Who to utilize AWS 'cloud in a box' offerings (AWS Quick Starts and solutions) to rapid deploy and configure an AWS foundational solution. The session covers landing zones, security, database, identity and access management, remote workers, and cloud operations.

1. © 2019, Amazon Web Services, Inc. or its Affiliates.© 2019, Amazon Web Services, Inc. or its Affiliates.
Tom Laszewski, Private Equity Transformation Strategist
Nate Powell, Private Equity Solution Architect
AWS Value Creation
Carve Outs and Mergers
April 2020

2. © 2019, Amazon Web Services, Inc. or its Affiliates.
Table of Contents
• Quick intros and expectations for the meeting (10 mins)
• An overview of the cloud in a box accelerator (25 mins)
• What skills are needed to be proficient in using the frameworks? (5 mins)
• Case study (5 mins)
• Next steps to build a reference architecture and select a project (5 mins)

3. © 2019, Amazon Web Services, Inc. or its Affiliates.
Introductions

4. © 2019, Amazon Web Services, Inc. or its Affiliates.
Outcomes
When can you apply AWS Cloud in Box offerings?
How to apply AWS Cloud in Box offerings?
What are the skills required?
How to get started?

5. © 2019, Amazon Web Services, Inc. or its Affiliates.
Overview of Cloud in Box Accelerators

6. © 2019, Amazon Web Services, Inc. or its Affiliates.
Two Cloud in a box offerings
AWS Quick Starts are automated, customizable reference deployments of a
popular technology. Built by AWS solutions architects and APN Partners, Quick
Starts are deployed in the AWS Cloud using AWS best practices.
https://github.com/aws-quickstart/ (218) – Pay for AWS Services, third-party
licences
AWS Solutions Consulting Offers are vetted solutions to common business and
technical problems deployed with help from AWS Competency Partners.
Some AWS Solutions Consulting Offers include an AWS Quick Start as an
accelerator to deployment in the AWS Cloud.
https://aws.amazon.com/solutions/ (15)

7. © 2019, Amazon Web Services, Inc. or its Affiliates.
Common Use Cases and Scenarios : Non-AWS
Environment
Migration. Relocate or rehost of on-premises workloads to AWS.
Database migration to AWS. Migrate RDBMS and noSQL databases to Amazon EC2, Redshift, Aurora, RDS, or another
managed databases.
Remote Workers - Re-platform on-premises AI solutions to AWS, or modernize existing AWS AI/ML solutions to AWS cloud
native solutions.
ERP – Oracle and SAP business applications on AWS.

8. © 2019, Amazon Web Services, Inc. or its Affiliates.
Common Use Cases and Scenarios : AWS
Environment
Cost Optimization. AWS solution to reduce cost through AWS purchasing options, instance types, spot, elasticity, etc.
Platform Optimization. AWS Well-architected review to determine optimizations in the areas of cost, operations,
security, performance, and reliability - including elasticity.

9. © 2019, Amazon Web Services, Inc. or its Affiliates.
‘Cloud in a Box’ Solutions

10. © 2019, Amazon Web Services, Inc. or its Affiliates.
AWS Landing Zone - Migration

11. © 2019, Amazon Web Services, Inc. or its Affiliates.
Multi-Account Structure
• The AWS Landing Zone solution deploys an
AWS AccountVending Machine (AVM)
product for provisioning and automatically
configuring new accounts.
• The AVM leverages AWS Single Sign-
On (SSO) for managing user account access.
• This environment is customizable to allow
customers to implement their own account
baselines through a Landing Zone
configuration and update pipeline.

12. © 2019, Amazon Web Services, Inc. or its Affiliates.
Account Vending machine
• The AccountVending Machine (AVM) is an
AWS Landing Zone key component.
• The AVM is provided as an AWS Service
Catalog product, which allows customers to
create new AWS accounts in Organizational
Units (OUs) preconfigured with an account
security baseline, and a predefined network.

13. © 2019, Amazon Web Services, Inc. or its Affiliates.
User Access
• Providing least-privilege, individual user
access to your AWS accounts is an essential,
foundational component to AWS account
management.
• The AWS Landing Zone solution provides
customers two options to store their users
and groups.

14. © 2019, Amazon Web Services, Inc. or its Affiliates.
Notifications
• The AWS Landing Zone solution configures Amazon
CloudWatch alarms and events to send a notification
on root account login, console sign-in failures, API
authentication failures, and the following changes
within an account:
• security groups, network ACLs, AmazonVPC
gateways, peering connections, ClassicLink, Amazon
Elastic Compute Cloud (Amazon EC2) instance state,
large Amazon EC2 instance state, AWS CloudTrail,
AWS Identity and Access Management (IAM) policies,
and AWS Config rule compliance status.

