[금융고객을 위한 Resiliency in the Cloud] 금융사의 Resiliency를 위한 AWS Solution 소개

© 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark.
금융 고객을 위한 RESILIENCY IN THE CLOUD WORKSHOP 2023
FINANCIAL SERVICES |
F I N A N C I A L S E R V I C E S
Resiliency 를 위한 AWS Solution 소개
Jeonghun Sim
Solutions Architect
AWS

Everything fails, all the
time.”
Werner Vogels
CTO, Amazon.com
© 2021, Amazon Web Services, Inc. or its affiliates. All rights reserved.
“

# rm –rf *

Resilience
4
A B I L I T Y O F A W O R K L O A D T O R E C O V E R F R O M I N F R A S T R U C T U R E O R S E R V I C E D I S R U P T I O N S
High Availability
Resistance to common
failures through design and
operational mechanisms
Disaster Recovery
Returning to operations within
specific targets for more rare
but highly impactful failures
Core services, design goals to
meet availability goals
Backup & Recovery, Data Bunkering,
Managed RPO/RTO
Continuous Improvement
CI/CD, Code Refinement, Operational
Testing, Observability/Monitoring
The
mental
model

High Availability
5

High availability (HA)
6
A B O U T A P P L I C A T I O N A V A I L A B I L I T Y
Smaller scale, more frequent events:
• Component failures
• Network issues
• Load spikes
Measures mean over time:
• “The 9’s” (99.99% available)

AWS Regions and Availability Zones (AZs)
7
A W S R E G I O N S A R E P H Y S I C A L L O C A T I O N S A R O U N D T H E W O R L D W H E R E W E C L U S T E R D A T A C E N T E R S
30 AWS Regions worldwide
AWS Regions Announced Regions
Data center Data center
Data center
Each AZ includes one or more
discrete data centers
Data centers, each with redundant power,
networking, and connectivity,
housed in separate facilities.
Each AWS Region has multiple AZs
Transit
Transit
AZ
AZ
AZ
A Region is a physical location in the world

AWS Regions and Availability Zones (AZs)
8
A W S R E G I O N S A R E P H Y S I C A L L O C A T I O N S A R O U N D T H E W O R L D W H E R E W E C L U S T E R D A T A C E N T E R S
Availability Zone 1 Availability Zone 2
VPC
AWS Cloud
Instance
Amazon RDS
Primary instance
Instance
Amazon RDS
Standby instance
Network Load
Balancer
Amazon EC2
Auto Scaling
Amazon RDS

Disaster Recovery
9

Disaster recovery (DR)
10
A B O U T B U S I N E S S C O N T I N U I T Y
Larger scale, less frequent, events:
• Natural disasters
• Technical failures
• Human actions
Measures a one-time event:
• Recovery Time
• Recovery Point
Natural Disaster Technical
Failure
Human Actions

Recovery Point and Recovery Time Objective (RPO/RTO)
11
How much data can you afford to
recreate or lose?
How quickly must you recover?
What is the cost of downtime?
Disaster
Recovery Point (RPO) Recovery Time (RTO)
Data loss Down time

Strategies for disaster recovery
12
Backup & restore Pilot light Active/active
Warm standby
RPO / RTO: Hours RPO / RTO: 10s of minutes RPO / RTO: Minutes RPO / RTO: Real-time
• Lower-priority use cases
• Provision all AWS resources
after event
• Restore backups after event
• Cost $
• Data live
• Services idle
• Provision some AWS resources and
scale after event
• Cost: $$
• Always running, but smaller
• Business critical
• Scale AWS resources after event
• Cost $$$
• Zero downtime
• Near-zero data loss
• Mission Critical Services
• Cost $$$$
Active/passive strategies

DR
Backup & ReStore
13

BACKUP & RESTORE
14
B A C K U P A N D R E S T O R E I S A S U I T A B L E A P P R O A C H F O R M I T I G A T I N G A G A I N S T D A T A L O S S O R C O R R U P T I O N

BACKUP & RESTORE
15
B A C K U P A N D R E S T O R E I S A S U I T A B L E A P P R O A C H F O R M I T I G A T I N G A G A I N S T D A T A L O S S O R C O R R U P T I O N
•Amazon Elastic Block Store (Amazon EBS) snapshot
•Amazon DynamoDB backup
•Amazon RDS snapshot
•Amazon Aurora DB snapshot
•Amazon EFS backup (when using AWS Backup)
•Amazon Redshift snapshot
•Amazon Neptune snapshot
•Amazon DocumentDB
•Amazon FSx for Windows File Server , Amazon FSx for
Lustre , Amazon FSx for NetApp ONTAP , and Amazon FSx for
OpenZFS
•Amazon Elastic Block Store (Amazon EBS) volumes
•Amazon EC2 instances
•Amazon Relational Database Service (Amazon RDS) databases
(including Amazon Aurora databases)
•Amazon DynamoDB tables
•Amazon Elastic File System (Amazon EFS) file systems
•AWS Storage Gateway volumes
•Amazon FSx for Windows File Server; Amazon FSx for
Lustre;; Amazon FSx for NetApp ONTAP; and Amazon FSx for
OpenZFS
BACKUP & STORE AWS Service AWS Backup

