The general purpose computing and storage environment of Amazon Web Services integrates perfectly into your existing ecosystem. Join customers who have taken advantage of this environment in parallel to their on-premise infrastructure to hear tales, tips, and tricks of best practices of integrating AWS with existing resources securely using services such as Amazon Virtual Private Cloud, AWS Direct Connect, and AWS Storage Gateway.

2. Agenda
Traditional data center constraints
The elastic data center
Fundamental AWS services
Examples & patterns
Customer story: Apollo Group
Where to go next
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

3. traditional constraints
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

4. Corporate Data
Center
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

5. Corporate Data
Center
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

6. Corporate Data
Center
Capacity in traditional facilities is a premium resource

7. Corporate Data
Center
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

8. Corporate Data
Center
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

9. Request
Approvals
Hardware
acquisition/VM
capacity allocation
Ticket queuing
Provisioning
Configuration
Corporate Data
Center
Availability
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

10. Request
Approvals
Hardware
acquisition/VM
capacity allocation
Ticket queuing
Provisioning
Configuration
Corporate Data
Center
Availability
Requirements can take a long time to fulfill

11. Corporate Data
Center
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

12. Project X
Potential impact: LOW
Cost of infrastructure: HIGH
Denied
Corporate Data
Center
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

13. Project X
Potential impact: LOW
Cost of infrastructure: HIGH
Denied
Project Y
Potential impact: HIGH
Corporate Data
Cost of infrastructure: HIGH Center
Denied
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

14. Project X
Potential impact: LOW
Cost of infrastructure: HIGH Project Z
Denied Potential impact: LOW
Cost of infrastructure: LOW
Approved
Project Y
Potential impact: HIGH
Corporate Data
Cost of infrastructure: HIGH Center
Denied
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

15. Project X
Potential impact: LOW
Cost of infrastructure: HIGH Project Z
Denied Potential impact: LOW
Cost of infrastructure: LOW
Approved
Project Y
Potential impact: HIGH
Corporate Data
Cost of infrastructure: HIGH Center
Denied
Cost of infrastructure can inhibit innovation

16. the elastic datacenter
flexible, on-demand facilities
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

17. Corporate Data
Center
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

18. Project Z
Approved
Corporate Data
Center
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

19. Project X
Approved
Project Z
Approved
Corporate Data
Center
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

20. Project X
Approved
Completed
Corporate Data
Center
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

21. Project X
Approved
Corporate Data
Center
Project Y
Approved

22. Completed
Corporate Data
Center
Completed

23. Corporate Data
Center

24. Extending your data center
Corporate Data
Center

25. With integrated resources
Corporate Data
Center

26. practicalities
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

27. network control
your slice of the AWS cloud
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

28. Customer A
10.1.2.3 10.12.119.10
10.30.6.1 10.45.12.11
Availability Zone Availability Zone
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

29. Customer A Customer B
10.8.53.12
10.1.2.3 10.12.119.10
10.134.2.1
10.15.6.7
10.9.44.97 10.30.6.1 10.45.12.11
Availability Zone Availability Zone
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

30. Customer A Customer B Customer C
10.8.53.12
10.1.2.3 10.12.119.10
10.134.2.1
10.2.1.4 10.15.6.7
10.9.44.97 10.30.6.1 10.16.22.33
10.45.12.11
Availability Zone Availability Zone
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

31. Customer A Customer B Customer C
10.8.53.12
10.1.2.3 10.12.119.10
10.134.2.1
10.2.1.4 10.15.6.7
10.9.44.97 10.30.6.1 10.16.22.33
10.45.12.11
Availability Zone Availability Zone
VPC Customer
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

32. Availability Zone Availability Zone
VPC Customer
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

33. 10.0.0.5 10.0.0.6 10.0.1.9
10.0.1.8
Availability Zone Availability Zone
VPC Customer
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

34. © 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

35. Private Subnet
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

36. User-defined
address space up
to /16
Up to 20 user-
defined subnets up
to /16
Private Subnet
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

