Grischa Baelden AWS Public Sector Account Manager, DACH. Brendan Bouffler. Worldwide Research and Technical Computing Lead

Transcription

1 Grischa Baelden AWS Public Sector Account Manager, DACH Brendan Bouffler Worldwide Research and Technical Computing Lead

2

3

4 Education Customers Worldwide

5 AWS Global Infrastructure 16 R e g i o n s 68 Edge Locations Region & Number of Availability Zones 42 A Z s New Region (coming soon)

6 TECHNICAL & BUSINESS SUPPORT Support Professional Services Partner Ecosystem Training & Certification Solutions Architects HYBRID ARCHITECTURE Integrated Networking Direct Connect Identity Federation Integrated App Deployments Business Apps ANALYTICS Data Warehousing Business Intelligence Hadoop/ Spark Streaming Data Analysis Streaming Data Collection Machine Learning Elastic Search Identity Management Business Intelligence APP SERVICES Access Control Queuing & Notifications Workflow Search Transcoding DevOps Tools Key Management & Storage MOBILE SERVICES API Gateway Identity Sync Mobile Analytics Single Integrated Console Push Notifications MARKETPLACE Security DEVELOPMENT & OPERATIONS One-click App Deployment DevOps Resource Management Application Lifecycle Management Containers Triggers SECURITY & COMPLIANCE Monitoring & Logs Resource Templates Configuration Compliance Networking Web application firewall Databases IoT Rules Engine Device Shadows Device SDKs Device Gateway Registry Assessment and reporting Storage ENTERPRISE APPS Virtual Desktops Sharing & Collaboration Corporate Backup Resource & Usage Auditing Account Management Data Backups Compute VMs, Auto-scaling, & Load Balancing Storage Object, Blocks, Archival, Import/Export CORE SERVICES CDN Databases Relational, NoSQL, Caching, Migration Networking VPC, DX, DNS Security & Pricing Reports Integrated Resource Management Regions INFRASTRUCTURE Availability Zones Points of Presence

7 Compute Services Virtual Server Hosting, Container management, and Serverless Computing Amazon EC2 Provides resizable cloud-based compute capacity in the form of EC2 instances, which are equivalent to virtual servers Amazon EC2 Container Service A highly scalable, high performance container management service AWS Lambda Run code without thinking about servers. Pay for only the compute time you consume. 7

8 Storage Services A reliable, scalable, and secure place for your data Amazon S3 Designed to store and access any type of data over the Internet Amazon Elastic File System Simple, scalable file storage for use with Amazon EC2 instances in the AWS Cloud Amazon Elastic Block Storage Block-level storage that serves as a virtual hard drive for your Amazon EC2 instance AWS Storage Gateway Seamlessly links your on-premises environment to Amazon cloud storage Amazon Glacier Low-cost and highly durable storage service for long-term backup and archive of any type of data Data Transfer Services A portfolio of data transfer services to migrate data into and out of the AWS cloud 8

9 Database Services Managed relational databases, NoSQL database, data warehouse service and inmemory cache. Amazon RDS Managed relational database service. Costefficient and resizable capacity while managing time-consuming database administration tasks Amazon DynamoDB Fast and flexible NoSQL database service for all applications that need consistent, single-digit millisecond latency at any scale Amazon Elasticache Deploy, operate, and scale an in-memory cache in the cloud. AWS DMS Migrate your databases to AWS with zero downtime. More than 12,000 databases have been migrated using AWS DMS. Amazon Redshift Fast, fully managed, petabyte-scale data warehouse Amazon Aurora MySQL-compatible relational database with 5X performance. Security, availability, and reliability of commercial databases at 1/10th the cost. 9

10 Networking Services Virtual private cloud, direct connections, load balancing, and DNS Amazon VPC Provision a logically isolated section of the AWS cloud where you can launch AWS resources in a virtual network that you define AWS Direct Connect Establish a dedicated network connection from your premises to AWS Amazon Route 53 A highly available and scalable cloud Domain Name System (DNS) web service Elastic Load Balancing Distributes incoming application traffic across multiple Amazon EC2 instances in the cloud 10

11 We continuously evolve and improve our existing services, and frequently add new services. We may change or discontinue any APIs for the Services from time to time. We will notify you of any material change to or discontinuation of the Service Offerings. For any discontinuation of or material change to an API for a Service, we will use commercially reasonable efforts to continue supporting the previous version of such API for 12 months after the change or discontinuation. Source: AWS Customer Agreement

