Jinesh Varia delivered this presentation at Interop 2011 and a few webinars - @jinman

1. Enterprise Cloud Computing With AWS
How are Enterprises Using the AWS Cloud Today?
#awsenterprise
Jinesh Varia
@jinman

2. 2011: Our Best Year Ever!
Growth and New Services Customers
Expansion and Features and Partners

3. Global Infrastructure for Global Enterprises
GovCloud US West US East Europe Asia Asia
(US ITAR Region) (Northern (Northern West Pacific Pacific
California) Virginia) (Dublin) Region Region
(Singapore) (Tokyo)
AWS Regions
AWS Edge Locations

4. Cloud Customers in 190 Countries

5. Each day , AWS adds the
equivalent server capacity to power Amazon
when it was a global, $2.76B enterprise
(circa 2000)

6. The Cloud Scales: Amazon S3 Growth
566 Billion
Peak Requests:
370,000+
per second
262 Billion
102 Billion
40 Billion
2.9 Billion 14 Billion
Q4 2006 Q4 2007 Q4 2008 Q4 2009 Q4 2010 Q3 2011
Total Number of Objects Stored in Amazon S3

7. What are Enterprises Running on AWS?
Enterprise Applications Oracle, SAP, Microsoft, IBM
Line-of-Business Applications
Digital Media Distribution
Web Applications Gaming
Media Sharing @ Social Media
Big Data &
Analytics for Consumer Web
High Performance Genome Sequencing
Computing Large Scale Batch Processing
Backup & Recovery
Disaster Recovery & Disaster Recovery
Archive Archive

8. Key benefits to running in the AWS Cloud
No Up-Front Low Variable Pay Only for
Capital Expense Pricing What You Use
Self-Service Easily Scale Up Improve Agility &
Infrastructure and Down Time to Market
Deploy

9. Poll #1: Which of the categories describes how
your organization is using the AWS cloud
today?

10. The AWS Cloud For Enterprises
Tools to access
services
Cross Service
features
High-level
building blocks
Low-level
building blocks

11. Flexibility and Power of Choice

12. Flexibility is the key
Can use any Programming Model, Language or
Operating System or Database
Can use any service individually or in any combination
Can use as much or as little and only pay for what was
consumed
Can use any existing System Management Tools (NOC)

13. The AWS Cloud For Enterprises
Tools to access
services
Cross Service
features
High-level
building blocks
Low-level
building blocks

14. The AWS Cloud Ecosystem
Tools to access
services
Cross Service features
High-level
Infrastructure building
blocks
Low-level
Infrastructure building
blocks

15. Enterprise Software in the cloud - BYOL
Microsoft Exchange Server, Microsoft SharePoint
Server, Microsoft SQL Standard Server, Microsoft SQL
Enterprise Server, Microsoft Lync Server, Microsoft System
Center servers, and Microsoft Dynamics CRM through
License Mobility Software Assurance
Oracle fully supports Oracle E-Business Suite, Oracle’s
PeopleSoft Enterprise, Oracle’s Siebel CRM, Oracle Fusion
Middleware, Oracle Database, and Oracle Linux on the
portion of AWS EC2 which uses Oracle VM.
IBM DB2, Informix, Lotus® Forms Turbo, WebSphere®
Application Server, WebSphere® sMash, WebSphere Portal
Server, Lotus® Web Content Management Standard
Edition , InfoSphere Information Server, Lotus Domino®,
Lotus Web Content Management Standard Edition®, Tivoli
Monitoring®
SAP® solutions, including SAP® Rapid Deployment
solutions and SAP® BusinessObjects™ solutions

16. Key Takeaways
Flexibility is the key

17. Enterprises are using the
cloud as an extension
of their datacenters

18. 10G
DirectConnect
Amazon
Corporate Location
Virtual Private
Data Center Cloud

19. Amazon Virtual Private Cloud (VPC)
• Create a logically isolated environment in Amazon’s highly scalable
infrastructure
• Specify your private IP address range into one or more public or private
subnets
• Control inbound and outbound access to and from individual subnets using
stateless Network Access Control Lists
• Protect your Instances with stateful filters for inbound and outbound traffic
using Security Groups
• Attach an Elastic IP address to any instance in your VPC so it can be
reached directly from the Internet
• Bridge your VPC and your onsite IT infrastructure with an industry standard
encrypted VPN connection
• Use a wizard to easily create your VPC in 4 different topologies