37. Private Subnet
Virtual
Private
Gateway
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

38. Hardware endpoint
for termination of
IPSec VPN
Private Subnet
Virtual
Private
Gateway

39. Public Subnet Private Subnet
Virtual
Private
Gateway
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

40. Internet
Gateway
Public Subnet Private Subnet
Virtual
Private
Gateway
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

41. Internet gateway for
routing of traffic to Internet
Gateway
public internet
Public Subnet Private Subnet
Virtual
Private
Gateway
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

42. Internet
Gateway
NAT
Public Subnet Private Subnet
Virtual
Private
Gateway
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

43. Internet
Gateway
NAT
Network Address
Translation and
route Public Subnet
control Private Subnet
Virtual
Private
Gateway
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

44. Internet facing systems
Assert control over networking layer
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

45. Internal facing systems
Accessible only over VPN – access to
internet over corporate connection
Internet facing systems
Assert control over networking layer
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

46. NAT
Web facing servers Private backend
Web tier of n-tier applications App server and data tiers
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

47. NAT
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

48. Public EC2 Virtual Private Cloud
Inbound Only Inbound and Outbound
TCP, UDP, ICMP only Any Internet Protocol
Assigned at launch or when
Assigned at launch
stopped
Modify anytime Modify anytime

49. Public EC2 Virtual Private Cloud
Dynamic or Static Private IP
Dynamic Private IP
Address
Dynamic Public IP None by default
Optional Static Public IP
Optional Static Public IP (EIP)
(EIP)
AWS provided public DNS lookup
AWS Provided public &
server & Customer controlled DNS
private DNS names
options

50. getting connected
building a secure, reliable pipe
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

51. Data center AWS Cloud
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

52. Data center AWS Cloud
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

53. router router
Data center AWS Cloud
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

54. router router
Data center AWS Cloud
IPSec tunnel via
statically-routed or
dynamically-
routed (BGP) VPN
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

55. Data center AWS Cloud
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

56. AWS Direct
Connect
Location
Data center AWS Cloud
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

57. AWS Direct
Connect
Location
Data center AWS Cloud
New York
Amazon Partner Los Angeles
Network suppliers Washington DC
San Jose
can hook up the Singapore
last leg Tokyo
London Docklands
Sao Paulo
Sydney
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

58. AWS Direct
Connect
Location
Data center AWS Cloud
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

59. router AWS Direct router
Connect
Location
Data center AWS Cloud
Dedicated
connection
Ethernet transport
1 Gbps/10Gbps
ports
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

60. router AWS Direct router
Connect router
router
Location
Data center AWS Cloud
Secondary
connection to
different physical
router
Automated
failover
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

61. router router
Data center AWS Cloud
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

62. router router
Data center AWS Cloud
Fault tolerant
primary Direct
Connect routes

63. Backup internet
carried VPN
tunnel
router router
Data center AWS Cloud
Fault tolerant
primary Direct
Connect routes

64. now you’re connected
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

65. use the elastic datacenter
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

66. managing data
backup, storage & archiving
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

67. AWS Storage
Gateway installed
on-premise to
synchronize local
volumes
AWS Storage
Gateway
Corporate Data Elastic Data
Center Center
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

68. AWS Storage
Gateway
Local volumes
created under
Corporate Data
Center
Storage Elastic Data
Center
Gateway
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

69. Usable with on-
premise
servers via
iSCSI interface
AWS Storage
Gateway
Corporate Data Elastic Data
Center Center
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

70. AWS Storage
Gateway
Primary on-
premise volumes
snapshotted,
Corporate Data
Center compressed and Elastic Data
Center
stored in Amazon
S3
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

71. AWS Storage
Gateway
Corporate Data Elastic Data
Center Center
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

72. AWS Storage
Gateway
Snapshot
pulled from S3
Corporate Data
Center
to restore local Elastic Data
Center
volume
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

73. Snapshot
pulled from S3
to create cloud
instance
backed by
Volume
AWS Storage
Gateway
Corporate Data Elastic Data
Center Center
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

74. Gateway stored Gateway cached
volumes volumes
Data stored locally Data stored in S3
Asynchronous backup Recently read data cached
EBS snapshots Low latency
iSCSI local interface iSCSI local interface
Up to 1TB volumes Up to 32TB volumes

