Monitoring with container insights & anomaly detection - SVC308 - New York AWS Summit

•

0 recomendaciones•653 vistas

The document discusses monitoring containerized applications and microservices using Amazon CloudWatch Container Insights and Amazon CloudWatch Anomaly Detection. Container Insights provides fully managed monitoring of compute capacity, ad hoc analytics, and application tracing. Anomaly Detection enables self-learning of normal metric behavior, accounts for seasonality, and provides dynamic alerting of abnormal system behavior. Both services help provide observability of containerized applications.

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Monitoring with container insights & anomaly
detection
Greg Eppel
Global Solutions Architect
CloudWatch & X-Ray
AWS
S V C 3 0 8

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Topics
Monitoring
Observability
Container insights
Anomaly detection
Demo

S U M M I T © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Reactive monitoring
Blissful ignorance
Confusion
Stress
False hope
Desperation
Enlightenment

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Monitoring must evolve
Monolithic to
microservice
Short-lived
resources
^Devices
^Data
Faster release
velocity

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Metrics
What: Numeric representation of data measured over
intervals of time
Why: Useful for identifying trends, mathematical
modeling, and prediction

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Logs
What: Immutable, timestamped record of discrete
events that happened over time
Why: Useful for uncovering emergent and
unpredictable behavior

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Traces
What: Representation of a series of related distributed
events that encode the end-to-end request flow
through a distributed system
Why: Provides visibility into both the path traversed by
a request as well as the structure of a request

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Observability
This is the goal

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Observability is the goal
These are the tools

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Amazon CloudWatch
Container Insights (Preview)
Enables you to monitor, isolate, and diagnose your containerized
applications and microservices environments
1. Fully managed automated summary/analysis of compute capacity
2. Ad hoc analytics capability
3. Application tracing observability

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Amazon CloudWatch
Anomaly Detection (Preview)
Enables developers, operators and systems engineers to
automate, accelerate, and improve the detection and alerting of
abnormal system and application behavior.
1. Self-learning metric behavior
2. Aware of seasonality
3. Dynamic alarming

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Container Insights: Takeaways
1. Fully managed automated summary/analysis of compute capacity
2. Ad hoc analytics capability
3. Application tracing observability

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Anomaly detection: Takeaways
1. Self-learning metric behavior
2. Aware of seasonality
3. Dynamic alarming

S U M M I T © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
http://aws.amazon.com/cloudwatch/getting-started

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Thank you!
S U M M I T © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Greg Eppel
geppel@amazon.com

Más contenido relacionado

La actualidad más candente

Building a CI/CD pipeline to automatically deliver your application into production provides great agility for a development team. However, to ensure safe deployments for your business and users, it’s important to use metrics and monitoring to automatically roll back when things go wrong. In this session, learn how to build a CI/CD pipeline that incorporates monitoring for automated rollback actions, and application tracing to help quickly determine what went wrong.

Making CI/CD pipelines safer with application monitoring and tracing - MAD202...

Amazon Web Services

Having visibility into the Amazon VPC infrastructure is a foundational element that any cloud administrator needs to maintain and operate an AWS infrastructure that is secure and functional. Visibility into your AWS infrastructure becomes increasingly important as it scales, because it gives you the ability to make key planning decisions and maintain security. This session is intended for anyone wanting to learn about network visibility on AWS, and it includes information about partners and real-life customer use cases. Come see how you, too, can gain insights into the network traffic that is traversing your AWS infrastructure.

Network visibility into the traffic traversing your AWS infrastructure - SVC2...

Amazon Web Services

Migrate your Oracle and SQL Server databases to Amazon RDS - ADB210 - New Yor...

Amazon Web Services

As you scale your use of AWS, you need easy access to tools that help simplify operational management of resources to improve application performance and availability. To meet this need, we recently launched AWS Systems Manager OpsCenter, which provides a central location where operations engineers and IT professionals can view, investigate, and resolve operational issues related to any AWS resource. OpsCenter aggregates and standardizes operational issues while providing contextually relevant data that helps with diagnosis and remediation. Hear from the AWS Systems Manager team and AWS operations experts about how to use OpsCenter to improve operations and increase application availability.

Improve operations with AWS Systems Manager OpsCenter - SVC310 - New York AWS...

