Uploaded byTom Laszewski
Operating and Managing Hybrid Cloud on AWS
The document discusses the complexities and strategies of operating and managing hybrid cloud environments on AWS, emphasizing the need for operational consistency and unified management across various services. It outlines essential components such as networking, security, and monitoring, alongside AWS tools and frameworks that facilitate these processes. The text also provides insights into common questions and customer experiences, reinforcing AWS's commitment to hybrid and multi-cloud solutions.
More Related Content
Similar to Operating and Managing Hybrid Cloud on AWS
Operating and Managing Hybrid Cloud on AWS
- 2. © 2019, AmazonWeb Services, Inc. or its affiliates. All rights reserved. Operating and Managing Hybrid Cloud on AWS A R C 2 1 7 - R Tom Laszewski Enterprise Technologist Amazon Web Services Anuj Dewangan Sr. Solutions Architect Amazon Web Services
- 3. What we expect HybridCloud Vision What we get Hybrid Cloud Vision Networking and host management Monitoring and logging Unified Security Consistent provisioning interfaces Building a hybrid cloud is hard! Journey to the hybrid cloud...
- 4. Hybrid architecture goals Operational consistency Existingskillsets and tools Simple to control, manage, secure Enterprise-class app SLA Build once, deploy anywhere
- 5. Core Services Infrastructure Customer infrastructure Compute Servers StorageNodes Networking devices AWS Regions Compute Servers Storage Nodes Networking devices Operations and Management Framework Network Backbone Identity, security and Access Management Operations and monitoring Fleet Management Hybrid Cloud Services Network & SecurityStorage ServicesCompute Services Unified Management Databases Analytics AI/ML Developer Tools Systems Mgmt
- 6. Fleet Management • Hostmanagement for on-premises compute servers, networking and storage devices • Inventory management, software installation and updates, metrics collection • Management interfaces for provisioning and monitoring new instances, storage and configurations AWS Systems Manager AWS OpsWorks AWS CodeDeploy AWS Outposts VMware Cloud on AWS
- 7. Operations and Monitoring •Unified Metrics, monitoring, alerting, logging and auditing for the full stack Amazon CloudWatch AWS CloudTrail AWS CloudTrail AWS X-Ray Flow logs Traffic Mirroring
- 8. Operations and Monitoring– Partner Solutions
- 9. Identity, security andaccess management • Unified identity, security and access for all entities including services and users • Key management AWS Key Management Service AWS Identity and Access Management AWS Directory Service AWS Single Sign-On AWS CloudHSM
- 10. Hybrid cloud services HybridCloud Infrastructure Network(Peering connections, VPN, Internet) AWS Regions Compute Servers Customer infrastructure Compute Servers Instance Compute Service Management Interfaces/APIs Fleet Management Interfaces/APIs EC2 APIs Core Services Identity, security and access management Operations and Monitoring User • Provide unified provisioning, monitoring and operating interfaces for hybrid cloud computing • Multi-tenancy, inventory, object configurations Compute Service: • Instance inventory, launch and runtime configurations, images AWS Outposts VMware Cloud on AWS
- 11. Developer Tools AWS StepFunctionsAWS CodeDeployAWS OpsWorks
- 12. © 2019, AmazonWeb Services, Inc. or its affiliates. All rights reserved.
