AWS Summit 2014 Perth - Breakout 5 Increased agility, elasticity, focus on core business, optimized costs, and better security are all good outcomes when it comes to working with AWS. But, for an enterprise with many existing complex applications, integrated operations, and sophisticated teams, this integration and transition requires thought and planning. Within this session, we will start with a typical enterprise customer and work backwards step by step to show how an extreme IT makeover it possible with reusable examples; demonstrating that an application doesn’t have to be written for cloud to realize cloud’s benefits. Many large-scale shops are already leveraging AWS without sacrificing what they are good at, and we will explain the framework for kicking off this initiative within your own organization. Presenter: Richard Busby, Solutions Architect, Amazon Web Services

1. Extend your Datacenter
with the AWS Cloud
Richard Busby
Solutions Architect, Amazon Web Services
© 2014 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified, or distributed in whole or in part without the express consent of Amazon.com, Inc.

2. Target state
Corporate data center
AWS cloud
Ops Team
Ops Tools
Existing investment
Lots of complex apps
Fixed cost
Static
New environment
Lots of complex apps
Flexible
Utility cost
New services

3. How do we get there?
Kickoff Plan Build Migrate Run Review

4. Kickoff
• Sponsor?
• Timeframes?
• Success criteria?
• Are we solving a business issue?
• In-house skills or partner?
Useful AWS resources
– “Overview of Security Processes” whitepaper
– “Your first hour on AWS” Summit presentation
– “Using AWS in the context of Australian Privacy Considerations” whitepaper
– AWS Operational Checklists
– AWS Architecture Center and reference architectures

5. Plan: candidate use case / workload
Typical candidates
Spikey workloads (eg web)
Test/dev environments
Analytics
Backup and archiving
Disaster recovery
CRM
ERP
CRM-test
SharePoint
Website
AD
email
Monitoring
SharePoint-test
Corporate data center

6. Plan: SharePoint as an example
Multiple tiers
Crawl server
Other apps
Query server
Search DB
Content DB
Other data
Web tier
Web tier
Administration
ERP
Directory
Monitoring
backup
External dependencies
Operational processes
Backup
Monitoring
Alerting
Reporting
Patching
Upgrades

7. Plan: what needs to change?
Possible changes
HA methodology
Latency
OS deployment
Backup and recovery
Disaster recovery
Unlikely to change
App architecture
Monitoring
Data structures

8. Build: Networking
AWS Direct Connect
VPN connection
Internet gateway
Virtual private cloud
Web tier
Crawl server
Search DB
Web tier
Other apps
Content DB
Administration
Query server
Other data
router
VPC subnet
VPC subnet
VPC subnetVPC subnet
Corporate data center
AWS cloud

9. Build: CloudFormation
"VPC" : {
"Type" : "AWS::EC2::VPC",
"Properties" : {
"EnableDnsSupport" : "true",
"EnableDnsHostnames" : "true",
"CidrBlock" : { “10.0.0.0/8” },
"Tags" : [
{ "Key" : "Application", "Value" : { "Ref" :
"AWS::StackName" } },
{ "Key" : "Network", "Value" : ”My_VPC" }
]
}
},

10. Build: Services
AWS Direct Connect
VPN connection
AD DC
DNS
Virtual private cloud
Web tier
Crawl server
Search DB
Web tier
Other apps
Content DB
Administration
Query server
Other data
App-level backup
Corporate data center
AWS cloud

11. Build: Monitoring and alerting
Virtual private cloud
AWS Direct Connect
VPN connection
CloudTrailCloudWatch
Web tier
Crawl server
Search DB
Web tier
Other apps
Content DB
Administration
Query server
Other data
AWS Management
Console
CloudWatch
Logs
Corporate data center
AWS cloud

12. Build: Monitoring and alerting

13. Build: Monitoring and alerting

14. Build: Monitoring and alerting
Virtual private cloud
AWS Direct Connect
VPN connection
CloudTrailCloudWatch
Web tier
Crawl server
Search DB
Web tier
Other apps
Content DB
Administration
Query server
Other data
CloudWatch
Logs
Existing
Monitoring
tools
Corporate data center
AWS cloud

15. Build: Monitoring and alerting
Virtual private cloud
AWS Direct Connect
VPN connection
CloudTrailCloudWatch
Web tier
Crawl server
Search DB
Web tier
Other apps
Content DB
Administration
Query server
Other data
CloudWatch
Logs
Monitoring
Corporate data center
AWS cloud

16. Build: Monitoring and alerting

17. Migrate: AWS Management Portal for vCenter
Virtual private cloud
AWS Direct Connect
Web tier
Crawl server
Web tier
Other apps
Administration
Query server
Search DBContent DB
Other data
VPN connection
Management
portal for vCenter
Web tier
Crawl server
Search DB
Web tier
Other apps
Content DB
Administration
Query server
Other data
Corporate data center
AWS cloud

18. Migrate: AWS Management Portal for vCenter

19. Migrate: AWS Management Portal for vCenter

20. Migrate: AMIs and data migration
Virtual private cloud
AWS Direct Connect
Web tier
Crawl server
Web tier
Other apps
Administration
Query server
Search DBContent DB
Other data
VPN connection
Web tier
Crawl server
Search DB
Web tier
Other apps
Content DB
Administration
Query server
Other data
S3 bucket
Corporate data center
AWS cloud

21. Migrate: testing
• Functional testing
– Does it work the same as on-prem?
– How do we compare the two?
• Stress testing
– Does it handle the load we expect?
– What impact does instance failure have?

22. Review
• What worked? What didn’t?
• What can we re-use?
– VPC
– Monitoring
– CloudFormation templates
– App-level backups
– DNS, AD
• What are our next candidates?

23. Key takeaways
Kickoff Plan Build Migrate Run Review
corporate data center
AWS cloud

24. Expand your skills with AWS
Certification
Exams
Validate your proven
technical expertise with
the AWS platform
aws.amazon.com/certification
On-Demand
Resources
Videos & Labs
Get hands-on practice
working with AWS
technologies in a live
environment
aws.amazon.com/training/
self-paced-labs
Instructor-Led
Courses
Training Classes
Expand your technical
expertise to design, deploy,
and operate scalable,
efficient applications on AWS
aws.amazon.com/training

25. © 2014 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified, or distributed in whole or in part without the express consent of Amazon.com, Inc.