Building application and migrating workload to AWS

© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS Hands-on Workshop
Building application and migrating workload to AWS
Eric Lam – Solutions Architect
Herman Mak – Associate Solutions Architect

Agenda
1. Introduction
2. EC2, S3, EBS and VPC
3. AWS Migration Hub
<<<<<< biological break>>>>>>>
5. Lab session
6. Course Summary
In respect of intellectual property, please do not
take video of this workshop.

Who are we?
Eric Lam
AWS Solutions Architect
Herman Mak
AWS Associate Solutions Architect

AWS Overview

Run applications –
reliably and securely
Provision network, compute,
storage and database services in the
cloud with the click of a button
Everything you’d want to do
in a traditional datacenter
What is Amazon Web Services (AWS)?

AWS Products

20 Regions – 60 Availability Zones – 144 PoPs
AWS Global Infrastructure

AWS Global Infrastructure
Regions
Geographic locations
Consists of two or more Availability Zones (AZs)
Availability Zone (AZ)
One or more data centers
Isolated from failures in other Availability Zones

AZ – Availability Zone
Single
digit
ms
Network
multiple tier-1 transit providers
Power
isolated electrical grids, UPS, onsite backup generator
Geo
isolated fault lines flood plains
Network
multiple tier-1 transit providers
Power
isolated electrical grids, UPS, onsite backup generator
Geo
isolated fault lines flood plains

Edge Locations
144 AWS Edge Locations:
Local points-of-presence commonly supporting AWS
services including:
• Amazon Route 53
• Amazon CloudFront

Any questions?

Amazon Elastic Compute
Cloud (EC2)

Amazon Elastic Compute Cloud (EC2)
Resizable compute capacity
Complete control of your computing resources
Reduces the time required to obtain and boot new
server instances to minutesAmazon
EC2

Amazon EC2 Facts
Scale capacity as your computing requirements change
Pay only for capacity that you actually use
Choose Linux or Windows
Deploy across AWS Regions and Availability Zones for reliability

Launching an Amazon EC2 Instance via the Web
Console
1. Determine the AWS Region in which you want to launch
the Amazon EC2 instance.
2. Launch an Amazon EC2 instance from a pre-configured
Amazon Machine Image (AMI).
3. Choose an instance type based on CPU, memory,
storage, and network requirements.
4. Configure network, IP address, security groups, storage
volume, tags, and key pair.

Amazon EC2 Instances
OS, Applications,
& Configuration
AMI
Running or
Stopped VM
Instances
AZ
Region
EBS
S3
EBS
Snapshots
S3 Buckets
EBS EBS EBS EBS EBS
AZ
Instances Instances

Amazon EBS vs. Amazon EC2 Instance Store
Amazon EBS
• Data stored on an Amazon EBS volume can persist
independently of the life of the instance.
• Storage is persistent.
Amazon EC2 Instance Store
• Data stored on a local instance store persists only as long as
the instance is alive.
• Storage is ephemeral.

AWS Marketplace – IT Software Optimized for the
Cloud
An online store to discover, purchase,
and deploy IT software on top of the
AWS infrastructure.
• Catalog of 2300+ IT software solutions
• Including Paid, BYOL, Open Source,
SaaS, & free to try options
• Pre-configured to operate on AWS
• Software checked by AWS for security and
operability
• Deploys to AWS environment in minutes
• Flexible, usage-based billing models
• Software charges billed to AWS account
Includes AWS Test Drive

Choosing the Right Amazon EC2 Instance
EC2 instance types are optimized for different use cases and come in
multiple sizes. This allows you to optimally scale resources to your
workload requirements.
AWS uses Intel® Xeon® processors for EC2 instances, providing
customers with high performance and value.
Consider the following when choosing your instances: Core count,
memory size, storage size and type, network performance, and CPU
technologies.
Hurry Up and Go Idle - A larger compute instance can save you time
and money, therefore paying more per hour for a shorter amount of
time can be less expensive.