- 13. MassMutual - Governance,Risk, and Compliance AWS Tools • CloudTrail • Config • Trusted Advisor • CloudWatch • Systems Manager • Lambda • KMS • Certificate Manager • CloudFormation Other tools • Splunk • Ansible • Cloud Custodian • Securonix • Carbon Black • QAS • Qualys • Symantec • Okta
- 14. GreenPages - CloudXcelerator Platform Organization Shared Services Transit Hub Security DevOps App 101 Non-Prod VPN Client Access App 102 Non-Prod App 102 Prod Tenant Shared Services Transit Hub Security DevOps VPN Client Access App 201 Non-Prod App 201 Prod App 202 Non-Prod App 202 Prod Company TenancyAccount Family AWS Accounts and Virtual Private Clouds (VPCs) Azure Subscriptions and Virtual Private Networks (VNETs) GreenPages Configuration Center Amazon Web Services Microsoft Azure Operations Management & Monitoring Hybrid Cloud Orchestrator CloudBolt www.cloudbolt.io Consistent environment deployments to AWS, Azure, GCP, and vmware, with real-time validation and automated remediation. https://dev.gphco.io Digital Operations OpsRamp www.opsramp.com Security, Compliance & Financial Control CloudCheckr www.cloudcheckr.com Corporate Network Active Directory Data Sources Data Center Services App 101 Prod
- 15. © 2019, AmazonWeb Services, Inc. or its affiliates. All rights reserved.
- 16. Same AWS infrastructure& services on-premises AWS-designed, Nitro infrastructure for the same security and performance Automatically managed and updated as part of AWS Regions Single point of service and support AWS Outposts • Same infrastructure • Same programming interface • Same monitoring & operations • Use existing skillset Available in two options: • Native AWS • VMware Cloud on AWS
- 17.
- 18.
- 19. Frequently Asked Questions •Why do customers need a Hybrid Cloud? • Do you see hybrid cloud as an temporary solution while customers migrate to AWS? • Do you have customers deploying Hybrid Cloud with AWS? • What are AWS thoughts on multi-cloud? • Does the operations and management framework apply to multi-cloud?
- 20. Related sessions CMP302-R AWSOutposts: Extend the AWS experience to on-premises environments CMP337-R AWS Outposts: Build for low latency and local data processing ENT306-R Build a hybrid cloud in two hours with VMware Cloud on AWS ENT212-S Transform your business with the VMware & AWS hybrid cloud ENT318-R Migration strategies leveraging VMware Cloud on AWS CMP320 How Dropbox leverages Hybrid Cloud for scale and innovation
- 21. © 2019, AmazonWeb Services, Inc. or its affiliates. All rights reserved. Free foundational to advanced digital courses cover AWS services and teach architecting best practices Learn to architect with AWS Training and Certification Visit aws.amazon.com/training/path-architecting/ Classroom offerings, including Architecting on AWS, feature AWS expert instructors and hands-on labs Validate expertise with the AWS Certified Solutions Architect - Associate or AWS Certification Solutions Architect - Professional exams Resources created by the experts at AWS to propel your organization and career forward
- 22. Thank you! © 2019,Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 23. © 2019, AmazonWeb Services, Inc. or its affiliates. All rights reserved.
Editor's Notes
- #8 AWS CloudWatch – monitoring With tools like AWS CloudTrail, tracking every action taken on AWS accounts and services is straightforward, providing a way to find the event that caused a given change. But not all log entries are useful. CloudTrail Insights: Identify and Respond to Unusual API Activity AWS Xray – end to end app monitoring Flow logs - VPC Flow Logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC. ….think network taps Traffic mirroring - Traffic Mirroring is an Amazon VPC feature that you can use to copy network traffic from an elastic network interface of Amazon EC2 instances.
- #9 AWS Cloudwatch for hybrid - DataDog, pagerduty…integration with cloudwatch…datadog as example mckesson AWS cloudtrail for hybrid cloud – sumologic, splunk AWS application monitoring – appdynamics, sciencelogic, new relic Overall hybrid cloud management – CA, BMC
- #10 SSO – STS with SAML integration Okta, PingIndentity - SSO
- #11 1. Examples in slides 13 and 14
- #17 AWS Outposts bring native AWS services, infrastructure, and operating models to virtually any data center, co-location space, or on-premises facility. Use the same APIs, the same tools, the same hardware, and the same functionality across on-premises and the cloud to deliver a truly consistent hybrid experience. Unlike other on-premises hybrid cloud solutions that use different APIs, release cadence, manual updates, and third-party hardware and support, Outposts are fully managed and supported by AWS. Customers have access to the latest hardware and software and do not have to worry about software version control, updating or patching software or calling multiple vendors for hardware and software support, just like in the AWS cloud. Variant of AWS Outposts that runs VMware Cloud on Outposts to provide customers a common infrastructure platform to run their VMware stack across on-premises and cloud environments.
