Transcript: #StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024
2011 AWS Tour Australia, Opening Keynote: State of the Cloud, by Dr. Werner Vogels
1.
2. State of the CloudAWS Summit 2011, Sydney Dr. Werner Vogels CTO, Amazon.com
3. Amazon’s Three Businesses Consumer (Retail)Business SellerBusiness IT Infrastructure Business Over a 100 million of active customer accounts Eight countries: US, UK, Germany, Japan, France, Canada, China, Italy Sell on Amazon websites Use Amazon technology for your own retail website Leverage Amazon’s massive fulfillment center network Cloud computing infrastructure for hosting web-scale solutions Hundreds of thousands of registered customers in over 190 countries
4. Key benefits to running in The Cloud Lowers Cost Eliminates Capital Investment Reduces Operational Costs Increases Agility Reduce Time to Market Removes contraints Foundation for21st Century Architectures Removes the “Heavy Lifting” Leverages Scalability, Reliability and Security
12. Fast Time to Market Highly Scalable Fast Local Performance Lowering Cost
13. By using cloud services, the Federal Government will gain access to powerful technology resources faster and at lower costs. This frees us to focus on mission-critical tasks instead of purchasing, configuring, and maintaining redundant infrastructure. Vivek Kundra Enhanced Recovery.gov security The improved computer security includes, but is not limited to, greater protection against network attacks and real time detection of system tampering
14.
15.
16.
17.
18.
19.
20. Amazon Edge Locations AWS Regions Hong Kong Tokyo Singapore Amsterdam Dublin Frankfurt London Paris Ashburn, VA Dallas, TX Jacksonville, FL Los Angeles, CA Miami, FL Newark, NJ New York, NYPalo Alto, CA Seattle, WASt. Louis, MO US East (Northern Virginia) US West (Northern California) Europe (Dublin) Asia Pacific (Singapore) Asia Pacific (Tokyo)
22. Each day AWS adds the equivalent server capacity to power Amazon when it was a global, $2.76B enterprise(circa 2000)
23. AWS Pace of Innovation » Amazon Simple Notification Service » RDS Multi-Availability Zone Support » S3 Reduced Redundancy Storage » New Locations and Features for CloudFront » S3 Bucket Policies » Cluster Instances for EC2 » EC2 Reserved Instances » New SimpleDB Features » IBM on EC2 » Windows Server 2008 on EC2 » Amazon RDS » Amazon Virtual Private Cloud » Amazon Elastic MapReduce » EBS Shared Snapshots » Monitoring, Auto Scaling & Elastic Load Balancing for EC2 » AWS Import/Export » Premium Support » Amazon CloudFront » EC2 Elastic IP addresses & Availability Zones » Windows Server, MySQL, Oracle, & JBoss on EC2 » Lower Data Transfer Costs » Amazon EC2 » Amazon S3 » Developer Portal & Forums » Amazon Linux AMI » Oracle on EC2 » New EC2 Features » SUSE Linux on EC2 2005 2010 2006 2007 2008 2009 » Micro Instances » Lower Pricing for EC2 High Mem Instances » Identity & Access Management » AWS Services in N. California » AWS Multi-Factor Authentication » AWS Management Console » AWS Economics Center » AWS in Education » AWS Security Center » SAS70 Type II Audit » More services in EU » Lower EC2 Pricing » Lower S3 Pricing » Lower pricing for Outbound Data Transfer » AWS Solution Provider Program » Amazon SimpleDB » Amazon Flexible Payments Service » S3 in Europe » EC2 new instance types » AWS Start-Up Challenge » AWS Services in Singapore » RDS Reserved Database Instances » RDS Read Replicas & Lower Pricing » Lower Outbound Transfer Pricing » Data Transfer Usage Tiers » Consolidated Billing for AWS » Amazon S3 Versioning Feature » EC2 High Memory Instances » Public Data Sets » Elastic Block Store » EC2 SLA » EC2 in EU » S3 Tiered Pricing » Amazon SQS » Amazon Mechanical Turk