Amazon Web Services

Data exfiltration is a key concern for financial institutions, which often store personally identifiable information, payment card information, and proprietary methods or algorithms. Balancing security and agility in identity and access management (IAM) policies is critical. To achieve this balance, Millennium Management developed a security framework that integrates into CI/CD pipelines. This framework utilizes semantic reasoning, proprietary security evaluations, and AWS Zelkova to achieve provably secure IAM policies pre-deployment in a distributed, multi-account environment. Learn how Millennium combined Zelkova with services such as AWS Step Functions, AWS Lambda, and AWS CodePipeline—for rapid development while mitigating data exfiltration risk.

How Millennium Management achieves provable security with AWS Zelkova - FSV30...

Amazon Web Services

Connecting low-power, microcontroller-based devices, such as appliances, smart meters, and industrial equipment, to the cloud enables data collection and analysis and remote updates to deployed devices. Often, these devices need to cost-effectively connect to a mobile device via Bluetooth Low Energy for provisioning, reading, and security, but this can be challenging. In this session, we dive deep into how the Amazon FreeRTOS microcontroller operating system makes it easy to program, deploy, secure, connect, and manage small, low-power edge devices. You learn how to authenticate microcontroller devices with iOS and Android devices and to monitor, manage, and update firmware using the over-the-air update functionality in AWS IoT Device Management.

Connecting low-power devices to the cloud with Amazon FreeRTOS BLE - SVC206 -...

Amazon Web Services

The move to AWS enables new application and architectural patterns that are in a continual state of change. The only way that your infrastructure, security, and operations can keep pace with these changes is with automation. In this session, we discuss the various automation tools you can use to first deploy the AWS infrastructure (as code), add the VM-Series to protect against threats (security as code), and then automatically update the policy based on Amazon GuardDuty or AWS Security Hub finding (operations as code). A brief demonstration concludes the session. This presentation is brought to you by AWS partner, Palo Alto Networks.

Delivering infrastructure, security, and operations as code with AWS - DEM10-...

Amazon Web Services

With the volume of business conducted online increasing at an exponential rate, the need for constant diligence in data security is more important than ever. In this chalk talk, we explore several AWS services involved with threat detection and remediation. We walk through some real-world scenarios; examine the threat-detection capabilities of Amazon GuardDuty, Amazon Macie, AWS Config, and the available remediation options; and answer your questions about threat detection on AWS. For each scenario, we review threat remediation using GuardDuty, Macie, AWS Config, as well as AWS CloudFormation, Amazon S3, AWS CloudTrail, Amazon VPC Flow Logs, Amazon CloudWatch Events, Amazon SNS, DNS logs, AWS Lambda, and Amazon Inspector.

Continuous security monitoring and threat detection with AWS services - SEC20...

Amazon Web Services

Managing on-premises storage arrays can bring high capital expenses and complex management challenges. AWS offers a range of storage solutions and fully managed services that enable you to quickly and simply lift-and-shift or modernize applications that access data in the AWS Cloud. In this chalk talk, we discuss AWS storage solutions and diagram different architectures and techniques to help you benefit from your storage deployments. We discuss cloud-native and hybrid solutions, and we examine best practices for ingestion, performance, and manageability in a cost-effective way. Bring your questions, prepare to talk about your implementation, and expect deep discussion on how to optimize your storage workloads on AWS.

Deep dive on AWS Cloud storage offerings - What to use, where, and why - STG3...

Amazon Web Services

Get hands-on with the main components of AWS IoT Core. In this session, you learn how to connect and manage your devices, secure device connections and data, process and act upon device data, and read and set device state at any time. Work with the device gateway and high-throughput message broker to securely transmit messages among all your IoT devices and applications. Set up the registry to track device attributes and metadata and create a persistent, virtual version of each device. Finally, explore the rules engine to author rules within the management console or using a SQL-like syntax. Please bring a laptop, and make sure to sign up for an AWS account.

Getting started with AWS IoT Core - SVC306 - New York AWS Summit

Amazon Web Services

With the advancement of machine learning applications, new business opportunities are rapidly emerging in media. In this session, you learn how the AWS Media2Cloud solution can save time and reduce costs through setting up a serverless end-to-end ingest workflow to move your video assets and associated metadata to the cloud. You gain insight into how to make those assets even more valuable by enabling searching and indexing on your video library, and how to use Amazon Transcribe and Amazon Translate to take your live-streaming workflows to the next level with expert instruction on how to enable automatically created multilanguage subtitles.

