CASE STUDY Application Migration and optimization on AWS

Similar documents
About Intellipaat. About the Course. Why Take This Course?

AWS Solution Architect Associate

STATE OF MODERN APPLICATIONS IN THE CLOUD

Minfy MS Workloads Use Case

Minfy MS Workloads Use Case

AWS Course Syllabus. Linux Fundamentals. Installation and Initialization:

Modernize Your Backup and DR Using Actifio in AWS

AWS Solutions Architect Associate (SAA-C01) Sample Exam Questions

TM DevOps Use Case TechMinfy All Rights Reserved

Serverless Computing. Redefining the Cloud. Roger S. Barga, Ph.D. General Manager Amazon Web Services

Architecting for Greater Security in AWS

AWS Well Architected Framework

Amazon Web Services. Block 402, 4 th Floor, Saptagiri Towers, Above Pantaloons, Begumpet Main Road, Hyderabad Telangana India

Migrating Enterprise Applications to the Cloud Session 672. Leighton L. Nelson

SAA-C01. AWS Solutions Architect Associate. Exam Summary Syllabus Questions

Amazon Web Services (AWS) Solutions Architect Intermediate Level Course Content

PrepAwayExam. High-efficient Exam Materials are the best high pass-rate Exam Dumps

CLOUD WORKLOAD SECURITY

AWS Agility + Splunk Visibility = Cloud Success. Splunk App for AWS Demo. Laura Ripans, AWS Alliance Manager

CPM. Quick Start Guide V2.4.0

Cloud Computing /AWS Course Content

At Course Completion Prepares you as per certification requirements for AWS Developer Associate.

INTRODUCING CISCO SECURITY FOR AWS

Enroll Now to Take online Course Contact: Demo video By Chandra sir

Training on Amazon AWS Cloud Computing. Course Content

Amazon Web Services Training. Training Topics:

ARCHITECTING WEB APPLICATIONS FOR THE CLOUD: DESIGN PRINCIPLES AND PRACTICAL GUIDANCE FOR AWS

Amazon Search Services. Christoph Schmitter

Oracle Autonomous Database

Minfy-Magnaquest Migration Use Case

Amazon AWS-Solution-Architect-Associate Exam

What s New at AWS? A selection of some new stuff. Constantin Gonzalez, Principal Solutions Architect, Amazon Web Services

USE CASE - HYBRID CLOUD IZO MANAGED CLOUD FOR AWS

Overview of AWS Security - Database Services

HPE Digital Learner AWS Certified SysOps Administrator (Intermediate) Content Pack

FAQs. Business (CIP 2.2) AWS Market Place Troubleshooting and FAQ Guide

San Jose Water Company Expedites New Feature Delivery with DevOps Help from ClearScale on AWS

Security Camp 2016 Cloud Security. August 18, 2016

Introduction to AWS GoldBase. A Solution to Automate Security, Compliance, and Governance in AWS

Oracle WebLogic Server 12c on AWS. December 2018

What s New at AWS? looking at just a few new things for Enterprise. Philipp Behre, Enterprise Solutions Architect, Amazon Web Services

AWS Integration Guide

Simple Security for Startups. Mark Bate, AWS Solutions Architect

AALOK INSTITUTE. DevOps Training

Cloud security 2.0: Joko nyt pilveen voi luottaa?

Automating Security Practices for the DevOps Revolution

Amazon Web Services (AWS) Training Course Content

AWS Certified Solutions Architect - Associate 2018 (SAA-001)

Store, Protect, Optimize Your Healthcare Data in AWS

Serverless Architecture Hochskalierbare Anwendungen ohne Server. Sascha Möllering, Solutions Architect

CLOUD AND AWS TECHNICAL ESSENTIALS PLUS

Actifio Sky DB. Actifio s Solution for Oracle, Oracle EBS with standalone, RAC, ASM, EXADATA configurations

BERLIN. 2015, Amazon Web Services, Inc. or its affiliates. All rights reserved

Automating Elasticity. March 2018

PROTECT YOUR DATA FROM MALWARE AND ENSURE BUSINESS CONTINUITY ON THE CLOUD WITH NAVLINK MANAGED AMAZON WEB SERVICES MANAGED AWS

25 Best Practice Tips for architecting Amazon VPC. 25 Best Practice Tips for architecting Amazon VPC. Harish Ganesan- CTO- 8KMiles

Adopting Modern Practices for Improved Cloud Security. Cox Automotive - Enterprise Risk & Security

Cognitive about designing, deploying and operating highly available, scalable and fault tolerant systems using Amazon Web Services (AWS).

