Emind's referecne architecture for Enterprise and AWS Integration

1. Emind’s Architecture for
Enterprise & AWS Integration
Lahav Savir, Architect & CEO
Emind - Your Cloud Experts

2. ● Reduce wait time in queues.
● Access to endless computation resources.
● Easy scale-out of existing computational pipelines.
● Collaboration of projects with external research institutions.
● Enable access to the rich variety of cloud services.
● Combined Self & Managed Service.
● Reduce CAPEX.
Goals

3. Global References
● Harvard University - http://huit.harvard.edu/services/harvard-
cloud-services
● University of Chicago - https://aws.amazon.
com/solutions/case-studies/university-of-chicago/
● University of New York - https://aws.amazon.
com/solutions/case-studies/new-york-university/

4. Scope
● Advanced
Computing
● Data Platforms
● HPC Clusters
● Web Hosting

5. Integrations
● Billing and Accounting
● Networking
● Security
● Compliance
● Identity
● Applications stack
● Monitoring
● Usage analytics
● Automation

6. Managed Services Self Service

7. Billing & Accounting
● Allow “Pre-Paid / Budget” payment
○ Controlled budget
○ Pay per use
○ Automated alerts and actions
● Integration of the AWS billing with the organization’s
internal billing
○ Seamless ordering / allocating budget
○ Seamless usage / consumption information

8. Identity
Remote Resources:
● AWS Console
● AWS API
● AWS Network
● EC2 Instances
SSO (Single-Sign-On)
integration with
Organization’s Idp
● Authentication
● Role Inheritance

9. Network & Connectivity
● Seamless experience - ONE Network
○ Extend organization’s network to AWS
as an integrated data center
○ Full routable network
● Redundant and Scale
○ Direct-Connect
○ Highly Available VPN
○ IPSec Tunnels

10. Security
● Unified Policy
Enforcement
○ Controlled network
○ Monitored in/out traffic
○ Network IPS
○ Role based resource access
● Host Protection
○ Vulnerability Scanning
○ Host based IDS and FIM
● Events Correlation and
Alerting
● Comprehensive Audit

11. Application Stack
● Seamless access to
organization’s tools library
○ Shared scripts and modules
○ Shared data sets
● Predefined instances
○ Integrated tools
○ Integrated authentication
● HPC Framework
○ StarCluster
http://star.mit.edu/cluster/

12. Monitoring
● Central Monitoring
Platform
● Dynamic Provisioning
● Predefined Templates
● Integrated Data Sources
○ Compute instances
○ AWS resources metrics

13. Usage Reports and Analytics
● Analyse HPC resources
consumption
● Periodically collect
metrics
● Group by Cluster
● Report Hours vs. Jobs

14. Automation
● Zero touch deployment
● CloudFormation
● AWS Service Catalog
● Auto Provisioning
● Just-in-time setup

15. Thank you.
lahavs@emind.co
@lahavsavir