AWS Government, Education, and Nonprofits Symposium Washington, DC | June 24, 2014 - June 26, 2014

AWS Government, Education, and Nonprofits Symposium Washington, DC | June 24, 2014 - June 26, 2014

paulbeda@amazon.comPaul Beda

Moving Workloads intoAWS GovCloud (US)

AWS Government, Education, and Nonprofits Symposium Washington, DC | June 24, 2014 - June 26, 2014

Adopting AWS - Four Strategies

Migrate existing apps & data to the cloud

Build new apps, sites, & services in the cloud

Augment on-premises resources with cloud capacity

Rearchitect for scalability,reliability, and economy

AWS Government, Education, and Nonprofits Symposium Washington, DC | June 24, 2014 - June 26, 2014

Leverage existing assets while moving to faster, more agile, and

cost-efficient model

GovernmentCorporate

Data Center Customer Gateway

Internet Gateway

Private Dedicated

10GDirectConnect

VPN Gateway

InternetAmazon VPC

AWS GovCloud Region

Private Subnet

Availability Zone A

Availability Zone B

Router

S3

Public Subnet

NAT

Augment On-Premises Resources with Cloud

EBS EC2

AWS Government, Education, and Nonprofits Symposium Washington, DC | June 24, 2014 - June 26, 2014

Augmentation- Not just storage and compute, but services

Your Data Center

App 1

App 2

App 3

App N

…

Backup Amazon

RDS

Elastic Map Reduce

Amazon DynamoDB

DBA

AWS Government, Education, and Nonprofits Symposium Washington, DC | June 24, 2014 - June 26, 2014

Build New Apps, Sites, and Services in the CloudDistributed architecturesfor high availability

Easier to manage

Less expensive to run

Faster to build (eventually)

AWS Government, Education, and Nonprofits Symposium Washington, DC | June 24, 2014 - June 26, 2014

Adopting AWS - Four Strategies

Migrate existing apps & data to the cloud

Build new apps, sites, & services in the cloud

Augment on-premises resources with cloud capacity

Rearchitect for scalability,reliability, and economy

AWS Government, Education, and Nonprofits Symposium Washington, DC | June 24, 2014 - June 26, 2014

Migrate Existing Apps to the Cloud – Why?

Your Data Centers

App

1/3 of servers migrated to AWS

Saved £1.5 Million

Migrated 500 web properties in 5

months

New product web sites live in 2 days

vs. 2 weeks

Migrated clinical trials simulations

platform

Simulations in 1.2hrs vs. 60hrs64% reduction in

costs

AWS Government, Education, and Nonprofits Symposium Washington, DC | June 24, 2014 - June 26, 2014

Active Directory

Network Configuration

Encryption

Backup Appliances

Your On-Premises Apps

YourData Centers

Migrating Workloads – Minimizing Disruption

Users & Access Rules (IAM)

Your Private Network (VPC)

Encryption (Many)

Backups and Archives (S3)

Your Cloud AppsVPN or Direct Connect

AWS Government, Education, and Nonprofits Symposium Washington, DC | June 24, 2014 - June 26, 2014

What workloads do I move?

• Capital Intensive – especially storage– And not just live storage

• Common technology– COTS on x86/x64– Common OS – Most *nix, Windows

• Mission Critical / High SLAs

AWS Government, Education, and Nonprofits Symposium Washington, DC | June 24, 2014 - June 26, 2014

How do I move them?

• Connect to AWS– Network (Direct Connect or VPN)– User Space (Forest or Federate)

• “Move” Applications– Need to decide if MOVE means build? Import? Migrate?

• “Move” Data– Need to decide if you move none? Some? All?

AWS Government, Education, and Nonprofits Symposium Washington, DC | June 24, 2014 - June 26, 2014

Connect – VPN and Direct Connect

Direct Connect VPN

Your Data Center

VPN

AWS Government, Education, and Nonprofits Symposium Washington, DC | June 24, 2014 - June 26, 2014

“Move” Applications

AWS Government, Education, and Nonprofits Symposium Washington, DC | June 24, 2014 - June 26, 2014

US East (VA)

Asia Pacific (Tokyo)

US West (CA)

Asia Pacific (Singapore)

US West (OR)

Asia Pacific

(Sydney)

EU (Ireland)

South America (Sao Paulo)

GovCloud (OR)

AWS GovCloud Account

IAM Group

IAM User 1

IAM User 2

AWS Public Account

IAM Group

IAM User 1

IAM User 2

1:1 Account Mapping

“Move” - It’s just a tiny bit more complicated in AWS GovCloud (US)…

AWS Government, Education, and Nonprofits Symposium Washington, DC | June 24, 2014 - June 26, 2014

“Move” Applications

AWS Government, Education, and Nonprofits Symposium Washington, DC | June 24, 2014 - June 26, 2014

“Move” Applications – AWS VM Import … plus Support

paulbeda [122] $ ec2-import-instance \-t m1.xlarge ./WinSvr8-

disk1.vmdk \-f VMDK \-o AKIAIOSFODNN7EXAMPLE \ -w

wJalrXUtnFEMI/K7MDENGbPxRfiCYEXAMPLEKEY \-b myawsbucket

1 2 3

AWS Government, Education, and Nonprofits Symposium Washington, DC | June 24, 2014 - June 26, 2014

“Move” Data – AWS Import

1

2

3

AWS GovCloudS3 Bucket

AWS US WestS3 Bucket

Local Compute, EC2 instance, CLI, 3rd party tools…

EC2 instance, CLI, 3rd party tools…

AWS Storage Gateway

AWS Import/Export

AWS Government, Education, and Nonprofits Symposium Washington, DC | June 24, 2014 - June 26, 2014

The Result

Your On-Prem Apps

Directory Service

Email Servers

VoIP / VC

DesktopYourData Centers

Your Cloud Apps

Directory Service

Email Servers

Document Collaboration

DW, BI, BD, HPC

AWS Government, Education, and Nonprofits Symposium Washington, DC | June 24, 2014 - June 26, 2014

Tools Checklist

• Connect– Direct Connect– VPN

• “Move” Apps– SysInternals Disk2VHD– VMware vCenter– Microsoft HyperV

• “Move” Data– Directly– Via US West (encrypted)

• Storage Gateway• AWS Import/Export

• AWS Partners– Racemi– CloudSwitch– CloudVelocity– CloudBerry Lab– Druva– …and many, many more

AWS Government, Education, and Nonprofits Symposium Washington, DC | June 24, 2014 - June 26, 2014

Q&A