Amazon Web Services. For Global Defense Organizations Mark Fox AWS Global Defense

Transcription

1 Amazon Web Services For Global Defense Organizations Mark Fox AWS Global Defense 2015, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

2 AWS Introduction What is AWS and how does it work? Why are organizations choosing AWS? What are organizations using AWS for? 2

3 What Is Cloud Computing? The on-demand delivery of IT resources over public or private networks with zero up-front costs, no long-term contracts, and pay-as-you-go pricing 3

4 AWS Terminology 14 Regions: Physical location in the world where we have multiple Availability Zones. Datacenters: Low-profile, high-security data centers (greenfield, colo-, or modular) house our proprietary hardware (800+ disks/2,300+ lbs per rack) and software to deliver web services. Each datacenter has 50,000 to 80,000 servers (25-30 MW). 38 Availability Zones (AZ): Consist of one or more discrete data centers, each with redundant power, networking and connectivity (e.g., 25Tbps inter-az), housed in separate facilities (<2ms away). They are more highly available, fault tolerant and scalable than a single data center. 60+ Edge Locations: House AWS proprietary hardware and software to facilitate content delivery and direct network connections. Source: (September 23, 2015) 4

5 AWS Global Infrastructure

6 REGION AZa DC DC AZb DC DC DC DC DC TC REDUNDANT TIER-1 REGION-TO-REGION CONNECTIVITY AZ s on separate flood plains. AZ s fault separated (sub-stations) AZ S TYPICALLY <1ms separation DC DC DC DC DC AZc TC TRANSIT CENTERS CONNECT: Private links to other regions Private links to Direct Connect customers Internet through peering & paid transit 25Tbps peak inter-az traffic

7 Example AWS Availability Zone AZ Transit AZ AZ AZ AZ Transit

8 Example AWS Data Center

9 Why Availability Zones? Challenges with traditional asynchronous replication between distant data centers Committing to an SSD order 1 to 2 ms But Sydney to Melbourne is 20 ms You can t wait 20 ms to commit a transaction Traditional failure, difficult decision: Failover & lose transactions, or Or don t failover & lose availability Difficult choice AZs for no-admin failover Sync works when < 2 ms Combine with regional replication for very high availability (VHA) 20 ms

10 Commercial AWS Account Console (Sydney)

11 Core Infrastructure & AWS Services Crosswalk Traditional Infrastructure Security Network Security Networking Provision On-Demand Servers Amazon Web Services Security Security Groups NACLs Access Mgmt. (IAM) Security Groups NACLs Access Mgmt Public Public Amazon EC2 EC2 Classic AMI Network ELB Servers ELB Amazon EC2 VPC VPC VPC Instances DAS SAN NAS RDBMS Storage & Database Glacier EBS S3 RDS

12 AWS in the Public Sector 2,300+ government agencies 7,000+ educational institutions 22,000+ nonprofit organizations 12

13 Government Agencies and Educational Institutions Use AWS Worldwide 13

14

15 AWS Partners Focused on Public Sector 15

16 AWS Introduction What is AWS and how does it work? Why are organizations choosing AWS? What are organizations using AWS for? 16

17 Why Are Customers Choosing AWS? Eliminate costly technical debt and reallocate resources so you can deliver high-value, revenue-generating projects faster. Innovate faster and solidify your competitive advantage by merging startup agility with enterprise experience and resources. Reduce risk by focusing resources dedicated to security, compliance and availability to the most important areas of your business. "AWS is our trusted partner that is going to run our company for the next 140 years. Jim Fowler CIO, General Electric

18 USA CIO Tony Scott I see the big cloud providers in the same way I see a bank, he says. They have the incentive, they have skills and abilities, and they have the motivation to do a much better job of security than any one company or any one organization can probably do. [ ] I think today the better bet is get to the cloud as quick as you can because you're guaranteed almost to have better security there than you will in any private thing you can do. CIO Magazine:

19 CIA CISO Sherrill Nicely Cloud has been a godsend for folks trying to implement systems quickly and for us to secure workloads better, said CIA Chief Information Security Officer Sherrill Nicely. We re very happy with it, Nicely added. Our agency and other [intelligence community] components are busily working to move their workloads into the cloud, and off legacy and into the new.

20 AWS Positioned as a Leader in the Gartner Magic Quadrant for Cloud Infrastructure as a Service, Worldwide* AWS is positioned highest in execution and furthest in vision within the Leaders Quadrant *Gartner, Magic Quadrant for Cloud Infrastructure as a Service, Worldwide, Leong, Lydia, Petri, Gregor, Gill, Bob, Dorosh, Mike, August This graphic was published by Gartner, Inc. as part of a larger research document and should be evaluated in the context of the entire document. The Gartner document is available upon request from AWS : Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

21 Simple Security Controls Easy to Get Right Easy to Audit Easy to Enforce

22

23 AWS is Architected for Government Security Requirements Certifications and accreditations for workloads that matter Compliant Solutions MTCS AWS Security Management Services: CloudWatch, CloudTrail, Service Catalog, Trusted Advisor and AWS Config Monitoring, API logging and configuration management for governance and compliance Log, review, alarm on all user actions Browse-and-query database of current and previous state of cloud resources 23