24. AWS Innovation in 2010 » Free Monitoring EC2 » Amazon Route 53 » PCI DSS Level 1 Certification » Mobile SDKs (Android, iPhone) » Large Object S3 Support » Florida POP » Import/Export APAC » Amazon SNS » Combined AWS Data Transfer Savings » Amazon EMR BootStrap Actions » Amazon ELB Session Stickiness » Amazon RDS in EU » New Singapore Region » RDS Reserved » CloudFront Default Root » Startup Challenge 2010 » Cloudfront Invalidation » AWS Elastic Beanstalk » Amazon Simple Email Service » Improved AWS Support “Bronze” » Amazon CloudWatch Console » CloudFront HTTPS » NYC Edge Location » Lowers Pricing HTTP » AWS Import Export GA » Amazon SNS » Amazon S3 Console » Amazon EBS Cloudwatch » Amazon RDS Read Replicas » Suse EC2 Linux » Amazon SNS Console » Amazon ELB HTTPS » AWS Free Tier » EMR Resizing Cluster » EMR JobFlow Debugging » Simple DB Consistent Reads » Simple DB Conditional Puts » VM Connector » Tokyo Region » AWS Support JP 2010 Jan 2011 Jan Jul Sep Oct Dec Aug Nov Feb Mar Apr Jun May Feb Mar » Amazon S3 Lowered Pricing » CloudFront GA, SLA » S3 MultiPart » GPGPU Instance Types » ISO27001/2 Certification » Amazon SQS Longer retention, Free Tier Amazon S3 Bucket Policies » Amazon VPC IP Address » Cluster Compute Instances » Amazon S3 RRS Notifications » AWS Java SDK » Windows BYOL » Singapore Pop » CloudFront Private Streaming » Lowered Pricing EC2 » AWS IAM » Amazon VPC Console » Micro Instances » Amazon Linux AMI » Amazon EC2 Tagging, Filtering, Idempotency, » Oracle Certified AWS » AWS PHP SDK » AWS CloudFormation » Amazon S3 Static Websites » AWS IAM Website Login » Paris Edge Location » Amazon EC2 Reserved Instances with Windows, Extra Large High Memory Instances » Amazon S3 Versioning Feature » Consolidated Billing for AWS » Lower pricing for Outbound Data Transfer » VPC in EU » Amazon RDS in US-west » Amazon CloudFront Access Logs » Amazon RDS Multi-AZ » Amazon S3 RRS » Amazon RDS Console
25. The Key to Success? Listening to Our Customers
26. CloudFront Pace of Innovation » Price Drop » HTTPS Support » Lower 1-Hour TTLs » Access Logs for Streaming » New York City Edge Location » Access Logging Capability » CloudFront Management Console » Custom Origins » Service Level Agreement » Jacksonville Edge Location » Route 53 Public Beta » Private Content » Streaming Video on Demand » CloudFront Public Beta Q4 2008 Q1 2009 Q2 2009 Q1 2011 Q3 2009 Q4 2009 Q1 2010 Q2 2010 Q3 2010 Q4 2010 » New Lower Pricing Tiers » Paris Edge Location » (IAM) Identity & Access Management » Singapore Edge Location » Private Streaming » Enhanced CloudFront Logs » Default Root Object » Invalidation
27. 2010 Customer Wish list Expanded Global Footprint Lower Prices & New Pricing Features Make it Easier to Use Improved Support Offerings New Instance Types Expand Platform Up and Out
28. Lower Prices and New Pricing Features Lower Outbound Data Transfer Prices Consolidated Billing Combined Data Transfer Prices Lower Prices for S3 and Reduced Redundancy Storage (lower price/less durability) Lower Prices on Gold & Silver Support
54. Fault Separation in Availability Zones Physically Separate Separate Flood Planes Seismic Stable Areas UPS, Backup and Separate Grids Redundant Tier 1 networks
60. AI Enterprise Architecture Presentation – Web Center Enhanced Customer Data Form Shipment Tracking Form Inventory Management Form BOM Entry Form Manage RFQ Form Order Entry Form Landing Pad Web 2.0 ..... Business Functions - BPEL Order Entry Billing Payables Inventory Management Engineering Documents Sourcing RFQ Order Tracking Shared Folders ..... Workflow Notifications Web Services from Oracle and Bespoke Message & Routing Bus - OSB Workflow & Notification Services Data Transformation Service XML Parser Event Manager ..... Get Customer Get Order Get Part Validate Login Write Order Write Customer Write Part Send Email Build RFQ Technology Layer Oracle eBusiness Oracle BI Oracle Beehive Doc Man Outside Web Active Dir Oracle Agile EDI Gateway Telecom SMS CAD CAM MS Office .... Customer Order Finance MySQL Folders Oracle Oracle Oracle Internet MSSQL Oracle Internet PSTN Folders 49
64. Immediate Action Plan Cloud Integration Strategy Enterprise cloud strategy Internet Services Strategy Incremental Learning Steps New IT Strategy Existing IT Strategy
70. AWS Future Investments Continued focus on operational excellence Continued focus on security features and relevant industry certifications New billing, user, and identity features Continued global geographic expansion + localization Continued tool development Training and certification programs Additional services that make it even easier for folks to run their infrastructure on us