12 Education and Science not Servers and Data Centers Focus on your core mission Accelerated Time to Science Elastic and Scalable Lower costs Secure Flexible

13 Campus on a Cloud Teaching and Learning Solutions Distance Learning and MOOCs Learning Management Systems Lecture Capture Student Lab Environments Virtual Desktop and App Delivery Collaboration Tools Research and Technical Computing High Performance Computing Big Data Analytics Machine Learning & AI Storage & Backup Public Data Sets Tools and Techniques Platforms for collaboration & sharing Campus IT Solutions University Websites Dev. Environments ERP and SIS Systems Data Analytics Disaster Recovery Data Center Migrations Storage & Backup

14 With AWS, Security Is a Shared Responsibility Customer Data Customers are responsible for security in the Cloud Platform, Applications, Identity & Access Management Client-side Data Encryption & Data Integrity Authentication Operating System, Network & Firewall Configuration Server-side Encryption (File System and/or Data) Network Traffic Protection (Encryption / Integrity / Identity) AWS is responsible for security of the Cloud Compute AWS Global Infrastructure Storage Database Regions Avail. Zones Networking Edge Locations

15 AWS is Architected for Government Security Requirements Certifications and accreditations for workloads that matter Compliant Solutions MTCS AWS CloudTrail and AWS Config Call logging and configuration management for governance and compliance Log, review, alarm on all user actions Browse-and-query database of current and previous state of cloud resources 15

16 Access a deep set of cloud security tools Networking Encryption Identity & Management Compliance Virtual Private Cloud Isolated cloud resources Web Application Firewall Filter Malicious Web Traffic Shield DDoS protection Certificate Manager Provision, manage, and deploy SSL/TSL certificates Key Management Service Manage creation and control of encryption keys CloudHSM Hardware-based key storage Server-Side Encryption Flexible data encryption options IAM Manage user access and encryption keys SAML Federation SAML 2.0 support to allow on-prem identity integration Directory Service Host and manage Microsoft Active Directory Organizations Manage settings for multiple accounts Service Catalog Create and use standardized products Config Track resource inventory and changes CloudTrail Track user activity and API usage CloudWatch Monitor resources and applications Inspector Analyze application security Artifact Self-service for AWS compliance reports

17 Your Content on AWS You own and manage your content. We won t disclose your content except as you authorize or as necessary to comply with the law. You select the geographic location where your content is stored using API calls or the AWS Management Console, and we won t move your content except as you authorize or as necessary to comply with law. You can encrypt your content at rest and in transit. We don t monitor or control the content you or your end users upload to our services, so this content is your responsibility. We may disable content that is illegal or violates our acceptable use policy. Source: AWS Customer Agreement

18 AWS Data Access Policy AWS will not disclose customer content unless required to do so to comply with a legally valid and binding order, such as a subpoena or a court order. We will challenge requests that are overbroad, exceed the requestor s authority or do not fully comply with applicable law. [ ] we notify customers before disclosure to provide them with the opportunity to seek protection from disclosure, unless prohibited by law. AWS restricts its personnel from processing Customer Data without authorisation as described in the AWS Security Standards. AWS will impose appropriate contractual obligations upon its personnel, including relevant obligations regarding confidentiality, data protection and data security. Source: AWS Data Processing Addendum

19 Data Privacy Addendum including Model Clauses The AWS Data Processing Addendum with Model Clauses is available on a self-service basis for customers that are processing personal data on AWS.

20 Terms & Termination Service Levels Neither party is locked into a fixedterm contract. You may terminate for convenience at any time upon written notice. You will have 30 days after a termination to remove your content from our services. Our Amazon EC2, S3, CloudFront, RDS, and Route 53 services have service level agreements. We provide a Service Health Dashboard that shows the current operational status of our services in real-time. Source: AWS Customer Agreement Because our cloud computing platform functions the same way for all customers, we can t administer custom SLAs for individual customers

21 Customer Agreement Enterprise Agreement Online AWS Customer Agreement customers click to accept during the AWS account registration process. The Online CA is located on the AWS Site at AWS can update these terms and conditions at any time. The vast majority of AWS customers are on the Online CA. For certain enterprise customers who indicate that the Online CA is not acceptable, we offer the AWS Enterprise Agreement. The EA is similar to the Online CA, but some of the terms are adaptable to specific customer needs, and the EA is a paper agreement signed by both parties.

