An introduction to the tools available for making use of the AWS cloud.

1. E P I S O D E 1
Getting Started
with Amazon Web Services
Matt Wood
T E C H N O L O G Y E VA N G E L I S T

2. Hello.

3. Thank you.

4. 4

5. Cloud Foundations
concepts
4
Maximising Security
value in the Cloud

6. 1
Cloud concepts
Or: five things I wish I’d known
before getting started

7. 1. Signing up

8. On the web

11. Free tier
For new customers

12. 750 hours of compute 10Gb network storage
Free tier
5Gb SimpleDB, queues,
Simple Storage Service notications

13. 2. Interacting

14. API driven

15. REST
API driven
SOAP

17. CLI

18. ec2-run-instances

19. ec2-terminate-instances

20. SDK

21. Ruby
Java
.Net
SDK
iOS Android
PHP

22. Management
console

24. Linux

25. Certificate based
root access

26. mza$ ssh -i web/us-east/aws-web.pem
root@ec2-204-236-247-169.compute-1.amazonaws.com
Last login: Wed Jun 22 11:15:20 2011 from 82.26.6.99
__| __|_ ) CentOS
_| ( / v5.4
___|___|___| HVMx64
Welcome to an EC2 Public Image
:-)
[root@ip-10-17-135-244 ~]#

27. Windows

28. Administrator
access

30. 3. Storage options

31. Ephemeral
storage

32. Included with
compute
Ephemeral
storage
Lost at
Not backed up
termination

33. When it’s gone,
it’s gone

34. Elastic Block Store

35. Network attached Mount as volume
Elastic Block Store
Snapshot Persistent

36. Persistent
Root partitions. Mount as volumes.

37. S3

38. Highly durable Highly available
S3
Tolerant to two
simultaneous
failures

39. 99.999999999%
durability

40. 4. Payment options

41. Pay as you go

42. Gb/month

43. ECU/hour

44. No minimum

45. No subscriptions

46. Pricing tiers

47. Consolidated
billing

48. Options

49. On-demand

50. Reserved
capacity

51. Spot instances

52. On-demand: $0.57 per hour

53. Bandwidth

54. Free inbound

55. Reduced
outbound

56. Pricing calculator

57. calculator.s3.amazonaws.com/calc5.html

58. 5. Availability Zones

61. us-east
us-west
eu-west
ap-southeast
ap-northeast

62. eu-west-1a
eu-west-1b
eu-west-1c

63. 2
Foundations

64. Compute

65. Elastic Compute
Cloud

66. Windows + Linux
instances

67. Instance sizes

68. High memory
Micro High CPU
Instance sizes
Standard Cluster Compute

69. Dual “Nehalem”
1.7Tb disk
HVM

70. Amazon Machine
Image

71. State Config
Code Services
Amazon Machine
Image
ami-219387e

72. Pre-configured

73. Custom

74. Private
Custom
Public

75. Elastic Block Stora

76. m1.large

77. m1.large
100Gb

78. m1.large
Persistent
100Gb Scalable
Elastic block store Snapshot

79. m1.large
AMI
SNAPSHOT
100Gb

80. Template
m1.large
AMI AMI
SNAPSHOT
100Gb SNAPSHOT

81. Template
m1.large
AMI AMI
SNAPSHOT
100Gb SNAPSHOT
Private,
stored securely

82. m1.large
AMI AMI
SNAPSHOT
100Gb SNAPSHOT

83. m1.large
AMI m1.large
SNAPSHOT
100Gb 100Gb

84. m1.large m1.large m1.large m1.large
100Gb 100Gb 100Gb 100Gb
m1.large m1.large m1.large m1.large
100Gb 100Gb 100Gb 100Gb

97. cc1.4xlarge

98. cc1.4xlarge
100Gb

103. Mount, and away
you go...

104. Oracle

105. Oracle E-business
suite
Oracle Fusion
Oracle Database
middleware
11G
Oracle
Oracle Enterprise Oracle on
manager RDS
Oracle
Enterprise Linux

106. Licence on EC2
Oracle
Use existing
licences

107. Days to minutes

108. Certified
+
supported

109. SAP

110. Rapid Deployment SAP
Solutions BusinessObjects
SAP
Use existing
Licence for EC2
licences

111. Storage

112. Simple Storage
Service

113. Files in directories

114. Objects in buckets

115. http://s3.amazonaws.com/bucketname/objectid
http://bucketname.s3.amazonaws.com/objectid

116. https://s3.amazonaws.com/bucketname/objectid
https://bucketname.s3.amazonaws.com/objectid