21. Corporate
data center
Availability Zone 1
DirectConnect
Location
10G
Private
Router Subnet
Customer VPN Gateway
Gateway
Corporate
Headquarters
Internet Public Subnet
Gateway
Amazon VPC
Availability Zone 2
Branch Offices
Amazon S3 Amazon SimpleDB Amazon SES Amazon SQS
New Enterprise IT AWS Region
Network architecture

22. VPC is part of the Autodesk internal network
Source: Autodesk

23. NYTimes “TimesMachine” (June 2008)
1851-1922 Articles
TIFF -> PDF
Input: 11 Million Articles
(4TB of data)
What did he do ?
Spun 100 EC2 Instances for 24
hours
Input: All data on S3
Output: 1.5 TB of Data
Used: Hadoop, iText, JetS3t

24. NYTimes EC2 Expansion (April 2011)
Amazon EC2

25. NYTimes EC2 Expansion (April 2011)
Amazon EC2

26. Key Takeaways
Flexibility is the key

27. Key Takeaways
Flexibility is the key
AWS Cloud as an extension of your existing datacenter

28. Security and
Understanding Cloud
Compliance

29. In the Cloud, Security is a Shared Responsibility
SAS 70 Type II Audit
Encrypt data in transit
ISO 27001/2 Certification
Encrypt data at rest
PCI DSS 2.0 Level 1-5
Protect your AWS Credentials
HIPAA/SOX Compliance
Rotate your keys
FISMA A&A Moderate Infrastructure Application Secure your application
FEDRamp/GSA ATO Security Security
How we secure our How can you secure your
infrastructure application and what is
your responsibility?
Services Security
Enforce IAM policies
What security options
Use MFA, VPC, Leverage S3
and features are available
bucket policies, EC2 Security
to you?
groups, EFS in EC2 Etc..

30. Amazon S3 Server-Side Encryption – at no
additional cost
Amazon S3
Your PUT Encrypt
Key
Data Data
Generator
AES-256
Encrypted Encrypt
Data Key
Encrypted Key Store
Encrypted
Data Store S3 Key Management

31. Enterprise Security Features
AWS Identity And Access Management
User management
Policy-based granular access control
Web login to individual users
Manage users and groups using Console
Identity Federation (New!)
Security Token Service
LDAP/AD Integration
Multi-Factor Authentication
Virtual MFA
Physical Device
Consolidated Billing
Invoicing
Android, iOS,
Gemalto
Windows, Blackberry

32. Dedicated Instances
On-demand Reserved Spot Dedicated
Instances Instances Instances Instances
• Pay as you go • Onetime • Requested • Standard and
upfront + Pay Bid Price and Reserved
as you go Pay as you go • Single Tenant
• Starts from • $56 for 1 • $0.005 /Hour Instances
0.02/Hour year term as of today at • $10/Region +
and then 9 AM 0.105/Hour
$0.01/Hour
For Steady For Time- For Regulatory
For Spiky
State insensitive and Compliant
Workloads
Workloads workloads Workloads

33. Sarbanes-Oxley compliance. How is SOX Data durability
compliance achieved if in-scope systems are
deployed in the cloud provider environment?
Distributed Denial Of Service (DDoS) attacks.
Service Provider and Customer
How does the provider protect their service
business continuity.
against DDoS attacks?
HIPAA/GLBA compliance. Is it possible to meet Backups.
HIPAA/GLBA certification requirements while deployed in
the cloud provider environment?
Data center tours or Third Party Access. Are
Hypervisor vulnerabilities. Has the cloud data center tours by customers allowed by the
provider addressed known hypervisor cloud provider?
Vulnerability
vulnerabilities?
E-Discovery. Does the cloud provider meet the management.
customer’s needs to meet electronic discovery Privileged
procedures and requirements? Actions
Scheduled maintenance Data ownership. What are the cloud provider’s rights
outages. Does the provider over customer data?
specify when systems will Data isolation. Does the cloud provider adequately
be brought down for isolate customer data?
maintenance?

