Corporate data center
AWS cloud

18. Migrate: AWS Management Portal for vCenter

19. Migrate: AWS Management Portal for vCenter

20. Migrate: AMIs and data migration
Virtual private cloud
AWS Direct Connect
VPN connection
Search DB
Crawl server
Web tier
Content DB
Other apps
Web tier
Other data
Query server
Administration
Web tier
Crawl server
Search DB
Web tier
Other apps
Content DB
Administration
Query server
Other data
S3 bucket
Corporate data center
AWS cloud

21. Migrate: testing
• Functional testing
– Does it work the same as on-prem?
– How do we compare the two?
• Stress testing
– Does it handle the load we expect?
– What impact does instance failure have?

22. Review
• What worked? What didn’t?
• What can we re-use?
– VPC
– Monitoring
– CloudFormation templates
– App-level backups
– DNS, AD
• What are our next candidates?

23. Key takeaways
corporate data center
AWS cloud
Kickoff Plan Build Migrate Run Review

24. Expand your skills with AWS
Certification
aws.amazon.com/certification
Exams
Validate your proven
technical expertise with
the AWS platform
On-Demand
Resources
aws.amazon.com/training/
self-paced-labs
Videos & Labs
Get hands-on practice
working with AWS
technologies in a live
environment
aws.amazon.com/training
Instructor-Led
Courses
Training Classes
Expand your technical
expertise to design, deploy,
and operate scalable,
efficient applications on AWS

25. © 2014 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified, or distributed in whole or in part without the express consent of Amazon.com, Inc.