117. Large objects
5Tb

118. Import/Export

119. S3 websites

120. Databases

121. Flexibility

122. AMI
SNAPSHOT
Packaged +
ready to roll

123. Oracle 11g
32 and 64 bit

124. IBM DB2
32 and 64 bit

125. SQL Server
32 and 64 bit

126. PostgreSQL
and EnterpriseDB

128. oracle-corporation

132. running

133. Configure,
optimise

134. Snapshots +
backup

135. Relational
Database Service

136. MySQL Oracle
Relational Database Service

137. Managed

138. Rapid

139. Scalable storage

140. Scalable instance

141. Synchronous replication
eu-west-1a eu-west-1b
High availability. Multi-AZ.

142. Asynchronous replication
Read replicas

143. Remove the
“muck”

144. Extra
services

145. Simple Queue
Service

146. Simple
Notification
Service

147. Elastic
MapReduce

148. S3
Input data

149. S3
Input data
Code Elastic
MapReduce

150. S3
Input data
Code Elastic Name
MapReduce node

151. S3
Input data
Code Elastic Name
MapReduce node
Elastic
cluster

152. S3
Input data
Code Elastic Name
MapReduce node
HDFS
Elastic
cluster

153. S3
Input data
Code Elastic Name
MapReduce node
Queries
HDFS
+ BI
Via JDBC, Pig, Hive
Elastic
cluster

154. S3
Input data
Code Elastic Name Output
MapReduce node S3 + SimpleDB
Queries
HDFS
+ BI
Via JDBC, Pig, Hive
Elastic
cluster

155. S3
Input data
Elastic Output
MapReduce S3 + SimpleDB

156. Undifferentiated
heavy lifting

157. Platform grows
with you

158. Premium support
Bronze, Silver, Gold, Platinum

159. 3
Maximising
Value

160. Elasticity

161. Design for
elasticity

162. Horizontal scale

163. “Everything fails,
all the time”
Werner Vogels

164. Build for failure

165. Build for
availability

166. Treat your data as
your royal garden

167. Compute as an
interchangeable
resource

168. Auto-scaling

169. Elastic Load Balancer

170. Choice of instance
sizes

171. Elastic by default
SimpleDB, SQS, SNS, S3

172. Automatic

173. Applications
in the cloud

174. 3 tiers

175. Application tier
Code Configuration

176. Application tier
Code Configuration
Service tier
Integration
Operating system
settings
Services +
Launch configuration
configuration

177. Application tier
Code Configuration
Service tier
Integration
Operating system
settings
Services +
Launch configuration
configuration
Infrastructure tier
AMIs Architecture Multi-AZ
Scaling rules Security groups Middleware

178. Value baked into
each tier

179. Value in
application

180. Value in
service tier

181. Optimisation Configuration
Value in
service tier
Technology
choices

182. Value in
infrastructure

183. Engine room Optimised
Value in
infrastructure
Scalable Fault tolerant

184. Maximising
Automation
maximises this value
value

185. Automate
everything

186. CloudFormation

187. Template

188. Define a full
infrastructure
stack

189. Auto-scaling
RDS
EC2 SNS
SimpleDB
SQS
Resources
Elastic Beanstalk CloudWatch
Security groups Tags

190. Template CloudFormation
Provisioned
resources

191. Complete
definition

192. Atomic

193. Idempotent

194. Free
Only pay for the provisioned resources

195. JSON

196. Perfect for
Plain text
version control
JSON
Validate-able

197. Declarative
language

198. {
"AWSTemplateFormatVersion" : "2010-09-09",
"Description" : "Create an EC2 instances",
"Parameters" : {
"KeyName" : {
"Description" : "Name of an existing EC2 KeyPair to enable SSH access to the instance",
"Type" : "String"
}
},
"Mappings" : {
"RegionMap" : {
"us-east-1" : {
"AMI" : "ami-76f0061f"
},
"us-west-1" : {
"AMI" : "ami-655a0a20"
},
"eu-west-1" : {
"AMI" : "ami-7fd4e10b"
},
"ap-southeast-1" : {
"AMI" : "ami-72621c20"
},
"ap-northeast-1" : {
"AMI" : "ami-8e08a38f"
}
}
},
"Resources" : {
"Ec2Instance" : {
"Type" : "AWS::EC2::Instance",
"Properties" : {
"KeyName" : { "Ref" : "KeyName" },
"ImageId" : { "Fn::FindInMap" : [ "RegionMap", { "Ref" : "AWS::Region" }, "AMI" ]},
"UserData" : { "Fn::Base64" : "80" }
}
}
},
"Outputs" : {
"InstanceId" : {
"Description" : "InstanceId of the newly created EC2 instance",
"Value" : { "Ref" : "Ec2Instance" }
},
"AZ" : {
"Description" : "Availability Zone of the newly created EC2 instance",
"Value" : { "Fn::GetAtt" : [ "Ec2Instance", "AvailabilityZone" ] }
},
"PublicIP" : {
"Description" : "Public IP address of the newly created EC2 instance",
"Value" : { "Fn::GetAtt" : [ "Ec2Instance", "PublicIp" ] }
}
}
}