34. AWS Security and Compliance Center
(http://aws.amazon.com/security/)
Answers to many security &
privacy questions
• Security whitepaper
• Risk and Compliance whitepaper
Security bulletins
Customer penetration testing
Security best practices
Compliance FAQ and Guidance

35. Benefits
Infrastructure Procurement Time
Reduced from over four to six
weeks to minutes.
Server Image Build Process that
had previously taken a half day is
Amazon Corporate IT now automated.
Deploys Mission-Critical Annual Infrastructure Costs Cut by
Corporate Intranet 22 percent when replacing on-
premise hardware with equivalent
running SharePoint 2010
cloud resources.
to AWS Cloud Eliminating Operational Overhead
of server lease returns, freeing up
approximately 2 weeks of
engineering overhead per year by
replacing servers with equivalent
cloud resources.

36. Mission-Critical Application on AWS
Uses
Microsoft SQL Server
2008
Microsoft Windows
Server R2
Microsoft SharePoint
2010
On Amazon EC2 (in
Amazon VPC) and
Amazon EBS
Windows BitLocker
Windows DPAPI

37. Detailed Technical Whitepapers
http://bit.ly/aws-sharepoint
http://aws.amazon.com/architecture
http://aws.amazon.com/whitepapers

38. Key Takeaways
Flexibility is the key
AWS Cloud as an extension of your existing datacenter

39. Key Takeaways
Flexibility is the key
AWS Cloud as an extension of your existing datacenter
Understanding cloud security and compliance

40. Enterprises are realizing the value of the
Big Data
Enterprise Stack

41. The Big Data Enterprise Stack

42. Bank – Credit-Risk Simulation Application
“The AWS platform was a good fit for its
unlimited and flexible computational
Bankinter was founded power to our risk-simulation process
in June 1965 as a requirements.
Spanish industrial bank With AWS, we now have the power to
through a joint venture decide how fast we want to obtain
by Banco de Santander simulation results, and, more
and Bank of America importantly, we have the ability to run
simulations not possible before due to the
large amount of infrastructure required.” –
Castillo, Director, Bankinter

43. “We see continued value in using the AWS cloud because of the flexibility
and the scalability. We have a long queue of projects and we envision
using AWS to help us get there.”
Jeff Sternberg, Data Science Lead
Capital IQ / Standard & Poors
Big Data Case Study Business Benefit
• Recommendation engine for • EMR and S3 provided a low-cost and
investment bankers looking for new high-performance foundation for
ideas. parallel applications
• The app uses EC2, Elastic MapReduce • Increased security by using VPC and
(EMR), S3 and VPC to aggregate data to extend corporate datacenter into
from multiple sources in S3. EMR pulls the AWS cloud
data from the storage for processing
and push the results into a SQL
database.

44. Big Data Case Study
• Recommendation engine for
investment bankers looking for new
ideas.
• The app uses EC2, Elastic MapReduce
(EMR), S3 and VPC to aggregate data
from multiple sources in S3. EMR pulls
data from the storage for processing
and push the results into a SQL
database.

45. Key Takeaways
Flexibility is the key
AWS Cloud as an extension of your existing datacenter
Understanding cloud security and compliance

46. Key Takeaways
Flexibility is the key
AWS Cloud as an extension of your existing datacenter
Understanding cloud security and compliance
Leverage the power of the new Enterprise Big Data
stack

47. Poll #2: Which of the workloads your
organization is considering moving to the cloud
in the next 12 months?

48. Migrating to the cloud:
Its NOT all or nothing

49. Migrating to the cloud
Cloud
Benefits
Build a
New Zero upfront investment
Cloud-Ready
applications
Design
On-demand provisioning
Cloud
Strategy “No-brainer to Instant scalability
move” Apps
Existing Auto scaling and
Applications elasticity
Planned
Phased Pay as you go
Large Enterprise Migration
Removes undifferentiated
heavy lifting
Developer productivity
Automation

50. “No-brainer to move” Apps
• Dev/Test applications
Identify and • Self-contained Web Applications
• Social Media Product Marketing
move the Campaigns
Cloud-Ready • Customer Training Sites
• Video Portals (Transcoding and
Apps within the Hosting)
company • Pre-sales Demo Portal
• Software Downloads
• Trial Applications