Best Practices for Cloud Security at Scale. Phil Rodrigues Security Solutions Architect Amazon Web Services, ANZ

Containers or Serverless? Mike Gillespie Solutions Architect, AWS Solutions Architecture


Agenda. AWS Database Services Traditional vs AWS Data services model Amazon RDS Redshift DynamoDB ElastiCache

Microsoft Best Practices on AWS

AWS 101. Patrick Pierson, IonChannel

CyberPosture Intelligence for Your Hybrid Infrastructure

AWS Administration. Suggested Pre-requisites Basic IT Knowledge

Crypto-Options on AWS. Bertram Dorn Specialized Solutions Architect Security/Compliance Network/Databases Amazon Web Services Germany GmbH

DevOps Course Content

Managing and Auditing Organizational Migration to the Cloud TELASA SECURITY

NEXT GENERATION CLOUD SECURITY

Security & Compliance in the AWS Cloud. Amazon Web Services

epldt Web Builder Security March 2017

ActiveNET. #202, Manjeera Plaza, Opp: Aditya Park Inn, Ameerpetet HYD

AWS Service Delivery Program AWS Database Migration Service (DMS) Consulting Partner Validation Checklist

QLIK INTEGRATION WITH AMAZON REDSHIFT

How to Keep UP Through Digital Transformation with Next-Generation App Development

Title: Planning AWS Platform Security Assessment?

Security & Compliance in the AWS Cloud. Vijay Rangarajan Senior Cloud Architect, ASEAN Amazon Web

Netflix OSS Spinnaker on the AWS Cloud

Securing Amazon Web Services (AWS) EC2 Instances with Dome9. A Whitepaper by Dome9 Security, Ltd.

AWS Security. Stephen E. Schmidt, Directeur de la Sécurité

Microservices on AWS. Matthias Jung, Solutions Architect AWS

SOLUTION BRIEF Fulfill the promise of the cloud

AWS Reference Design Document

AWS_SOA-C00 Exam. Volume: 758 Questions

Deploying and Operating Cloud Native.NET apps

Pass4test Certification IT garanti, The Easy Way!

We are ready to serve Latest IT Trends, Are you ready to learn? New Batches Info

Splunk & AWS. Gain real-time insights from your data at scale. Ray Zhu Product Manager, AWS Elias Haddad Product Manager, Splunk

Getting Started with AWS Security

Cisco Cloud Services Router 1000V and Amazon Web Services CASE STUDY

High School Technology Services myhsts.org Certification Courses

AWS Storage Gateway. Amazon S3. Amazon EFS. Amazon Glacier. Amazon EBS. Amazon EC2 Instance. storage. File Block Object. Hybrid integrated.

Managing IoT and Time Series Data with Amazon ElastiCache for Redis

Mapping traditional security technologies to AWS Dave Walker Specialised Solutions Architect Security and Compliance Amazon Web Services UK Ltd

OptiSol FinTech Platforms


VMware Cloud on AWS. A Closer Look. Frank Denneman Senior Staff Architect Cloud Platform BU

TestkingPass. Reliable test dumps & stable pass king & valid test questions

DEVOPSIFYING NETWORK SECURITY. An AlgoSec Technical Whitepaper

Transcription:

CASE STUDY Application Migration and optimization on AWS Newt Global Consulting LLC. AMERICAS INDIA HQ Address: www.newtglobal.com/contactus 2018 Newt Global Consulting. All rights reserved. Referred products/ services may be registered trademarks

Introduction Client is a Fortune 50 company and is one of the largest Telecom service providers in the US and offers multiple products and services to consumers and enterprises. Being a large enterprise, the IT footprint is huge and there is a plethora of applications both COTS and internally developed. The vision of the Business and IT leadership teams is to migrate applications from Data centers to public cloud infrastructure in a phased manner. There is a big initiative to migrate legacy DBs to the public cloud as part of the DC revamp strategy. The client is looking at a few options for migrations that would be least disruptive and retain the performance characteristics. One such project is consolidation of multiple Oracle DBs into Aurora Postgres with limited rewriting of SPs and PL/SQL code.. Current System overview: Client was running multiple instance of Databases and all are hosted ON-PREMISE. This has shot-up the license (covering Operating system license cost, DB server license cost) and maintenance cost. Added to this, servers could run into OS issued, as Solaris 10 (including support for oracle database) with end of Premium support date as of Sep 2018. They were also running the risk of one-point failure which could impact their business. Client was also facing performance issue on these databases because of huge data and poor DB design. Key Business/Systems requirements: The Current application is the method of extending the clients Business network to the customer s premise using their own facility and /or third-party facility. The current application consists of cron jobs, ETL Batches, reports and several DB based batches and OLTP DB. Client wants to modernize the application by moving the workloads and leveraging AWS Elastic scaling technologies for the batch jobs, ETL and consolidating the DB in Postgres Aurora and potentially Cassandra on AWS in the future. Solution Considerations The Client has enumerated the following requirements for mandatory compliance while designing an approach to migration. I. Automated DB scaling II. Rewrite of ECOST application with micro-services architecture III. Software Installation & Configuration (Tomcat, AWS Aurora Postgres, Jenkins 2.0, Java Springboot, Junit etc.) IV. Automated Code Deployment V. Scheduled Backup implementation VI. DB AWS Migration: a. Consolidation to single machine in works by the existing team. i. ECOST DB also to be as one schema with rest of the apllication DB ii. Eliminate public Synonyms and Eliminate DB Links

