Embed Size (px)
Citation preview
© 2021, Amazon Web Services, Inc. or its Affiliates.
David Schwendemann - Manager Solutions [email protected]. Oktober 2021
Cloud und SecurityBE-terna Day Infor M3
© 2021, Amazon Web Services, Inc. or its Affiliates.
Haben sie bestehende Workloads in der Cloud?
© 2021, Amazon Web Services, Inc. or its Affiliates.
AWS - in Österreich
2004: Kernkompetenz von Amazon flexible IT Bereitstellung für interne Projekte2006: flexible Rechenkapazität (Amazon EC2) und Datenspeicher (Amazon S3) als erste Services für externe Kunden verfügbar
90% der entwickelten Funktionendirekt aus der Kenntnis der Bedürfnisse unserer Kunden
AWS in Wien seit Februar 2020
Lokale Teams für lokale Kunden• Account Manager• Solution Architekten• Professional Services
© 2021, Amazon Web Services, Inc. or its Affiliates.
“Cloud Computing ist die On-Demand-Bereitstellung von IT-Ressourcen über das Internet mit nutzungsabhängigen Preisen”
© 2021, Amazon Web Services, Inc. or its Affiliates.
CustomerAWS
AWS ist für dieSicherheit der Cloud
verantwortlich
Der Kunde ist für dieSicherheit in der Cloud
verantwortlich
Customer data
Platform, applications, identity, & access management
Operating system, network, & firewall configuration
Client-side data encryption & data integrity authentication
Server-side encryption(file system &/or data)
Network traffic protection(encryption/integrity/identity)
Compute Storage Database Networking
Edgelocations
Regions
Availability Zones
AWS Global Infrastructure
Modell der geteilten Verantwortung
© 2021, Amazon Web Services, Inc. or its Affiliates.
Infrastructure as a Service (IaaS)
Zugriff auf Netzwerkfunktionen, Computer (virtuelle oder dedizierteHardware) und Datenspeicher.
Höchste Flexibilität
Ähnlich vorhandenen IT-RessourcenCORE SERVICES
Integrated Networking
Rules Engine
Device Shadows
Device SDKs
Device Gateway
Registry
Local Compute
Custom ModelTraining & Hosting
Conversational Chatbots
Virtual Desktops
App Streaming
Schema Conversion
Image & Scene Recognition
Sharing & Collaboration
Exabyte-ScaleData Migration
Text to Speech
Corporate Email Application Migration
Database Migration
Regions
Availability Zones
Points of Presence
Data Warehousing
Business Intelligence
Elasticsearch
Hadoop/Spark
Data Pipelines
Streaming Data Collection
ETLStreaming Data Analysis
Interactive SQL Queries
Queuing & Notifications
Workflow
Transcoding
Deep Learning(Apache MXNet, TensorFlow, & others)
Server MigrationCommunications
MARKETPLACE
Business Apps Business Intelligence DevOps Tools Security Networking StorageDatabases
API Gateway
Single Integrated Console
Identity
Sync
Mobile Analytics
Mobile App Testing
Targeted Push Notifications
One-click App Deployment
DevOps Resource Management
Application Lifecycle Management
Containers
Triggers
Resource Templates
Build & Test
Analyze & Debug
Identity Management
Key Management & Storage
Monitoring & Logs
Configuration Compliance
Web Application Firewall
Assessment& Reporting
Resource & Usage Auditing
Access Control
Account Grouping
DDOSProtection
TECHNICAL & BUSINESS SUPPORT
SupportProfessionalServices
Optimization Guidance
PartnerEcosystem
Training & Certification Solutions Management Account Management Security & Billing
ReportsPersonalized Dashboard
Monitoring
Manage Resources
Data Integration
Integrated Identity & Access
Integrated Resource & Deployment Management
Integrated Devices& Edge Systems
Resource Templates
Configuration Tracking
Server Management
Service Catalogue
Search
MIGRATIONHYBRID ARCHITECTUREENTERPRISE APPSMACHINE LEARNINGIoTMOBILE SERVICESDEV OPSANALYTICS
APP SERVICES
INFRASTRUCTURE SECURITY & COMPLIANCE MANAGEMENT TOOLSComputeVMs, Auto-scaling, Load Balancing, Containers, Virtual Private Servers, Batch Computing, Cloud Functions, Elastic GPUs, Edge Computing
StorageObject, Blocks, File, Archivals, Import/Export, Exabyte-scale data transfer
CDN
DatabasesRelational, NoSQL, Caching, Migration, PostgreSQL compatible
NetworkingVPC, DX, DNS
Facial Recognition & Analysis
Facial Search
Patching
Contact Center
© 2021, Amazon Web Services, Inc. or its Affiliates.
Platform as a Service (PaaS)
Beispiel Architektur:Infor - Governance, Risk, and ComplianceMillionen Compliance Ereignisse pro Kunde pro Tag
Entfallene Aufgaben• Ressourcenbeschaffung• Kapazitätsplanung• Softwarewartung• Patching
“I don’t want them worried about infrastructure. Just write the application”Charles Phillips, ex-CEO Infor (Inforum 2017)
© 2021, Amazon Web Services, Inc. or its Affiliates.
Software as a Service (SaaS) - Infor CloudSuite
Verschlüsselung in hoher Skalierung
mit Schlüsseln verwaltet vonAWS Key Management Service
oder selbst verwaltetenSchlüsseln mit AWS CloudHSM
durch FIPS 140-2 Level 3 validierte HSMs
Anforderungen an den Datenstandort
AWS repliziert Daten nichtaus ausgewählter AWS Region, ausser Nutzerentscheidet sich dazu
Zugriff auf Services und Werkzeuge die ermöglichenstandardkonforme Infra
strukturauf AWS zu bauen
Beachtung von lokalenDatenschutzgesetzendurch Kontrollen wer auf Inhalte zugreifen kann, den Lebenszyklus und
Datenvernichtung
höchste Standards für Datenschutz und Datensicherheit
© 2021, Amazon Web Services, Inc. or its Affiliates.
© 2021, Amazon Web Services, Inc. or its Affiliates.
“Friends don’t let friends build data centers.” Charles Phillips, ex-CEO Infor (2014 AWS Summit)
Source: https://aws.amazon.com/blogs/apn/friends-dont-let-friends-build-data-centers/
