Learn how you can use AWS to adapt to a changing interconnected market, and take advantage of global responsiveness and minimal barriers to innovation. AWS can help you create value for the business in addition to saving costs on infrastructure. Gain insights from lessons learned and recommendations on how to accelerate the path to business value.

1. Cloud Journey & Lessons learned
Marina Congress Center | 08.03.2018

2. Tuomas Mäkinen, AWS Enterprise Nordics
Mika Turunen, CTO Checkout Finland Oy

3. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.3
The average lifespan of an
S&P company dropped from
60 years in the 1960s to 20
years today
Over ½ of New Project
Budgets* ($413 BN USD) will
go to building technologies
to help win, serve and retain
customers vs running
existing operations.
84% of CIOs have
responsibilities outside of
traditional IT commonly
including innovation and
transformation. CIO success
criteria is shifting from
delivery (cost center) to
business-based measures
(revenue generation)
* New project budgets are net new investments as opposed to projects designed to provide business continuity

4. Disruption is much
easier today
This is something “born in the
cloud” companies have already
discovered.
© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.4
Hospitality Trading
Insurance Devices
Grocery

5. Cloud Computing has become the
new normal
© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.5
Migrating existing
applications as quickly as
possible
Deploying new
applications to the cloud
by default

6. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.6
Responding requires a new model
FOCUS
on differentiating
your company.
at start-up like
speed.
INNOVATE
under your terms.
MIGRATE
risk.
REDUCE

7. Focus on
differentiation
and reduce technical debt.
© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.7

8. Reduce time-consuming, expensive tasks
Rethink your approach to technology
investments, reducing complexity and cost
Stop guessing at capacity planning
Remove complicated infrastructure
management that adds little business value
Go global in minutes
GE Oil & Gas is migrating
500 applications, and
more than 750TB of data,
to the cloud by the end of
2016 as part of a major
digital transformation,
helping it attain a 52%
reduction in TCO and
greater speed to market.
© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.8

9. Deploy faster wherever you like
© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.9
18 geographic Regions
1 Local Region
53 availability zones
114 edge locations
AWS serves millions of
active customers every
month in 190 countries

10. Focus on your core mission
Lower the time
spent on
infrastructure
© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.10
Concentrate on new
business initiatives
Dedicate more
resources to
innovation
“3M HIS is not in the IT
business. Rather, we are a
healthcare-analytics
company. We are getting
out of IT operations, and by
going to AWS, we can focus
our R&D team on the
science of healthcare. For
us that means analytics
rather than IT, enabling us
to attack the healthcare
industry’s cost and quality
challenges”
David Frazee
Chief Technology Officer
3M Health Information Systems

11. Some AWS customers in Finland and the Nordics

12. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.12
Innovate at
start-up like
speed

13. Account Support
Support
Managed
Services
Professional
Services
Partner
Ecosystem
Training &
Certification
Solution
Architects
Account
Management
Security &
Pricing Reports
Technical Acct.
Management
Marketplace
Business
Applications
DevOps Tools
Business
Intelligence
Security
Networking
Database &
Storage
SaaS
Subscriptions
Operating
Systems
Mobile
Build, Test,
Monitor Apps
Push
Notifications
Build, Deploy,
Manage APIs
Device Testing
Identity
Enterprise
Applications
Document
Sharing
Email &
Calendaring
Hosted
Desktops
Application
Streaming
Backup
Game
Development
3D Game
Engine
Multi-player
Backends
Mgmt. Tools
Monitoring
Auditing
Service Catalog
Server
Management
Configuration
Tracking
Optimization
Resource
Templates
Automation
Analytics
Query Large
Data Sets
Elasticsearch
Business
Analytics
Hadoop/Spark
Real-time Data
Streaming
Orchestration
Workflows
Managed
Search
Managed ETL
AI
Voice & Text
Chatbots
Machine
Learning
Text-to-
Speech. NLP
Image Analysis
IoT
Rules Engine
Local Compute
and Sync
Device
Shadows
Device
Gateway
Registry
Hybrid
Devices & Edge
Systems
Data Integration
Integrated
Networking
Resource
Management
VMware on AWS
Identity
Federation
Migration
Application
Discovery
Application
Migration
Database
Migration
Server MigrationData Migration
Infrastructure Regions
Availability
Zones
Points of
Presence
Compute Containers
Event-driven
Computing
Virtual Machines Simple Servers Auto Scaling Batch
Web
Applications
Storage Object Storage Archive Block Storage
Managed File
Storage
Exabyte-scale
Data Transport
Database MariaDB
Data
Warehousing
NoSQLAurora MySQL Oracle SQL ServerPostgreSQL
Application
Services
Transcoding Step Functions Messaging
Security
Certificate
Management
Web App.
Firewall
Identity &
Access
Key Storage &
Management
DDoS Protection
Application
Analysis
Active Directory
Dev Tools
Private Git
Repositories
Continuous
Delivery
Build, Test, and
Debug
Deployment
Networking
Isolated
Resources
Dedicated
Connections
Load Balancing Scalable DNSGlobal CDN
The AWS
Platform
VR
VR/AR
Bare-Metal
Media
Store/Convert
Live
Threat detection
Graph
Analytics
Management
Defender
Managed
Models
Video
Transcribe
Translate
Deep L.
Camera
Select