199. {
"AWSTemplateFormatVersion" : "2010-09-09",
"Description" : "Create an EC2 instances", Headers
Parameters
"Parameters" : {
"KeyName" : {
"Description" : "Name of an existing EC2 KeyPair to enable SSH access to the instance",
"Type" : "String"
}
},
"Mappings" : {
"RegionMap" : {
"us-east-1" : {
"AMI" : "ami-76f0061f"
},
"us-west-1" : {
Mappings
"AMI" : "ami-655a0a20"
},
"eu-west-1" : {
"AMI" : "ami-7fd4e10b"
},
"ap-southeast-1" : {
"AMI" : "ami-72621c20"
},
"ap-northeast-1" : {
"AMI" : "ami-8e08a38f"
}
}
},
"Resources" : {
"Ec2Instance" : {
"Type" : "AWS::EC2::Instance",
Resources
"Properties" : {
"KeyName" : { "Ref" : "KeyName" },
"ImageId" : { "Fn::FindInMap" : [ "RegionMap", { "Ref" : "AWS::Region" }, "AMI" ]},
"UserData" : { "Fn::Base64" : "80" }
}
}
},
"Outputs" : {
"InstanceId" : {
"Description" : "InstanceId of the newly created EC2 instance",
"Value" : { "Ref" : "Ec2Instance" }
},
Outputs
"AZ" : {
"Description" : "Availability Zone of the newly created EC2 instance",
"Value" : { "Fn::GetAtt" : [ "Ec2Instance", "AvailabilityZone" ] }
},
"PublicIP" : {
"Description" : "Public IP address of the newly created EC2 instance",
"Value" : { "Fn::GetAtt" : [ "Ec2Instance", "PublicIp" ] }
}
}
}

200. Elastic Beanstalk

201. Java web
applications

202. Upload WAR

204. Your Application
Application Service
Java Web Platform
HTTP Service
Tomcat
Language Interpreter
Java
Operating System
Linux
Server
Amazon EC2

205. Best practice

206. Highly available

207. Customisable

208. Flexible

209. Free
Only pay for the provisioned resources

210. Monitored

211. Insight

212. CloudWatch

213. Free
5 minute resolution

214. Detailed
monitoring
1 minute resolution

215. CPUUtlization
DiskReadBytes
DiskReadOps
DiskWriteBytes
DiskWriteOps
NetworkIn
NetworkOut
DatabaseConnections
FreeStorageSpace
ReadLatency
ReadThroughput
SwapUsage
WriteLatency
WriteThroughput

216. Custom metrics

217. Price aware

218. Mix On-demand,
Reserved Capacity
and Spot

219. Relate to
business metrics

220. Cost per user

221. Cost per
operation

222. White papers:
aws.amazon.com/
whitepapers

223. Premature
optimisation

224. Maximise
value

225. 4
Security in
the Cloud

226. Shared
responsibility

227. Requirement
based access

228. Certification

229. ISO 27001
+
SAS 70 Type II

230. PCI DSS
Level 1

231. Control objectives
Security organisation Employee lifecycle
Logical security Secure data handling
Physical security Environmental safeguards
Change management Incident handling
Availability and
Data integrity
redundancy

232. DDOS
Man in the Middle
IP spoofing

233. Data access
control

234. Detailed logging

235. Data stays local

236. Identity and
access control

237. API level rights
management

238. Account

239. Billing
Account credentials Account
MFA

240. Account
DBA Developer Sys admin Finance
Roles

241. Account
DBA Developer Sys admin Finance
Roles
Sally
Robert
Users
Chris

242. Security credentials
Multifactor authentication
Management console access
Data read/write access
API level access

243. Account
DBA Developer Sys admin Finance
Roles
Sally
Robert
Users
Chris

244. Network
isolation

245. Virtual Private
Cloud

246. Virtual network
topology

247. Public, private
IP address range
subnets
Virtual network
topology
Route tables Network gateways

248. Network access
control

249. Inbound Outbound
Network access
control
S3 access
VPN

250. Dedicated
instances

251. Public subnet
Public facing website

252. Public subnet
Network ACLs + security groups
Private subnet
Multi-tier applications

253. Public subnet
Private subnet
IPsec VPN
On-premise
Extend your data centre

254. Private subnet
IPsec VPN
On-premise
Extend your data centre

255. DR

256. Backup to EC2
and EBS
DR
VM import

257. aws.amazon.com/security

258. aws.amazon.com

259. Thank you!

260. QUESTIONS + FEEDBACK:
matthew@amazon.com
@mza
O N T W I T T E R