1. AWS (CDP)

2. 22 1976 MBA MSE( ) . AWS 2010 AWS AWS .Ken Tamagawa Head of Solutions Architects, Professional Services and Training Amazon Data Services Japan 3. 3 What is AWS? 4. , , IT 5. : Amazon EC2 AWS (Amazon EC2) Windows ( ) CentOS (CPU) Oracle DB(Linux) (Memory) 6. EC2 4/12/2008 Facebook ( 5000) 4/14/2008 4/16/2008 4/18/2008 4/20/2008 EC2 Web 7. EC2 EC2 300 4/24/2009 4/26/2009 4/28/2009 4/22/2009 3,000 8. Region EU 9 =AWS 9. More than 20,000 Customers in Japan 10. Region EU 11 =AWS China 11. AvailabilityZone 12 = 12. API ec2-run-instances ami-b232d0db --instance-count 3 --availability-zone ap-northeast-1a --instance-type m1.small ec2-run-instances ami-b232d0db --instance-count 3 --availability-zone ap-northeast-1b --instance-type m1.small 13 13. . 14. AWS API AWS REST API /SDK/IDE Java Python PHP .NET Ruby nodeJS iOS Android AWS Toolkit for Visual Studio AWS Toolkit for Eclipse Tools for Windows PowerShell Command Line Tools/ CLI (CL Interfaces) 15. AWS AWS & SDKs Java, PHP, .NET, Python, Ruby Web Management Console IDE Eclipse Visual Studio AWS Elastic Beanstalk AWS CloudFormation & AWS IAM Identity Federation Consolidated Billing Amazon CloudWatch Auto Scale & Amazon VPC Amazon Elastic LB Amazon Route 53 AWS Direct Connect Amazon CloudFront Amazon SNS Amazon SQS Elastic MapReduce Amazon SES Amazon EC2 Amazon S3 / Glacier Amazon EBS Amazon Storage Gateway Amazon RDS Amazon RedShift Amazon DynamoDB Amazon Elasticache 16. Amazon S3 3 S3 : 99.999999999% 8 A , , . B C (, , , ) 1GB/ 10 17. 5000 Amazon S3 S3, 99.999999999% 18. 19 Oracle Secure Backup S3 19. Amazon Kinesis 20. 21. Serendipity 22. 23 Mission Critical Systems on AWS Cloud in Enterprise Companies 23. Partner Ecosystem in Japan SIConsulting PartnerISVTechnology Partner http://aws.amazon.com/jp/solutions/solution-providers-japan/ 24. In near Future 25 CloudOn-premise 25. Cloud First in Japan DB Direct Connect APP APP Web APP APP APP APP APP SFA/WF BI DB DB DB DB Cloud Intranet New Application in Cloud/ Move existing systems later 26. 27. AWS , . v , EIP . EBS ? vEC2 ELB , Multi-AZ . Multi-Region LBR? vEC2 NFS , rsync ? 28. 29. AWS . . ( ) 30. AWS ( :CDP) 31. AWS vAWS , . 32. FloatingIP 1. 2. IP 33. : Job Observer Floa>ngACAdaptor 34. Server Swapping 35. : Job Observer 4. 2. . 3. Get PUT 36. CDP Snapshot Stamp ScaleUp OndemandDisk Mul>-Server Mul>-Datacenter Floa>ngIP DeepHealthCheck ScaleOut CloneServer NFSSharding NFSReplica StateSharing URLRewri>ng RewriteProxy CacheProxy ScheduledScaleOut WebStorage DirectHos>ng PrivateDistribu>on CacheDistribu>on RenameDistribu>on WriteProxy StorageIndex DirectObjectUpload DBReplica>on ReadReplica InmemoryDBCache ShardingWrite QueuingChain PriorityQueue JobObserver ScheduledAutoscaling ,Bootstrap CloudDI StackDeployment ServerSwapping MonitoringIntegra>on WebStorageArchive HybridBackup OnDemandNAT Backnet Func>onalFirewall Opera>onalFirewall Mul>LoadBalancer WAFProxy CloudHub 37. v v v v v v 38. Wiki JapaneseEnglish 39. CDP ! 