15. © 2019, Amazon Web Services, Inc. or its Affiliates.
Security

16. © 2019, Amazon Web Services, Inc. or its Affiliates.
CIS Benchmark on AWS
Standardized architecture for the
Center for Internet Security (CIS)
AWS Foundations Benchmark.
Deploys the following AWS services
• AWS Config rules
• CloudWatch alarms
• CloudWatch Events
• Lambda functions
• AWS CloudTrail
• AWS Config
https://aws.amazon.com/quickstart/architecture/compliance-cis-benchmark/

17. © 2019, Amazon Web Services, Inc. or its Affiliates.
Standardized Architecture for NIST on AWS
https://aws.amazon.com/quickstart/architecture/compliance-nist/
Build a cloud architecture that
supports NIST-based assurance
frameworks on AWS. steps, in
about 30 minutes.
Deploys the following AWS services
• AWS IAM
• AmazonVPC
• Amazon S3
• CloudWatch alarms, CloudWatch
Events , AWS CloudTrail, AWS Config
• Auto Scaling, Elastic Load Balancing

18. © 2019, Amazon Web Services, Inc. or its Affiliates.
Identity and Access Management
Active Directory Domain Services on AWS

19. © 2019, Amazon Web Services, Inc. or its Affiliates.
Deploying a new AWS Cloud-based AD DS environment that you manage yourself

20. © 2019, Amazon Web Services, Inc. or its Affiliates.
Extending your existing on-premises AD DS to the AWS Cloud

21. © 2019, Amazon Web Services, Inc. or its Affiliates.
Deploying AD DS with AWS Directory Service

22. © 2019, Amazon Web Services, Inc. or its Affiliates.
Database, ERP and Workspaces

23. © 2019, Amazon Web Services, Inc. or its Affiliates.
Database (Database migration) – Oracle

24. © 2019, Amazon Web Services, Inc. or its Affiliates.
Database (Database migration) – SQL

25. © 2019, Amazon Web Services, Inc. or its Affiliates.
Database (Database migration) – SAP

26. © 2019, Amazon Web Services, Inc. or its Affiliates.
Remote Workers – (Workspaces)

27. © 2019, Amazon Web Services, Inc. or its Affiliates.
Cost Optimization

28. © 2019, Amazon Web Services, Inc. or its Affiliates.

29. © 2019, Amazon Web Services, Inc. or its Affiliates.
Real-Time Insights on AWS Account Activity

30. © 2019, Amazon Web Services, Inc. or its Affiliates.
Real-Time Insights on AWS Account Activity

31. © 2019, Amazon Web Services, Inc. or its Affiliates.
AWS Skills Required

32. © 2019, Amazon Web Services, Inc. or its Affiliates.
AWS Certifications

33. © 2019, Amazon Web Services, Inc. or its Affiliates.
Let’s Go
Architecting on AWS
Recommend taking Architecting on AWS training as one of your first training sessions
because it enforces learning of the bigger picture.
AWS CloudFormation
We suggest becoming familiar with the AWS CloudFormation documentation.
Deploy your first Quick Starts or Solution
AWS Quick Starts
AWS Solutions Constructs patterns

34. © 2019, Amazon Web Services, Inc. or its Affiliates.
AWS Enablement – Self Service Programs and Services
AWS Architecture Center - AWS Solutions,Whitepapers & Guides, and
ReferenceArchitecture Diagrams
AWS Quickstarts – AWS CloudFormation templates that automate
deployments, provide a guide that discusses the architecture, and step-by-step
deployment instructions
AWS Marketplace - Digital catalog with thousands of software listings from
independent software vendors that make it easy to find, test, buy, and
deploy software that runs on AWS
AWS Prescriptive Guidance - AWS PrescriptiveGuidance provides time-tested
strategies, guides, and patterns from AmazonWeb Services (AWS) andAWS
Partner Network (APN) Partners to help accelerate your cloud migration,
modernization, or optimization projects

35. © 2019, Amazon Web Services, Inc. or its Affiliates.
Case Study

36. © 2019, Amazon Web Services, Inc. or its Affiliates.
How Hess used AWS for its largest divestiture
Cost Savings: Decouple dependence on Hess’s IT systems,
so Hess does not continue to bear operating costs of the
sold business
• Completely decoupled IT assets before the sale
• Minimized capital expenditures
• AWS cost structure enabled them to buy only what
was necessary
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

37. © 2019, Amazon Web Services, Inc. or its Affiliates.
How Hess used AWS for its largest divestiture
Agility: Reduce the lead time needed to design, develop,
implement and test complex IT environments for separation
“We had an obligation to deliver a functioning, operational infrastructure to the buyer. We also had an
obligation to Hess to make sure that infrastructure could be handed off in short order, both legally and
physically. Using the cloud enabled us to meet all of these requirements, and we are thrilled with the
results.” Jim McDonald, Lead Architect
• Moved 300 servers and 500TB of data to AWS
• Completed AWS migration in 6 months
• 50% faster than with physical servers
• Supported by the AWS Partner Network (APN)
• Separated systems prior to closing the deal
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

38. © 2019, Amazon Web Services, Inc. or its Affiliates.
Next Steps

39. © 2019, Amazon Web Services, Inc. or its Affiliates.
Let’s Go
Build Foundation Knowledge
AWS certification or practical experience, CloudFormation, AWS Marketplace, Deploy
a QuickStart.
Build it in the real world
Engage AWS in an opportunity.
GameDay
An interactive team-based learning exercise designed to give players (those that
executed a carve out) a chance to validate the AWS Cloud in Box solutions. It allows
West Monroe to the test the AWS cloud in a box solution in a real-world, gamified,
risk-free environment. West Monroe can bring 2-3 previous or existing carve out
scenarios to the GameDay.

40. © 2019, Amazon Web Services, Inc. or its Affiliates.
For more details on the AWSTDD for M&A assets and engagement support, contact
the following:
Tara Jones
Value Creation Practice, Global Business Lead
tarajon@amazon.com
Tom Laszewski
Value Creation Practice, GlobalTechnical Lead
tomlasz@amazon.com
Sven Koppany
Value Creation Practice, Solutions Architect
@amazon.com

41. © 2019, Amazon Web Services, Inc. or its Affiliates.
Thank you!