AWS Backup
16
A F U L L Y - M A N A G E D , P O L I C Y - B A S E D B A C K U P S E R V I C E T H A T M A K E S I T E A S Y T O C E N T R A L L Y M A N A G E A N D
A U T O M A T E T H E B A C K U P O F D A T A A C R O S S A W S S E R V I C E S
AWS Backup
Supported AWS Services
Backup
Plan
Backups
Operators
Admin
AWS CloudTrail
RDS
Storage
Gateway
Aurora DynamoDB
EC2
EBS EFS
AWS SNS
AWS IAM
With AWS Backup, you can:
• Create backup plans that orchestrate backup
operations per policy
• Secure backups and manage restore processes
• Set user access permissions to managed
resources controlled via IAM
• Setup notifications and logging through
Amazon SNS and AWS CloudTrail

AWS Backup
17
A F U L L Y - M A N A G E D , P O L I C Y - B A S E D B A C K U P S E R V I C E T H A T M A K E S I T E A S Y T O C E N T R A L L Y M A N A G E A N D
A U T O M A T E T H E B A C K U P O F D A T A A C R O S S A W S S E R V I C E S
AWS Backup
Supported AWS Services
Backup
Plan
Backups
Operators
Admin
AWS CloudTrail
RDS
Storage
Gateway
Aurora DynamoDB
EC2
EBS EFS
AWS SNS
AWS IAM
With AWS Backup, you can:
• Create backup plans that orchestrate backup
operations per policy
• Secure backups and manage restore processes
• Set user access permissions to managed
resources controlled via IAM
• Setup notifications and logging through
Amazon SNS and AWS CloudTrail

AWS Backup
18

AWS Backup
19

AWS Backup
• Increased productivity and reduced the # hours needed to do backups by 80%
• Reduced operational costs associated with backup by 50%
• Increased accuracy of snapshots from 80% to 100%
Company: Santos
Industry: Oil & Gas
Country: Australia
Company: Rackspace
Industry: Software & Internet
Country: United States
• Allocated development resources on core customer activities
• Reduced time to deploy customer environments
• Improved productivity with reduced # of failures due to greater resiliency

DR
Pilot Light
21

Pilot Light
22
W I T H T H E P I L O T L I G H T A P P R O A C H , Y O U R E P L I C A T E Y O U R D A T A F R O M O N E R E G I O N T O A N O T H E R A N D
P R O V I S I O N A C O P Y O F Y O U R C O R E W O R K L O A D I N F R A S T R U C T U R E

Pilot Light
23
W I T H T H E P I L O T L I G H T A P P R O A C H , Y O U R E P L I C A T E Y O U R D A T A F R O M O N E R E G I O N T O A N O T H E R A N D
P R O V I S I O N A C O P Y O F Y O U R C O R E W O R K L O A D I N F R A S T R U C T U R E
•Amazon Simple Storage Service (Amazon S3)
Replication
•Amazon RDS read replicas
•Amazon Aurora global databases
•Amazon DynamoDB global tables
•Amazon DocumentDB global clusters
•Global Datastore for Amazon ElastiCache for Redis
Pilot Light AWS Service
AWS Elastic Disaster Recovery

24
C O N T I N U O U S R E P L I C A T I O N O F O N - P R E M I S E S A N D C L O U D S E R V E R S W I T H A W S A S Y O U R E L A S T I C
R E C O V E R Y S I T E
On-premises to AWS AWS Region to
AWS Region
Cloud to AWS

25

26

27

28
Domestic reference
Company: Thomson Reuters
Industry: Solutions
Country: Canada
Company: Tyler Rechnologies
Industry: IT
Country: U.S
Company: Southeast Iowa Regional
Industry: Health
Country: USA
•Replicated over 120 TB of data from 300 servers
•Set up a recovery site in the cloud
•Eliminated its manual DR process
•Optimized spending on its disaster recovery process
•Enhanced its security and compliance
•Protects more than 4,300 virtual machines running Windows Server operating systems
•Minimizes recovery time objectives for 12x faster recovery time than other evaluated solutions
•Recovers entire data centers in case of large-scale IT disruption
•Scales DR infrastructure footprint with business growth
•Set up a recovery site on AWS for its EHR solution
•Replicated 61 on-premises servers comprising 14 TB of data
•Improved RTO by 67% and RPO by 50%
•Enhanced disaster recovery testing capabilities
•Gained near-real-time visibility into the health of servers