Current Generation Instances
Instance Family Some Use Cases
General purpose (t3, m5, m4)
• Low-traffic websites and web applications
• Small databases and mid-size databases
Compute optimized (c5, c4)
• High performance front-end fleets
• Video-encoding
Memory optimized (x1e, x1, r5, r4)
• High performance databases
• Distributed memory caches
Storage optimized (i3, d2, h1)
• Data warehousing
• Log or data-processing applications
GPU instances (p3, g3)
• 3D application streaming
• Machine learning

C4.xlarge (Compute-Optimized)
FamilyGeneration
TypeFamily

M2
2nd Generation
Compute
M4
4th Generation
Compute
Upgrade

Instance Metadata & User Data
Instance Metadata:
Is data about your instance.
Can be used to configure or manage a running
instance.
Instance User Data:
Can be passed to the instance at launch.
Can be used to perform common automated
configuration tasks.
Runs scripts after the instance starts.

Retrieving Instance Metadata
To view all categories of instance
metadata from within a running
instance, use the following URI:
http://169.254.169.254/latest/meta-
data/
On a Linux instance, you can use:
• $ curl http://169.254.169.254/latest/meta-data/
• $ GET http://169.254.169.254/latest/meta-data/
All metadata is returned as text
(content type text/plain).

Adding User Data
You can specify user data when launching an
instance.
User data can be:
• Linux script – executed by cloud-init
• Windows batch or PowerShell scripts – executed by
EC2Config service
User data scripts run once per instance-id by default.

User Data Example Linux
User data shell scripts must start with the #!
characters and the path to the interpreter you
want to read the script.
Install Apache web server
Enable the web server
Start the web server
#!/bin/sh
yum -y install httpd
chkconfig httpd on
/etc/init.d/httpd start

User Data Example Windows
<powershell>
Import-Module ServerManager
Install-WindowsFeature web-server, web-webserver
Install-WindowsFeature web-mgmt-tools
</powershell>
Import the Server Manager module
for Windows PowerShell.
Install IIS
Install Web Management Tools

Amazon EC2 Purchasing Options
On-Demand
Instances
Pay by the hour.
Reserved
Instances
Purchase at
significant
discount.
Instances are
always available.
1-year to 3-year
terms.
Scheduled
Instances
Purchase a 1-
year RI for a
recurring period of
time.
Spot Instances
Highest bidder
uses instance at a
significant
discount.
Spot blocks
supported.
Dedicated
Hosts
Physical host is
fully dedicated to
run your
instances. Bring
your per-socket,
per-core, or per-
VM software
licenses to reduce
cost.

Any questions about
Amazon EC2?

Amazon Simple Storage Service (S3)
Amazon S3
Storage for the Internet
Natively online, HTTP/HTTPS, REST API access
Store and retrieve any amount of data, any time,
from anywhere on the web
Highly scalable, reliable, fast and durable
Designed to deliver 99.999999999% Durability

Common Use Scenarios
Storage and Backup
Application File Hosting
Media Hosting
Software Delivery
Log files
Store AMIs and Snapshots

Amazon S3 Concepts
Amazon S3 stores data as objects
within buckets
An object is composed of a file and
optionally any metadata that describes
that file
You can have up to 100 buckets in each
account
You can control access to the bucket
and its objects
Amazon
S3
Bucket
with
Objects
Bucket
Object

Amazon S3 Security
You can control access to buckets and objects with:
• Identity and Access Management (IAM) policies
• Access Control Lists (ACLs)
• Bucket policies
You can upload or download data to Amazon S3 via SSL
encrypted endpoints.
You can encrypt data at rest using Amazon S3 SSE
You can encrypt data at client side using AWS SDKs.