24

25

26 Strengthen your security posture Over 30 global compliance certifications and accreditations Security infrastructure built to satisfy military, global banks, and other high-sensitivity organizations Powerful native functionality and tools at no additional charge Benefit from AWS industry leading security teams 24/7, 365 days a year CIA Quote Leverage security enhancements gleaned from 1M+ customer experiences

27 Access a deep set of cloud security tools Networking Encryption Virtual Private Cloud Web Application Firewall Key Management Service CloudHSM Server-side Encryption Identity Compliance IAM Active Directory Integration SAML Federation Service Catalog CloudTrail Config

28 Compliance Resources

29 With AWS, Security Is a Shared Responsibility Customers concentrate on systems and apps while AWS manages infrastructure. Security expertise is a scarce resource; AWS oversees the big picture, letting your security team focus on a subset of overall security needs. Facilities Physical security Compute infrastructure Storage infrastructure Network infrastructure Virtualization layer (EC2) Hardened service endpoints Rich IAM capabilities Network configuration Security groups OS firewalls + Operating systems = Application security Proper service configuration AuthN and account management Authorization policies More secure and compliant systems than any single entity could normally achieve on its own 30

30 Economies of Scale Apply to Security and Compliance There is nothing better for the entire customer community than an exacting subset of customers. The stringent demands of a few Tough scrutiny, market-leading capabilities, constant improvements, and a world-class AWS security team benefit the whole client community. Everyone s Systems and Applications Set a higher standard for everyone REQUIREMENTS REQUIREMENTS REQUIREMENTS Amazon Web Services Security Infrastructure 31

31 Increased Agility Increased agility has become a primary reason organizations use the AWS cloud. 32

32 Organizations Can t Afford to Be Slow Old World: Infrastructure acquired and deployed in MONTHS AWS: Infrastructure adapted in MINUTES Add new dev environment Add new prod environment Add new environment in Japan Add 1,000 servers Remove 1,000 servers Deploy 1 PB data warehouse Shut down 1 PB data warehouse A new level of agility transforms your operations 33

33 AWS Fosters a Culture of Innovation: Experiment Often and Fail Without Risk With on-premises operations: Experimenting is infrequent Failure is expensive Innovation is diminished Experiment often Fail quickly at a low cost Innovation increases 34

34 AWS Introduction What is AWS and how does it work? Why are organizations choosing AWS? What are organizations using AWS for? 35

35 Government Use Cases on AWS Development and testing Enterprise applications Big data and high-performance computing (HPC) Storage, backup, and archiving Disaster recovery Web, mobile, and social apps Virtual desktops Data center migrations 36

36 Aerial Wide Area Mapping Terabyte+ of LiDAR data is collected by an airborne platform Data is streamed into AWS for processing and analytics in several large compute clusters Results delivered to mission owner 10x faster than old system. Allows for quick dissemination to planners and decision makers. Replaced large compute cluster that had to be transported to airfields in austere locations. Saved program $Millions in hardware and transportation costs

37 Intelligence, Surveillance and Reconnaissance Petabytes of Satellite data sent to ground stations is streamed into AWS for aggregation and analysis AWS can store Exabytes of data over a 10 year period saving $Billions in storage costs Full Motion Video streaming allows feeds to be shared with many different command posts Data is correlated between Space, Air and Ground sensors in AWS to provide real-time situational awareness

38 Condition Based Maintenance Sensors deployed on vehicle fleet feed data back into AWS Sensor data is analyzed to monitor vehicle performance and efficiencies Enables on-demand ordering of parts Ensures maintenance is occurring by sending out automated notifications and reports Gives decision makers a real-time view of the overall health of vehicles

39 Inventory and Supply Chain Management RFID and other sensors track cargo and containers worldwide Components are inventoried and tracked in AWS Predictive analytics using Amazon Machine Learning and other AWS services automates new component orders and movement of inventory around the globe Warehouse operations can be automated using AWS similar to how Amazon Fulfillment processes millions of orders a day

40 Training & Simulations Wearable sensors on helmet, rifles and other equipment give trainers real-time view of training Inter-connected Soldiers and Vehicle sensor data with GPS allows for more realistic simulations Reactive devices that simulate artillery fire and other effects can be triggered using AWS Internet of Things Large scale war games and modeling exercises become faster with AWS large scale compute clusters

41 Mobility Knowledge Management and Collaboration portals moved to AWS provide better performance and allow agile development Tablets and other hardened mobile devices connected back to AWS allow information to be shared quickly Portals can scale out automatically to handle large demand of military forces.

42 Enterprise Applications Amazon RDS for Oracle provides managed Oracle database deployments. Oracle applications are fully supported on AWS. Oracle licenses owned by customers are fully portable to AWS. AWS is an SAP-certified Global Cloud Services Partner and Global Technology Partner. Most SAP products are now certified for production deployment on AWS. AWS houses a full, licensed Windows Server OS on AWS. Easily install services that you know, including Active Directory, SCOM, SQL, Exchange, and SharePoint. Use your existing Microsoft licenses on AWS using AWS Bring Your Own License. 43

43 Local AWS Australia Contacts: Andy Hindmarch John Hildebrandt