75. development & test
spin up, use & turn off
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

76. “…AWS seemed to be the best solution
available to allow a small, independent
company to rapidly develop and test a
completely new infrastructure, and host
it.
We also loved the flexibility that AWS
allowed us, when spinning up smaller
test environments, for beta trials, QA,
localization, and during development.
The low initial cost was also crucial.”
Alex Evans, CTO

77. Source control Project management
Leverage EC2 to run Add integrated project
popular source control management and issue
systems tracking
Workstations Build servers
Enable standard build Use EC2 horsepower to
developer/test drive build servers and
workstations continuous integration
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

78. Unit & regression Load & performance
Scale up and parallel run Utilize spot market for
unit and regression plans generating load and test
in a fraction of the time how applications perform
A/B Security
Run A/B scenario testing Create sandboxes for
with replica stacks aggressive security
testing
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

79. © 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

80. SAP enterprise applications in the elastic datacenter
SAP Business Suite
SAP HANA One
SAP Business All-in-One
SAP BusinessObjects business intelligence solutions
SAP Rapid Deployment Solutions (RDS)
SAP Afaria
http://aws.amazon.com/sap/
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

81. disaster recovery
reduce costs, reduce risk
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

82. Primary Site Secondary Site
Routers Routers
Firewalls Firewalls
Network Network
Application Licenses Application Licenses
Operating Systems Operating Systems
Hypervisor Hypervisor
Servers Servers
SAN SAN
Primary Storage Primary Storage
Backup Backup
Archive Archive

83. Primary Site Secondary Site
Routers Routers
Firewalls Firewalls
Failover
Network Network
Application Licenses Application Licenses
Operating Systems Operating Systems
Hypervisor Hypervisor
Servers Servers
SAN SAN
Recovery
Primary Storage Primary Storage
Backup Backup
Archive Archive

84. Primary Site AWS
Routers Routers
Firewalls Firewalls
Network Network
Application Licenses Application Licenses
Operating Systems Operating Systems
Hypervisor Hypervisor
Servers Servers
SAN SAN
Primary Storage Snapshot Storage
Backup Backup
Archive Archive

85. Primary Site AWS
Routers Routers
Firewalls Firewalls
Network Network
Application Licenses Secondary Application Licenses
Operating Systems site costs Operating Systems
Hypervisor Hypervisor
Servers Servers
SAN SAN
Primary Storage Snapshot Storage
Backup Backup
Archive Archive

86. Build resources
around replicated
dataset
Keep ‘pilot light’ on by replicating
core databases
Build AWS resources around
dataset and leave in stopped state
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

87. Build resources Scale resources in
around replicated AWS in response to a
dataset DR event
Keep ‘pilot light’ on by replicating Start up pool of resources in AWS
core databases when events dictate
Build AWS resources around Match current production capacity
dataset and leave in stopped state through auto-scaling policies
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

88. Corporate Data Elastic Data
Center Center
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

89. Corporate Data
Synchronization of Elastic Data
Center Center
key databases

90. Corporate Data Elastic Data
Center Center

91. Promotion of
stopped instances
to live
Corporate Data Elastic Data
Center Center
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

92. big data
bring on large capacity to process
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

93. Corporate Data Elastic Data
Center Center
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

94. Application data
and logs for
Corporate Data Elastic Data
Center analysis pushed Center
to S3
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

95. Amazon Elastic
Map Reduce
name node to
control analysis
N
Corporate Data Elastic Data
Center Center
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

96. N
Hadoop cluster
Corporate Data started by Elastic Elastic Data
Center Center
Map Reduce
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

97. N
Adding many
hundreds or
Corporate Data
Center thousands of
nodes
Elastic Data
Center
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

98. Disposed of when
job completes
N
Corporate Data
Center
Elastic Data
Center
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

99. Results of
analysis pulled
Corporate Data
Center
back into your Elastic Data
Center
systems
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

100. customer story
© 2012 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.