Amazon S3 + Amazon Glacier
S3 Lifecycle policies allow you to delete or move
objects based on age and set rules per S3 bucket.
bucket with
objects
30 Days
Glacier
archive
365 Days

Amazon S3 Pricing
Pay only for what you use
No minimum fee
Prices based on location of your Amazon S3 bucket
Estimate monthly bill using the AWS Simple Monthly Calculator
Pricing is available as:
• Storage Pricing
• Request Pricing
• Data Transfer Pricing: data transferred out of Amazon S3

Amazon Elastic Block Store (EBS)
Persistent block level storage volumes offering
consistent and low-latency performance
• Automatically replicated within its Availability
Zone
• Independent lifecycle
• Attach to instance one at a time
• Snapshots stored durably in Amazon S3
Amazon
EBS

Amazon EBS Use Cases
OS – Use for boot/root volume, secondary volumes
Databases – Scales with your performance needs
Enterprise applications – Provides reliable block storage to run
mission-critical applications
Business continuity – Minimize data loss and recovery time by
regularly backing up using EBS Snapshots

Amazon EBS Facts
You can create:
• EBS Magnetic volumes from 1 GiB to 1 TiB in size.
• EBS General Purpose (SSD) and Provisioned IOPS (SSD) volumes
up to 16 TiB in size.
You can use encrypted EBS volumes to meet a wide range
of data at-rest encryption requirements for
regulated/audited data and applications.
You can create point-in-time snapshots of EBS volumes,
which are persisted to Amazon S3.

Amazon EBS Pricing
* Check Amazon EBS Pricing page for current pricing for all regions.
Pay for what you provision:
Pricing based on region
Review Pricing Calculator online
(https://calculator.s3.amazonaws.com/index.html)
Pricing is available as:
•Storage
•IOPS

Amazon EBS and Amazon S3
Amazon EBS Amazon S3
Paradigm Block storage with file system Object store
Performance Very fast Fast
Redundancy Across multiple servers in an
Availability Zone
Across multiple facilities in a
Region
Security EBS Encryption – Data volumes
and Snapshots
Encryption
Access from the
Internet?
No (1) Yes (2)
Typical use case It is a disk drive Online storage
(1) Accessible from the Internet if mounted to server and set up as FTP, etc.
(2) Only with proper credentials, unless ACLs are world-readable

Any questions
about Amazon S3 and
Amazon EBS?

Networking
Amazon VPC

Amazon Virtual Private Cloud (VPC)
Provision a private, isolated virtual network on the
AWS cloud.
Have complete control over your virtual
networking environment.
Amazon
VPC

Amazon Virtual Private Cloud (VPC)
Your own logically isolated section of AWS
Bring your own network:
• IP Addresses
• Subnets
• Network Topology
• Routing Tables
Multiple Connectivity Options
Advanced Security Features

Networking Building Blocks
Availability Zone BAvailability Zone A
• Bring your own network
Your Network goes here
VPC – Virtual Private Cloud

Networking Building Blocks
• Bring your own network
• Create your own subnets
Availability Zone BAvailability Zone A
VPC Subnet VPC Subnet

VPCs and Subnets
A subnet defines a range of IP addresses in your VPC.
You can launch AWS resources into a subnet that you
select.
A private subnet should be used for resources that won’t
be accessible over the Internet.
A public subnet should be used for resources that will be
accessed over the Internet.
Each subnet must reside entirely within one Availability
Zone and cannot span zones.

Network Building Blocks
Each subnet can have a unique Route
Table
Direct traffic out of the VPC
• IGW
• VGW (Direct Connect and VPN)
• VPC Endpoints
• VPC Peering
AWS Cloud
Public Subnet
Private Subnet
Corporate Datacenter
VPC
172.16.0.0/16
192.168.0.0/16
10.0.10.0/16
10.0.20.0/16

Public Subnet
Private Subnet
Inbound Network ACL
Source Protocol L4 Port Action
10.0.10.0/0 TCP MySQL 3306 Allow
* * * * Deny
10.0.10.0/24
10.0.30.0/24
Outbound Network ACL
Destination Protocol L4 Port Action
10.0.10.0/0 TCP * * Allow
* * * * Deny
TCP 3306 *