51. Project & Usage
as of March 2010
External Cloud Enablement
Project Usage AWS Footprint
- Started in Jan 2008, 5 FTE - 276 Cloud Appliances 1,100 new SAP systems
- Focus: IT Automation on IaaS > 600 SAP employees as direct users 42,086 EC2 Instance Hours
from >16 countries 39 TB EBS Storage
- SAP Self-service since March 2008 >10,000 SAP systems provisioned 3 TB S3 Storage
- Enables unlimited # systems in clouds - Cost Savings based on
- Weekly Feature Extensions 1. Less expensive Hardware Hosting
2. IT Process Automation
Top 3 Consuming Departments – Avg. Cost Saving Rate: 77%
Customer Workshops Customer Trainings Customer Demos
215 SAP Systems 111 SAP Systems 118 SAP Systems
$ 15 / SAP system $ 42 / SAP system $ 76 / SAP system
26 hrs / SAP system 82 hrs / SAP system 119 hrs / SAP system
Status: Productive Status: Pilot + Ramp up Status: Productive + Ramp up
Source: SAP

52. SAP as a customer
AWS Cloud Usage @ SAP
Customer Demo and POC SAP AWS footprint (as of Nov 2010)
 Business ByDesign
 BusinessOne
Training
Workshops
Development and Testing
SAP Carbon Impact
OnDemand runs on AWS!
Source: SAP

53. Source
http://www.stucharlton.com/stuff/QCon2011CP.pdf

54. Source
http://www.stucharlton.com/stuff/QCon2011CP.pdf

55. Classifying your IT Assets
List all your IT assets
Dash
board
Identify upward and downward
dependencies
Web CRM Auth Start classifying your IT assets
into different categories:
 Applications with Top
LDAP Service Secret, Secret, or Public data sets
DB
 Applications with low, medium and
Search high compliance requirements
OLAP Engine  Applications that are internal-
only, partner-only or customer-
facing
 Applications with low, medium and
ERP Report logs
high coupling
 Applications with strict, relaxed
licensing

56. Stack rank your IT assets
• Search for under-utilized
IT assets
• Applications that has
immediate business need
to scale
• Applications that are
running out of capacity
• Easiest to move today
• That Builds support within
your organization and
creates awareness and
excitement

57. Pick the Low-hanging Fruits First
Dash Examples:
board
• Web Applications
• Batch Processing systems
Web CRM Auth • Content Management
Systems
Servic
• Digital Asset Management
LDAP
DB
e
Systems
Search
• Log Processing systems
OLAP Engine
• Collaborative Tools
• Big Data Analytics Platforms
ERP Report logs

58. Move application by application
Dash
board
Web CRM
CRM Auth
Servic
LDAP
e
DB
DB
Search
OLAP Engine
ERP Report logs

59. “IaaS will significantly change the way IT will deliver
infrastructure services to the business. We selected AWS
because they are a leader in that field.”
- Yves Martelle, Global Director of Infrastructure
Enterprise Case Study Business Benefit
• F500 global energy management • Open and flexible platform allows
company with operations in more Schneider to run Java and .NET apps on
than 100 countries Windows and Linux virtual servers
• Started moving Internet and Intranet • Increased IT agility by rolling out new
workloads to AWS in early 2011 applications faster on AWS
• Runs 15 production applications on
AWS
• Used Amazon VPC to connect its
datacenter to the AWS cloud

60. “The AWS Cloud brings business agility as Shell is able to deploy
services much more quickly”
- Johan Krebers
Vice President of Architecture
Enterprise case study Business Benefits
• Global oil and gas company • No minimum commitment up front
• Using AWS since 2010 and pay per use brings significant
• Operationalizing their cloud strategy savings
• Shell Foundation Platform – an IT • Fast provisioning within minutes for
framework – is AWS approved many applications
• Core operational applications • Elasticity – the ability to expand and
running in production on AWS contract IT infrastructure as needed
• Development and test environments
running on AWS

61. Cloud Migration : a Phased-driven
Strategy Whitepaper
http://aws.amazon.com/whitepapers

62. Getting started is easy

70. http://aws.amazon.com/free

71. Key Takeaways
Flexibility is the key
Leverage AWS Cloud as an extension of your existing
datacenter
Understand cloud security and compliance
Leverage the power of the new Enterprise Big Data
stack

72. Key Takeaways
Flexibility is the key
Leverage AWS Cloud as an extension of your existing
datacenter
Understand cloud security and compliance
Leverage the power of the new Enterprise Big Data
stack
Its NOT all or nothing; Getting started is easy

73. Poll #3: Thank you for taking the time to attend
today’s session. How relevant did you find the
information in this webinar?
Q&A

74. Thank you!
Jinesh Varia
jvaria@amazon.com Twitter:@jinman
http://linkedin.com/in/jinman