- #22 Speaker Notes: You came to re:Invent to learn. There’s no need to stop when you go home. Keep re:Inventing with resources from AWS Training and Certification for current and aspiring Solution Architects. Resources for you and your teams We offer digital and classroom courses to help you design applications and systems on AWS using the Well-Architected Framework. Learn the fundamentals of building IT infrastructure on AWS and creating secure, performant, and scalable solutions. And with our Associate or Professional level certifications for Solutions Architecture, you can validate your skills and propel your career. Global Knowledge identifies the associate level certification as the #1 certification in the industry. For more information, visit aws.amazon.com/training and look for the architect learning path.
- #31 AWS Outposts will be available in two options: The AWS native variant of Outposts allows you to use the same APIs and control plane you use in the AWS cloud to build and run your applications, but do it on-premises. You will be able to run Amazon EC2 instances and EBS volumes on Outposts. And, at launch or soon thereafter, services such as RDS, ECS, EKS, SageMaker, and EMR will also be available locally on the AWS native variant of Outposts. Other services, such as S3, DynamoDB, and Lambda will be available as Private Link endpoints in the customer’s own VPC. The VMware variant allows you to run VMware Cloud on AWS locally on Outposts to use the same VMware control plane and APIs you use to run your on-premises infrastructure. This variant delivers the entire VMware Software-Defined Datacenter - compute, storage, and networking infrastructure - to run on-premises using AWS Outposts and allows you to take advantage of the ease of management and integration with AWS services.
- #33 Outposts are part of an AWS Region, and customers can access *all* of the AWS services available in the region the same way they do in an Availability Zone today. For example, customers use public service end points for S3 and DynamoDB, and with PrivateLink they can also connect their VPC to these services via private endpoints. When customers launch instances in an AZ today, they commonly use a subnet tied to an AZ. The same way, they can launch EC2 instances in the subnet tied to their Outpost. Apart from EC2 and EBS, customers can also launch AWS resources from other services in their Outposts. For example, they can launch RDS instances, EMR nodes, EKS worker nodes locally on their Outpost. While Lambda is a regional service, customers can run Greengrass to deploy a local Lambda runtime environment on their Outposts. We want to learn more about which services customers want to run locally.
- #35 AWS Outposts bring native AWS services, infrastructure, and operating models to virtually any data center, co-location space, or on-premises facility. Use the same APIs, the same tools, the same hardware, and the same functionality across on-premises and the cloud to deliver a truly consistent hybrid experience. Unlike other on-premises hybrid cloud solutions that use different APIs, release cadence, manual updates, and third-party hardware and support, Outposts are fully managed and supported by AWS. Customers have access to the latest hardware and software and do not have to worry about software version control, updating or patching software or calling multiple vendors for hardware and software support, just like in the AWS cloud. Variant of AWS Outposts that runs VMware Cloud on Outposts to provide customers a common infrastructure platform to run their VMware stack across on-premises and cloud environments.
- #36 AWS is VMware’s primary and preferred cloud partner, and our partnership with VMware has yielded several industry-first hybrid solutions. VMware Cloud on AWS is a jointly engineered service by AWS and VMware, and is the only VMware hybrid cloud solution that is directly managed and supported by VMware. VMware Cloud on AWS is available globally and we have jointly engineered 200+ features for VMware Cloud on AWS since its launch. Another jointly engineered hybrid solution is Amazon RDS on VMware. RDS on VMware lets you deploy managed databases in on-premises VMware environments using the RDS technology enjoyed by hundreds of thousands of AWS cloud customers.