71. Keys in Choosing a Cloud Security: understand data and network requirements? Operational Performance: proven track record of delivering a reliable cloud platform? Cost: track record of lowering prices and comfort running high volume/low margin businesses? Options/Flexibility: maximum flexibility in choosing whichever operating system, programming language or services you wish to use? Speed of Innovation and Execution: are you being listened to and how nimble is your platform partner?
Notas del editor
Amazon is committed to it’s three main business units: Consumer business, Seller business, and AWS. AWS is rapidly growing, we’ve come along way, but it’s still Day One!
PREDICTING which way the wind will blow is important to sailors and pilots, but it's also vital knowledge for builders.Understanding wind direction and intensity is essential when designing everything from wind turbines to tall office buildings. Getting things wrong can result in disadvantages such as low power output or unpleasant street conditions for pedestrians.Before construction begins, accurate models must be created to anticipate where winds will blow and the impact the new structures could have on that flow.Such models use large amounts of data and require serious computational resources.For small Australian wind consulting firm Cyclopic Energy, such modelling is part of everyday business. The company specialises in advising large firms on the implications of wind when it comes to planning building projects.RELATED COVERAGETelstra bulks up its cloudThe Australian, 16 Jun 2011Telstra NBN deal still a mysteryHerald Sun, 16 Jun 2011Apple to unveil online music storeThe Australian, 24 May 2011Platform with a sky-high potentialThe Australian, 9 May 2011Outsourcing raises questions for companiesThe Australian, 9 May 2011Cyclopic technical director Rick Morgans says the three-year-old company began operations with a single, eight-core server connected to a series of workstations. While this performed well, it quickly became apparent that it could not provide the sort of computing resources required to complete increasingly large jobs.Rather than investing in more in-house computing resources, the company opted to make use of Amazon Web Services and its on-demand cloud-based processing capacity."Our work tends to be very bursty in nature," Morgans says. "It did not make sense to invest in extra servers only to have them sitting around being underutilised for periods of time."Instead, the company makes use of Amazon's Elastic Compute Cloud (EC2) which provides access to a scalable amount of processing and storage resources.On this platform, it runs OpenFOAM, an open source computational fluid dynamics software application that creates the wind models required by clients.It can simulate everything from the performance of new wind turbines to the impact of changes in design to a proposed office tower in the centre of a city.Because of the scalability offered by EC2, Cyclopic can run multiple simulations concurrently, dramatically reducing the time taken to complete a given project. What would have taken about two months to complete can now be done within two days.The terabytes of data resulting from the modelling process is stored within Amazon's S3 cloud storage facility. Slices of data are then pulled down to create the final client reports."It simply wouldn't be feasible for us to do the sort of jobs we have on now using our own internal server," Morgans says. "You need to be able to cover peak capacity demands and the cloud provides a cost-effective way of doing that."Morgans says the Amazon cloud effectively gives his company access to super computer capabilities, but in an on-demand and pay-as-you-use form."It has changed the way we operate," he says. "We have now said that we will never purchase another server to use internally."When it comes to purchasing cloud processing capacity, Cyclopic has two choices. The company can pay the going rate and be assured of access to the resources it requires for the period it needs.Alternatively, it can use a stock market-style system where it