DR
Warm Standby
29

Warm Standby
30
T H E W A R M S T A N D B Y A P P R O A C H I N V O L V E S E N S U R I N G T H A T T H E R E I S A S C A L E D D O W N , B U T F U L L Y
F U N C T I O N A L , C O P Y O F Y O U R P R O D U C T I O N E N V I R O N M E N T I N A N O T H E R R E G I O N .

DR
Multi-Site Active/Active
31

Multi Site Active-Active
32
M U L T I - S I T E A C T I V E / A C T I V E S E R V E S T R A F F I C F R O M A L L R E G I O N S T O W H I C H I T I S D E P L O Y E D , W H E R E A S
H O T S T A N D B Y S E R V E S T R A F F I C O N L Y F R O M A S I N G L E R E G I O N , A N D T H E O T H E R R E G I O N ( S ) A R E O N L Y
U S E D F O R D I S A S T E R R E C O V E R Y .

Route53 ARC
33
A M A Z O N R O U T E 5 3 A P P L I C A T I O N R E C O V E R Y C O N T R O L L E R G I V E S Y O U I N S I G H T S I N T O W H E T H E R Y O U R
A P P L I C A T I O N S A N D R E S O U R C E S A R E R E A D Y F O R R E C O V E R Y .
Routing Controls 1
Routing Controls 3 Routing Controls 4
REGION 1
REG1-AZ1 REG1-AZ2
Routing Controls 2
Routing Controls 5 Routing Controls 6
REGION 2
REG2-AZ1 REG2-AZ2
ON
ON
ON
OFF
OFF
OFF
Active Standby
Control Panel
Routing Control

Resilience Hub
34
A N E W A P P L I C A T I O N R E S I L I E N C E S E R V I C E T H A T P R O V I D E S C U S T O M E R S A C E N T R A L P L A C E T O D E F I N E ,
V A L I D A T E , A N D T R A C K T H E R E S I L I E N C E O F T H E I R A P P L I C A T I O N S O N A W S .
Resilience Hub Users
Add
application
Define
resilience
targets
Assess app
resilience
Implement
remediations
Test app
resilience
Track
resilience
posture
CI/CD pipeline

Resilience Hub
35

Chaos Engineering
(Fault Injection Simulator)
36

Chaos Engineering
38
C H A O S E N G I N E E R I N G I S T H E D I S C I P L I N E O F E X P E R I M E N T I N G O N A S O F T W A R E S Y S T E M I N P R O D U C T I O N
I N O R D E R T O B U I L D C O N F I D E N C E I N T H E S Y S T E M ’ S C A P A B I L I T Y T O W I T H S T A N D T U R B U L E N T A N D
U N E X P E C T E D C O N D I T I O N S
Steady
state
Plan:
Hypothesis
Do: Run
experiment
Check:
Verify
Act:
Improve
Steady
state
Unplanned
stress
Identify
problem
Resolve
problem
Verify
resolution
Reactive
Usual engineering loop Chaos engineering loop
Proactive
Incident

Supported fault
injections
Stop, reboot and terminate instance(s) (EC2)
API throttling/internal error/unavailable error (EC2)
Increased memory or CPU load (EC2)
Kill process (EC2)
Latency injection (EC2)
Drain container instances (ECS)
Increase memory or CPU consumption per task (ECS)
Terminate node group instances (EKS)
Systems Manager send command (SSM)
Database stop, reboot, and failover (RDS)

Thank you!
Jeonghun Sim
(jeonghun@amazon.com)

[금융고객을 위한 Resiliency in the Cloud] 금융사의 Resiliency를 위한 AWS Solution 소개

Recomendados

Recomendados

Más contenido relacionado

Similar a [금융고객을 위한 Resiliency in the Cloud] 금융사의 Resiliency를 위한 AWS Solution 소개

Similar a [금융고객을 위한 Resiliency in the Cloud] 금융사의 Resiliency를 위한 AWS Solution 소개 (20)

Más de AWS Korea 금융산업팀

Más de AWS Korea 금융산업팀 (20)

Último

Último (20)

[금융고객을 위한 Resiliency in the Cloud] 금융사의 Resiliency를 위한 AWS Solution 소개