Batch Jobs: Complete Redesign iii. Evaluate if stored procedures need to be moved to spring boot or remain as Postgres Stored Procedures. o Batch jobs driven by UI. Example use uploads csv of records to validate addresses. o ETL Loads: Convert files (CSV, Logs, XLS, XLSX) and store to an RDBMS DB as of now and later to a no SQL DB such as Cassandra o Maintenance Batches: Performs DB Maintenance: Purges and Deletes o Reporting Batches: Generate Reports. Feed Reports to external systems o Provide Visibility to all the batch Jobs. Enhance the DB performance top 10 running SQL/PL SQL queries will be fine-tuned based on the outcome of AWR report. Align the oracle tablespace to suite the need of AWS EC2 disk performance and their mount point s. During the migration to cloud, strict enforcement of house-keeping of big audit trail tables will be attempted and ensure there is saving cost on the Storage disk. Choice of Migration approach Newt global has proposed to consolidate its all 7 databases into one and migrate it to cloud. This could help them to reduce spending on licensing. Since cloud model comes with best support and maintenance model, Client is now free from running its on premise infrastructure and spending on its maintenance. As cloud is also scalable, it is easy for the client to increase its infrastructure bandwidth as needed in future. And it is also paying for what is consumes, which becomes more cost effective for the client. Since database is moved to cloud, its dependent applications and batch jobs around it are also migrated to cloud. This gives an opportunity to leverage other features available in cloud. Since services like S3 are on pay to use model this is also an cost effective option. AWS Data pipeline is

considered along with the associated components for ETL. Proposed Technology stack: Tools Tomcat AWS Aurora Postgres Cassandra JDK 1.8 Jenkins 2.x Ansible 2.0.0 Shell scripts AWS specific Services AWS batch AWS Data Pipeline AWS CFT AWS Lambda AWS Aurora AWS EC2 Dev Java Spring boot Docker Angular JS

Implementation Phase: Timelines The client engagement was an end to and end DB migration to the AWS infra-structure with a scalable and highly available architecture. Phase Outcome Elapsed time Responsibility Business Req. Study Sign-off PRD 2 weeks Newt/Client Design Sprint plan and deliverables 2 weeks Newt Development Code base in AWS environment 10 weeks Newt Migration Deployment pipeline 4 weeks Newt/Client UAT Functionality & Performance 4 weeks Newt/Client Production cut-over AWS configuration tweaking 4 weeks Newt Start of the project: March 20 th, 2018 End of the project: August 25 th, 2018. Team structure The project team has 3 core Java developers, 1 Microservice Architect, 2 Java MS developers, I UX designer, 1 DB Architect, 2 DB Migration SMEs (Oracle/Postgres SQL), 4 testers and 2 AWS certified solution architects, 1 DBA and 1 AWS SysOps engineer for deployment and support. Implementation Phase The deployment architecture is captured in the following sequence of events: 1. A rule in CloudWatch Events triggers the state machine execution on an automated schedule. 2. The state machine invokes the first Lambda function. 3. The Lambda function deletes all existing records in Amazon Redshift. Depending on the dataset, the Lambda function can create a new table in Amazon Redshift to hold the data. 4. The same Lambda function then retrieves Keys from a DynamoDB table. Keys represent specific business rules. 5. The state machine executes the second Lambda function using the Keys from DynamoDB. 6. The second Lambda function retrieves the referenced dataset from RDS. The records retrieved represent the entire dataset needed for a business process. 7. The second Lambda function executes in parallel for each Key retrieved from DynamoDB and stores the output in CSV format temporarily in S3. 8. Finally, the Lambda function uploads the data into Amazon Redshift

As part of the project the batch-file management using AWS Batch would be implemented as under: AWS Service Used AWS Step Functions, AWS Lambda, Amazon DynamoDB, Amazon RDS, Amazon Redshift, Amazon S3 and Amazon CloudWatch Events, EC2, S3 and ELB.

Third party tool/products used The application uses: Jenkins/JIRA, Stash, Ajax/CSS, Angular JS, JDK, Tomcat, Eclipse, Java Spingboot, junit, JQuery, Oracle, Swagger, Maven, sl4j. Security considerations and implementation In line with the expectations of the application owner within the enterprise and also meeting the corporate security guidelines, the following best practices were implemented. VPC was adopted with NAT for enterprise access to EC2 instances All programming / API access to AWS was encrypted with TLS and user access was thru SSH. AMIs and deployment scripts were hardened as per business requirements Regular vulnerability scans were done IAM policies were baked with enterprise LDAP credentials. Data at rest was protected by using EBS and its native encryption To be implemented before the closure of the project: Use of MFA with the clients security token system Use automation to build workload images without requiring human intervention. A systematic workload re-provisioning strategy, since any workload could be compromised at any point. Use of CloudTrail for audit purposes Business benefits of the migration: Provide scalability to batch process and Batch ETL Org visibility on batch jobs Leverage AWS and cloud scaling architectures