14. AWS Pace of Innovation
AWS has been continually expanding its services to
support virtually any cloud workload, and it now has more
than 100 services that range from compute, storage,
networking, database, analytics, application services,
deployment, management, developer, mobile, Internet of
Things (IoT), Artificial Intelligence (AI), security, hybrid and
enterprise applications. AWS has launched a total of 1,430
new features and/or services year to date* for a total of
4,343 new features and/or services since inception in 2006.
2011
82
722
1,430
280
2013 2015 2017
* As of 1 January 2018

15. Take advantage of new computing
models
Serverless architectures free you from managing infrastructure MLBAM uses AWS Lambda
to support the analysis of
data feeds in MLB Statcast’s
metrics engine. It takes the
raw data, cleans it up, and
conducts error detection,
then creates the metrics that
bring more insights into
plays; all within 12 seconds
of a play.
© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.15
Develop without
worrying about
servers to
manage
Setup your code
to run in
response to a
variety of
triggers
Code is executed
on demand with
continuous
scaling
Pay only for the
time used with
sub-second
metering

16. Get value out of your data
© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.16
Central Storage
Catalog & Search
Access and search
metadata
• AWS Glue Data
Catalog
• DynamoDB
• Elasticsearch
Access & User Interface
Give your users easy and secure
access
• API Gateway
• Identity & Access Management
• Cognito
Data Ingestion
Get your data into S3 quickly
and securely
• Kinesis Firehose
• Glue ETL
• Snowball
• Database Migration
Service
Processing & Analytics
Use of predictive and
prescriptive analytics to gain
better understanding
• QuickSight
• Amazon AI
• EMR
• Redshift
• Elasticsearch
• Athena
• Kinesis
• RDS
Protect & Secure
Use entitlements to ensure
data is secure and users’
identities are verified
• Security Token Service
• CloudWatch
• CloudTrail
• Key Management Service
Secure, cost-effective
storage in Amazon S3

17. Endpoints
Fleet onboarding,
management and
SW updates
Fleet
audit and
protection
IoT data analytics
and intelligence
Gateway
Things
Sense & Act
Cloud
Storage & Compute
Secure local
triggers, actions,
and data sync
Intelligence
Insights & Logic → Action
Secure device
connectivity
and messaging
AWS IoT Architecture

18. Frameworks &
Infrastructure
AWS Deep Learning AMI
GPU
(P3 Instances)
MobileCPU IoT (Greengrass)
Vision:
Rekognition Image
Rekognition Video
Speech:
Polly
Transcribe
Language:
Lex Translate
Comprehend
Apache
MXNet
PyTorch
Cognitive
Toolkit
Keras
Caffe2
& Caffe
TensorFlow Gluon
Application
Services
Platform
Services
Amazon Machine
Learning
Mechanical
Turk
Spark &
EMR
Amazon
SageMaker
AWS
DeepLens
Amazon confidential
Artificial Intelligence fully integrated in AWS

19. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.19
Migrate under
your own terms.

20. Migration to the Cloud is a
process that takes time and
iterations
© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.20

21. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Where are you on your journey?
© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.21
Cloud Native
Retire Tech Debt
Time
Value
PROJECT FOUNDATION MIGRATION REINVENTION

22. IT Map - Traditional IT
Products & Services
CTO/VP Applications/LoB Owners
Digital Products, Brand Websites, Mobile
Applications, Point of Sale Systems, Commerce
E-mail, Productivity, Collaboration, HR,
Finance, ERP
Back Office Systems
CIO/VP Corp Systems
Desktop Support, Device Management,
Telephony, IT Support
End User Computing
VP IT Support
Infrastructure/Delivery
VP Infrastructure
Information Security
CISO
Encryption, Key Management, Identity Management, Firewalls, IDS,
DDoS
PMO Engineering Operations Design

23. IT Map - A Cloud-First Tomorrow
End User
Computing
Back Office
Systems
Business
App
Business
App
Business
App
Business
App
Business
App
Business
App
Products and Services
Information Security
Cloud Center of Excellence

24. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.24
Portfolio Discovery &
Planning
Application
Design
Migration &
Validation
Operate
Migration
Preparation &
Business Case
Continually
optimize
There is a
migration
process.

25. Application migration patterns
© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.25
Redesign
Application/
Infrastructure Architecture
App Code
Development
Full ALM /
SDLC
Integration
Purchase COTS/
SaaS & licensing
Manual Install
& Setup
Modify underlying
Infrastructure
Determine
new platform
Retain /
Revisit
Manual Config
Manual Deploy
Manual Install
Retire /
Decommission
Discover/Assess/Prioritize
Applications
Determine
Migration
Path
Use Migration Tools
Transition ProductionValidation
Automate

26. The Migration Acceleration Program (MAP)
© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.26
AWS PartnersAWS & Partner ToolsMigration Methodology
AWS Professional
Services
AWS TrainingAWS Investment

27. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.27
Reduce risk.