Public Subnet – Web/App Tier
Private Subnet – DB Tier
TCP 443
TCP 3306
Inbound Security Group SG-DatabaseTier
Traffic from Protocol L4 Port Action
SG-WebTier MySQL TCP 3306 Allow
* * * * Deny
Inbound Security Group SG-WebELB
0.0.0.0/0 HTTPS TCP 443 Allow
* * * * Deny
Anything Else
Inbound Security Group SG-WebTier
SG-WebELB HTTP TCP 80 Allow
* * * * Deny
TCP 80 TCP 80
TCP 3306

Public Subnet
Private IP: 10.0.20.9
Private Subnet
AWS Cloud
Internet Gateway
Public Internet
Elastic IP: 198.51.100.2

Private Connections
VPN Connectivity option Description
AWS Hardware VPN
You can create an IPsec, hardware VPN connection
between your VPC and your remote network.
AWS Direct Connect
AWS Direct Connect provides a dedicated private
connection from a remote network to your VPC.
AWS VPN CloudHub
You can create multiple AWS hardware VPN
connections via your VPC to enable communications
between various remote networks.
Software VPN
You can create a VPN connection to your remote
network by using an Amazon EC2 instance in your VPC
that’s running a software VPN appliance.

How to connect my Datacenter to AWS?
One VGW per VPC
Redundant VPN Tunnels
• Terminating in different AZs
IPSec
• AES 256-bit encryption
• SHA-2 hashing
Scalable
BGP or Static Routing AWS Cloud
Corporate Datacenter
Amazon S3
DynamoDB
API Gateway
Other AWS Services
Virtual Private Gateway (VGW)
Customer Gateway (CGW)
VPN Connection
2x IPSEC Tunnel

DirectConnect Location
AWS Cloud Corporate Datacenter
DirectConnect
Customer Gateway
WAN
Amazon S3
DynamoDB
API Gateway
Public VIF
Other AWS Services
Private VIF
VGW

Plan your VPC IP space before creating it
IP Addressing
• Consider future AWS region expansion
• Consider future connectivity to corporate networks
• Consider subnet design
• VPC can be /16 between and /28
• CIDR cannot be modified once created
• But you can add new CIDRs to expand the VPC IP addressing
• Overlapping IP spaces = future headache

Any questions about
networking?

Migrating to AWS
Evaluate Plan
Migration Readiness and
Planning Engagement
Migration
Execution
Migration
Readiness
Assessment
AWS Tools & AWS Services
Partner Tools
Methodology&
Process
Tools
Design Migrate Optimize

Migration Challenges
Discover
• Current asset
management databases
are typically inaccurate
• Discovering only servers
is not sufficient and
presents an incomplete
view of your IT portfolio
Plan
• Performing analysis
on discovery data is
time consuming
• Determining how and
when to migrate an
application is difficult
and carries risk
Migrate
• Lack of visibility into
application migrations
slows progress and
velocity
• Tracking across
multiple use cases and
migration tools is
complex

Introducing
AWS Migration Hub!
• Migration Hub provides a
single location to track
the progress of
across multiple AWS and
partner solutions
• Using Migration Hub
allows you to choose the
AWS and partner
migration tools that best
fit your needs, while
providing visibility into
the status of migrations
across your portfolio of
applications

AWS Application Discovery Service
• Agents deployed on source hosts;
agentless for VMWare
• Windows and Linux support
• Capture system inventory,
performance, and dependencies
• Capture and store secured data to AWS
• API access to discovered assets
• Application awareness and
identification
Discovery
Agents
AWS Discovery
DB
AWS Application
Discovery Service
On-premises data center or
VMware vCenter Encrypted
data
Agentless
Discovery
Appliance
(Standalone
VM)

Migration Execution
Each application migration usually involves one or more of
these different types of resources:
Server Migration
Data MigrationDatabase Migration