bids for capacity and receives it depending on the demand from other competing customers.Customers bid on unused capacity within the Amazon cloud and then have access to it for as long as the spot price remains under that bid. When the spot price rises due to increased demand for resources, that processing job is suspended until demand (and the spot price) falls again.Morgans says this system is very cost-effective for jobs that are not particularly time critical.He says the cloud computing sector is evolving so quickly that his company is still trying to assess other ways in which it can be used to provide value for clients."It is a totally different way of working," he says. "It has made us much more competitive."
Here’s what the AWS platform looks like today, we are building upon the basic building blocks of basic infrastructure services
Fault Separation Amazon EC2 provides customers the flexibility to place instances within multiple geographic regions as well as across multiple Availability Zones. Each Availability Zone is designed with fault separation. This means that Availability Zones are physically separated within a typical metropolitan region, on different flood plains, in seismically stable areas. In addition to discrete uninterruptable power source (UPS) and onsite backup generation facilities, they are each fed via different grids from independent utilities to further reduce single points of failure. They are all redundantly connected to multiple tier-1 transit providers. It should be noted that although traffic flowing across the private networks between Availability Zones in a single region is on AWS-controlled infrastructure, all communications between regions is across public Internet infrastructure, so appropriate encryption methods should be used to protect sensitive data. Data are not replicated between regions unless proactively done so by the customer.
Fault Separation Amazon EC2 provides customers the flexibility to place instances within multiple geographic regions as well as across multiple Availability Zones. Each Availability Zone is designed with fault separation. This means that Availability Zones are physically separated within a typical metropolitan region, on different flood plains, in seismically stable areas. In addition to discrete uninterruptable power source (UPS) and onsite backup generation facilities, they are each fed via different grids from independent utilities to further reduce single points of failure. They are all redundantly connected to multiple tier-1 transit providers. It should be noted that although traffic flowing across the private networks between Availability Zones in a single region is on AWS-controlled infrastructure, all communications between regions is across public Internet infrastructure, so appropriate encryption methods should be used to protect sensitive data. Data are not replicated between regions unless proactively done so by the customer.
VPC WizardCreate a VPC with one of four pre-defined network architectures Connectivity OptionsInternet GatewayConnect your VPC directly to the InternetAccess EC2, Amazon S3, and other AWS resources via this gatewayUse S3 bucket policies to restrict access to only VPC IPsVPN GatewayConnect your VPC directly to your datacenterSecurity GroupsSupport for inbound and outbound filteringSupport for all protocolsChange security group membership on running instancesSecurity group UI has been redesignedFeature parity with API/CLINetwork ACLsStateless filters with Allow and Deny rulesInbound and outbound filtering rules are supportedAll protocols are supportedUse Identity and Access Management to lockdown access to ACLs once they’re setRoutingCreate route tables and apply them to individual subnetsYou can route traffic to different gateways based on destination IP address rangesElastic IP AddressesYou can assign Elastic IP Addresses to VPC instancesPrivate Subnets with Outbound Access via NATInstances in a private subnet can traverse the Internet via a Network Address Translation (NAT) instanceUse case: instances that need to obtain software updates but don’t need to be publicly accessible from the Internet