28. Move fast. Stay secure.OR

29. Move fast. Stay secure.AND

30. Strengthen your security posture
” In the last four years as we
transitioned to the cloud, I have
come to realize that as a relatively
small organization, we can be far
more secure in the cloud and
achieve a higher level of assurance
at a much lower cost, in terms of
effort and dollars invested. We
determined that security in AWS is
superior to our on-premises data
center across several dimensions,
including patching, encryption,
auditing and logging, entitlements,
and compliance.
John Brady
FINRA CISO
© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.30
Security infrastructure built to satisfy military,
global banks, and other high-sensitivity
organizations
Leverage security enhancements from 1M+
customer experiences
Benefit from AWS industry leading security
teams 24/7, 365 days a year
Over 50 global compliance certifications and
accreditations

31. AWS & compliance standards
Certifications / Attestations: Laws / Regulations / Privacy: Alignments / Frameworks:
https://aws.amazon.com/compliance/
https://aws.amazon.com/compliance/gdpr-center/
https://aws.amazon.com/artifact/

32. Virtual Private Cloud
Isolated cloud resources
Web Application Firewall
Filter Malicious Web Traffic
Shield
DDoS protection
Certificate Manager
Provision, manage, and
deploy SSL/TSL certificates
Networking
Key Management Service
Manage creation and control
of encryption keys
CloudHSM
Hardware-based key storage
Server-Side Encryption
Flexible data encryption
options
Encryption
IAM
Manage user access and
encryption keys
SAML Federation
SAML 2.0 support to allow
on-prem identity integration
Directory Service
Host and manage Microsoft
Active Directory
Organizations
Manage settings for multiple
accounts
Identity & Management
Service Catalog
Create and use standardized
products
Config
Track resource inventory and
changes
CloudTrail
Track user activity and API
usage
CloudWatch
Monitor resources and
applications
Inspector
Analyze application security
Compliance
Access a deep set of cloud security tools
Macie
Discover, Classify & Protect
data

33. Shared responsibility model
© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.33
Compute
Responsible for
security OF the cloud
Customer
Responsible for
security IN the cloud
• Customer Data
• Platform, Applications, Identity & Access Management
• Operating System, Network & Firewall Configuration
• Client-side Data Encryption & Data Integrity Authentication
• Server-side Encryption (File System and/or Data)
• Network Traffic Protection (Encryption, Integrity, and/or Identity)
• Compute
• Storage
• Database
• Networking
• AWS Global Infrastructure
• Regions
• Availability Zones
• Edge Locations

34. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.34
The AWS Cloud
FOCUS
Eliminate costly
technical debt and
reallocate
resources to focus
on differentiated
work
Innovate faster
using the leading
cloud platform,
and solidify your
competitive
advantage.
INNOVATE
Migrate at your
own speed
leveraging tools,
programs, and
partnerships to
make your
migration to the
cloud smooth
MIGRATE
Reduce risk by
focusing resources
dedicated to
security,
compliance &
availability
REDUCE

35. The AWS Cloud
Eliminate costly technical debt and
reallocate resources
Innovate faster and solidify your
competitive advantage
Reduce risk by focusing resources
dedicated to security, compliance &
availability
"AWS is our
trusted partner
that is going to
run our company
for the next 140
years.”
Jim Fowler
CIO, General Electric
© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.35

36. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Checkout Finland
Mika Turunen - CTO | March 8th 2018
@mikaturunen
CTO by day, developer by night, OSS involved

37. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Checkout Finland
• Finnish payment service provider (PSP)
• Completely OP owned, agile startup inside a bank
• Banks are buying PSP’s in the Nordics
• What did we move to AWS and what do we have there

38. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Why AWS?
• Trust
• Battle tested
• What it meant to get everything into AWS from a traditional
infrastructure

39. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Cost & the work involved
• The shorter, the sweeter: ~halved.
• Latencies have gone down considerably on basic asset serving
and API levels.
• Migration: 30h shift for my team (transition from ops to
devops)

40. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Experiences with AWS
• What worked great for us
• What didn't work so well
• What critical assumptions did we have that were incorrect?
• Any lessons learned?

41. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Build pipelines, releases and disaster
recovery
• Instant immutable infrastructure.
• Build processes that are streamlined in a manner where we have more
control and cause no downtimes.
• Normal release cycles for us, super fast release cycles for a bank.

42. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
So, what next?
• Identification Service Provider (IdP) business can start now
• reference: the law changed last June
• Take full advantage of data warehousing solutions and develop our
Merchant available analytics service
• Well Architected Reviews (WAR), more WAR!
• Fargate, please? Pretty, please? Hint: Frankfurt ❤
• Can you have too much Serverless? I guess we’ll find out.

43. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
So, what next?
• Identification Service Provider (IdP) business can start now
• reference: the law changed last June
• Take full advantage of data warehousing solutions and develop our
Merchant available analytics service
• Well Architected Reviews (WAR), more WAR!
• Fargate, please? Pretty, please? Hint: Frankfurt ❤
• Can you have too much Serverless? I guess we’ll find out.

44. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Thank you – Q&A