Integrated Migration Tools
AWS Server
Migration Service
AWS Database
Migration Service
AWS Migration
Hub
With SMS, import VM images from your
existing environment to ready-to-use
Amazon EC2 instances
DMS helps you migrate databases to
AWS easily and securely
CloudEndure Live Migration provides
automated migration with continuous
block-level replication from any
physical or virtual infrastructure into
AWS
ATADATA ATAMotion automates the
transfer of live workloads from any
physical or virtual environment into
AWS utilizing agentless deployment

AWS Server Migration Service
• Support VMware VMs migration with
the initial release
• Windows and Linux support
• Agentless VM migration
• Capture incremental changes made to
on-premises VMs and transfer to AWS
• Create migration waves
• AWS Management Console and
API/CLI access
• Launch EC2 instances from Amazon
Machine Images (AMI)
VMs
AWS Server
Migration Service
On-premises VMware VMs
AMI
Encrypted
data

AWS Database Migration Service
• Keep your applications running during
the migration
• Start a replication instance
• Configure both database endpoints
• Select tables, schemas, or databases
• Switch applications over to the target
at your convenience as AWS DMS
keeps the target database in sync.
• Wide support of databases
• Homogeneous migrations (ex: Oracle to
Oracle)
• Heterogeneous migrations (ex: Oracle
to Amazon Aurora)
On-Premises Database Database
Migration
Service

Disaster Recovery and Live Migration
OS-based continuous
block-level
replication
CloudEndureKeyTechnologyPillars
One-Minute Any-to-
Cloud
Image Conversion
Minimal footprint
replication staging
area
Reduce DR Infra
TCO by 80%+
RPO: Sub-second
RTO: Minutes
Failover &
failback
Replicate any applications
from physical/virtual/
cloud-based machines
No disruption or reboot
of source machine(s)
Live-MigrationDesigned for busy
databases without
impacting performance
Disaster Recovery
Shorten
cutover window
to minutes
Reduce
human labor
and complexity
APIs & Post-scripts
for automation
and optimization
Predictable and
no-risk cutover
Non-disruptive
easy testability

Migration Tracking
• The migration tools,
if authorized,
automatically send
status updates back
to Migration Hub for
display on the
migration status
page for the
application
time4.example.com
time1.example.com
time3.example.com
time5.example.com
time6.example.com
time2.example.com
time7.example.com
time8.example.com
time8.example.com time4.example.com
time5.example.com
time2.example.com
time7.example.com
time3.example.com
time6.example.com
time1.example.com

Migration Tracking
• Track the status and key
metrics of your
by checking the
Migration Hub
Dashboard

Available Now
Pricing
• There is no additional charge for AWS Migration Hub. You only
pay for the cost of the migration tools you use, and any resources
being consumed on AWS.
• AWS Migration Hub can manage migrations in any AWS Region
that has the necessary migration tools available; the hub itself
runs in the US West (Oregon) Region.

Resources
• Service Team: Use the “Feedback” button in the lower-left when on the AWS
Migration Hub console
• https://console.aws.amazon.com/migrationhub/dashboard
• Jeff Barr’s Blog post:
• https://aws.amazon.com/blogs/aws/aws-migration-hub-plan-track-
enterprise-application-migration/
• AWS Migration Hub:
• https://aws.amazon.com/migration-hub/
• Product Documentation:
• https://docs.aws.amazon.com/migrationhub/latest/ug/getting-
started.html

Any questions about
Migration Hub?

Remember to do..
1. Terminate your AWS lab resources
2. Complete the Survey
3. Receive AWS Credit
4. Email us if you have question
erilam@amazon.com
hermanma@amazon.com

Building application and migrating workload to AWS

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Was ist angesagt?

Was ist angesagt? (20)

Ähnlich wie Building application and migrating workload to AWS

Ähnlich wie Building application and migrating workload to AWS (20)

Mehr von Amazon Web Services

Mehr von Amazon Web Services (20)

Building application and migrating workload to AWS