Increasing the value of video with machine learning & AWS Media Services - SV...

Amazon Web Services

How to act on security and compliance alerts with AWS Security Hub - SEC202 -...

Amazon Web Services

In this session, we learn about best practices to help you integrate serverless applications using Amazon Simple Queue Service (Amazon SQS). We explore how to tune AWS Lambda and Amazon SQS to scale your existing applications without having to worry about provisioning capacity. We also discuss how to bridge high-scale serverless applications with limited server-full applications such as relational databases.

Best practices for queue processing in serverless applications - MAD313 - Chi...

Amazon Web Services

In this session, learn how to deploy a two-tier LAMP stack web using Amazon Lightsail, and discover how to scale your app with load balancers and snapshots. We show you how to migrate your application so that you can leverage Amazon EC2 and Amazon Relational Database Service (Amazon RDS). By the end of the tech talk, you will have some best practices for deploying applications on Lightsail, and you'll understand when to choose Lightsail, Amazon EC2, or Amazon RDS.

Deploy and scale your first cloud application with Amazon Lightsail - CMP208 ...

Amazon Web Services

Amazon S3 and Amazon S3 Glacier provide some of the most enhanced data-security features available in the cloud today. In this chalk talk, learn directly from the AWS engineering team that builds and maintains Amazon S3 security functionality, like encryption, public-access visibility, and much more. We will consider your feedback, address your questions, and mine your expertise to discuss innovative ways of ensuring your data is available only to the users and applications that need it.

Deep dive on security in Amazon S3 - STG304 - Chicago AWS Summit

Amazon Web Services

Whether it’s connected cars, smart home devices, or industrial applications, IoT applications are rapidly becoming more intelligent. Edge computing is helping lead this transformation as IoT devices not only collect and transmit data, but also perform predictive analytics and respond to local events, even without cloud connectivity. In this chalk talk, learn about ML inference at the edge, why it matters, and how to use it to build intelligent IoT applications.

Machine learning at the IoT Edge with AWS IoT Greengrass - SVC203 - Atlanta A...

Amazon Web Services

Serverless architectures free customers to focus on solving business problems without the burden of managing infrastructure on AWS. However, building serverless applications requires a change in architectural thinking. In this talk, learn how to use powerful event-driven design patterns to architect highly scalable solutions that are enterprise-grade, robust, and cost effective. We showcase how to use AWS Lambda combined with messaging services, such as Amazon SQS and Amazon SNS, to improve time to market while delivering great quality service.

Scalable serverless architectures using event-driven design - MAD301 - Atlant...

Amazon Web Services

Build faster, more scalable database applications with Amazon Aurora, a MySQL- and PostgreSQL-compatible relational database built for the cloud. We cover Aurora Serverless, which automatically scales your database up and down to meet demand; Fast Database Cloning, which makes data instantly available for application development; Backtrack, which rolls back your database between test runs; and Performance Insights, which helps assess the load on your database and optimize your SQL queries.

Accelerate database development and testing with Amazon Aurora - ADB208 - New...

Amazon Web Services

Northwestern Mutual’s technology teams maintain a complex compliance environment for a diverse set of developers working within more than 100 AWS accounts. To drive best practices and ensure continuous compliance, they designed an AWS-based architecture using services such as AWS Lambda, Amazon DynamoDB, Amazon Simple Queue Service (Amazon SQS), and Amazon CloudWatch to auto-remediate misconfigurations. In this session, we discuss how these services help Northwestern Mutual swiftly correct configurations and integrate with tools like Slack and Pagerduty to create logs, notify developers and account owners of changes, and track trends in remediation.

Using automation to drive continuous-compliance best practices - SVC309 - Chi...

Amazon Web Services

The cloud has paved the way for processing massive amounts of data at scale. When it comes to big data, the datasets created by human genomic projects are considered to be the largest in the world. Learn how pioneering genomic sequencing company WuXi NextCODE, which handles complex and performance-heavy database and genomic sequencing workloads, moved from on-premises to the cloud. Explore how WuXi NextCODE gathers and mines millions of datasets with speed and scale to drive disease research and innovation in the development of new drugs. See the cloud working at speed and scale, and get into the mind of a true data visionary. This presentation is brought to you by AWS partner, NetApp.

Lessons from WuXi NextCODE Scales Up To Accelerate Data Sequencing in Their D...

Amazon Web Services

La actualidad más candente (20)