22 AWS Pricing Pay-as-you-go You aren t required to make any upfront financial commitments. The pricing for our services is described on our website Pay less by using more As we have grown and scaled our services, we have continuously passed along these economies of scale to our customers by lowering our prices. Save when you reserve Simple Monthly Calculator TCO Calculator

23 AWS Support Plans no long-term contracts Basic Support - Free Contact Customer Service for account and billing questions and receive technical support for resources that don t pass system health checks. Developer-level Support Starting at $49/month Get started on AWS ask technical questions and get a response to your web case within 12 hours during local business hours. Business-level Support Starting at $100/month 24/7/365 real-time assistance by phone and chat, a 1 hour response to web cases, and help with 3rd party software. Access Trusted Advisor to increase performance, fault tolerance, security, and potentially save money. Enterprise-level Support Starting at $15,000/month 15 minute response to web cases, an assigned technical account manager (TAM) who is an expert in your use case, and white-glove case handling that notifies your TAM and the service engineering team of a critical issue.

24 Administration and Governance Tools for budget management that will help you control your spending and limit costs. AWS Organizations Easily manage policies for groups of accounts and automate account creation. Bring your own license (BYOL), e.g. Microsoft, Oracle, SAP, AWS Marketplace Easily find, buy, deploy and manage software solutions, including SaaS.

25 Cloud Data Migration Moving existing on-premises data to a new cloud storage location in batches, trickles and streams. Direct Connect Storage Gateways Import/Export Snowball Technology Partnerships Amazon S3 Transfer Acceleration Kinesis Firehose

26 Hybrid Architecture Simplify the migration and management of applications by integrating your on-premises environments with the AWS Cloud. Amazon Virtual Private Cloud Amazon Direct Connect

27

28 Introducing VMware Cloud on AWS vrealize Suite, PowerCLI AWS CloudFormation, CLI, SDK Management (vcenter Server) VMware Cloud on AWS Access to all AWS services vcenter Server Amazon EC2 Amazon S3 Amazon RDS Amazon Redshift AWS Direct Connect AWS Identity & Access Management (IAM) Customer data center AWS global infrastructure AWS global infrastructure

29 AWS Channel Reseller Program Enables qualified APN Consulting Partners to resell AWS Services to both commercial and public sector AWS Customers GÉANT Framework AWS Resellers Billing-Services Written Offers, Local Sellers and Contracts, Consolidated Billing, Invoices in EUR or CHF, extra Tools, Monitoring, Cost Management, Deposits, etc. Partners add value Training Consulting Development Managed Hosting Being an AWS Channel Reseller enables us to establish an even closer relationship with our customers and deliver value to them by accelerating adoption of the services provided by AWS. Cloudreach

30 Cloud is not an I/0 decision Establish a cloud practice Start your journey

31 With the increasing demand for cloud employees, AWS Educate provides an academic gateway for the next generation of IT and cloud professionals. While research is often a compute-intensive activity, most researchers are not IT experts. Focus on methods, resources and straight forward guides that permit exploration whilst keeping your data secure and your budget safe. Open Data and Public Data sets Previously, large datasets such as the mapping of the Human Genome required hours or days to locate, download, customize, and analyze. Grants for free usage of AWS services Labs and training on cloud topics and AWS products The 150- page missing manual for research workloads in the cloud. Now, anyone can access these datasets via the AWS public data repository and analyze them using instant clusters and compute resources ion AWS, enabling more innovation, more quickly. Open course content by leading professors and AWS Communities that share best practices virtually and in person JOBS

32 Grischa Baelden Public Sector Account Manager, DACH Thank you! Brendan Bouffler Research and Technical Computing Lead

33 What sets AWS apart? Experience Building and managing cloud since 2006 Service Breadth & Depth 90+ services to support any cloud workload Global Footprint 16 regions, 42 availability zones, 68+ edge locations Pricing Philosophy 59 proactive price reductions to date Ecosystem Thousands of partners; Marketplace products

34 AWS in the Public Sector 2,300+ government agencies 7,000+ educational institutions 22,000+ nonprofit organizations 34