101. EU region DR site for range of business applications
All running in a Virtual Private Cloud (VPC)
DR provision for applications dependent on Oracle and SQL Server
databases
Includes DR for Active Directory and Windows file shares

102. On-premise On-premise
Data Centre A Data Centre B
Internet AWS Direct Connect
Active
Directory
Bastion Host SmartSentinel
Client-to-site VPN Site-to-site VPN Proxy Server
VPC Subnet A VPC Subnet B VPC Subnet C
Remote File
Desktops Applications Databases
Servers
VPC Subnet D VPC Subnet E VPC Subnet F VPC Subnet G
Availability Zone
Region
S3 Buckets
with Objects

103. On-premise On-premise
Data Centre A Data Centre B
Dual route
connectivity
Internet AWS Direct Connect
Active
Directory
Bastion Host SmartSentinel
Client-to-site VPN Site-to-site VPN Proxy Server
VPC Subnet A VPC Subnet B VPC Subnet C
Remote File
Desktops Applications Databases
Servers
VPC Subnet D VPC Subnet E VPC Subnet F VPC Subnet G
Availability Zone
Region
S3 Buckets
with Objects

104. On-premise On-premise
Data Centre A Data Centre B
Active Directory
Replication
Internet AWS Direct Connect
Active
Directory
Bastion Host SmartSentinel
Client-to-site VPN Site-to-site VPN Proxy Server
VPC Subnet A VPC Subnet B VPC Subnet C
Remote File
Desktops Applications Databases
Servers
VPC Subnet D VPC Subnet E VPC Subnet F VPC Subnet G
Availability Zone
Region
S3 Buckets
with Objects

105. On-premise On-premise
Data Centre A Data Centre B
Bastion Internet AWS Direct Connect
Host
Active
Directory
Bastion Host SmartSentinel
Client-to-site VPN Site-to-site VPN Proxy Server
VPC Subnet A VPC Subnet B VPC Subnet C
Remote File
Desktops Applications Databases
Servers
VPC Subnet D VPC Subnet E VPC Subnet F VPC Subnet G
Availability Zone
Region
S3 Buckets
with Objects

106. On-premise On-premise
Data Centre A Data Centre B
Internet AWS Direct Connect
Active
Directory
Bastion Host SmartSentinel
Client-to-site VPN Site-to-site VPN Proxy Server
VPC Subnet A VPC Subnet B VPC Subnet C
Database
replication
Remote File
Desktops Applications Databases
Servers
VPC Subnet D VPC Subnet E VPC Subnet F VPC Subnet G
Availability Zone
Region
S3 Buckets
with Objects

107. On-premise On-premise
Data Centre A Data Centre B
Internet AWS Direct Connect
Active
Directory
Bastion Host SmartSentinel
Client-to-site VPN Site-to-site VPN Proxy Server
VPC Subnet A VPC Subnet B VPC Subnet C
Application images
Remote File
Desktops Applications Databases
Servers
VPC Subnet D VPC Subnet E VPC Subnet F VPC Subnet G
Availability Zone
Region
S3 Buckets
with Objects

108. On-premise On-premise
Data Centre A Data Centre B
Internet AWS Direct Connect
Active
Directory
Bastion Host SmartSentinel
Client-to-site VPN Site-to-site VPN Proxy Server
VPC Subnet A VPC Subnet B VPC Subnet C
Remote File
Desktops Applications Databases
Servers
VPC Subnet D VPC Subnet E VPC Subnet F VPC Subnet G
Availability Zone
Region
Desktop
environments
S3 Buckets
with Objects

109. On-premise On-premise
Data Centre A Data Centre B
Internet AWS Direct Connect
Active
Directory
Bastion Host SmartSentinel
Client-to-site VPN Site-to-site VPN Proxy Server
VPC Subnet A VPC Subnet B VPC Subnet C
Remote File
Desktops Applications Databases
Servers
VPC Subnet D VPC Subnet E VPC Subnet F VPC Subnet G
Availability Zone
Region
Durable data
backups
S3 Buckets
with Objects

110. Find out more
aws.amazon.com/vpc
aws.amazon.com/directconnet
aws.amazon.com/storagegateway
aws.amazon.com/whitepapers
Development and Test
VPC networking
Backup & archive

111. We are sincerely eager to
hear your feedback on this
presentation and on re:Invent.
Please fill out an evaluation
form when you have a
chance.