40. CDP 41. NinjaofThree CDP ? 42. Ninja of Three 43. AWS 44. Tokyo Sapporo Fukuoka Sendai Nagoya Osaka Kanazawa KyotoYamaguchi Saga Japan AWS User Group -> JAWS Miyazaki Kagoshima Okinawa Kumamoto 45. v, v vE v, v v v 46. AWS - - 47. v v 48. v v v v AWS 49. , vAmazon Linux (64bit) vMovable Type 5.12 (MTOS) vApache HTTP Server 2.2.21 vMySQL 5.1.52 vPerl 5.10.1 50. Blog site 51. v v , . 52. Web Storage 53. v v 54. Direct Hosting 55. v v 56. Cache Distribution AmazonCloudFront 57. (blog) (movie) (writeblog) 58. 59. AWS -E - 60. v 61. vE v v v AWS 62. , vEC-CUBE 2.11.4 vAmazon Linux (64bit) vPHP PHP 5.3.8 vDB MySQL 5.1.52 63. EC-CUBE Apache MySQL EC2 64. v 65. Floating IP EC2 Test EIP EC2 EIP Amazon Route 53 ec.clouddesignpattern.org EC2 AMI AMI EC2 EIP46.51.xxx.xxx 66. v , . 67. Server Swapping 68. vWeb , . 69. Multi-Server EC2 EC2 MySQL DB 70. RDS 73 71. Multi-Server EC2 EC2 MySQL DB 72. 73. EC-CUBE,SSL . ELB , ELB SSL . 74. ELB EC2 AMI EC2 ELB 75. Multi-Server EC2 EC2 MySQL DB ? 76. vDB SPOF vDB Replication , DB 77. Multi-AZ 78. DB Replication Zone 1a EC2 EC2 Zone 1b MySQL DB MySQL DB 79. v , . v Multi-Datacenter , . 80. Multi-Datacenter EC2 EC2 Zone 1a Zone 1b MySQL DB MySQL DB 81. SPOF 82. AWS - - 83. vEC v 84. , vAmazon Linux (32bit) vApache HTTP Server 2.2.21 vMySQL 5.1.52 vPHP 5.3.8 vWordPress 3.3.1 85. v vEC21 86. v . 87. Clone Server v AMI EC2 EC2 EC2 EC2 (rsync) AMI 88. v . 89. NFS Sharing 90. v NFS ... 91. NFS Replica 1. 2.NFS 3. 92. v 93. URL Rewriting vS3 vmod_ext_lter URL S3cmd mod_ext_lter HTML URL S3 URL 94. v, v vE v, v v v v v ... 95. 96. Ondemand disk High Availability NAT Synchronized Disk DB Replication Multi-Server Multi-Datacenter Self Healing 97. Self Healing , Cloud DI AutoScalingmin 1,max 1 FailAMI EBS ELB 98. Synchronized Disk Fail Over . EC2 , EBS . , . DRBD CLUSTERPRO DataKeeper 99. Ondemand Disk , EBS , Provisioned IOPS IO, IO 100. High Availability NAT SPOF NAT . NAT 2 , source/ dest NAT , 101. 102. High Availability Forward Proxy ELBProxy+AutoScaling Squid, ExaProxy Proxy PROXY /OS Proxy Proxy . ELBProxy 103. On-premise Load Balancing , . LB , . IP WAF/IDS IP , LB . 104. Floating VPN Gateway , . , VPN . 105. (PCI-DSS) 106. Coiney 107. CDP . https://www.pcisecuritystandards.org/pdfs/ PCI_DSS_v2_Cloud_Guidelines.pdf PCI DSS Cloud Computing Guideline AWS PCI Compliance Package (NDA) http://aws.amazon.com/jp/compliance/ 108. PCI 109. PCI-DSS AWS as of 2014/03/14 Amazon DynamoDB / Amazon SimpleDB Amazon Elastic Block Storage (Amazon EBS) Amazon Elastic Compute Cloud (Amason EC2) Amazon Elastic Map Reduce (Amazon EMR) Amazon Glacier Amazon Redshift Amazon Relational Database Service (Amazon RDS) Amazon Simple Storage Service (Amazon S3) Amazon Virtual Private Cloud (Amason VPC) AWS CloudHSM AWS Direct Connect AWs Identity and Access Management (IAM) Elastic Load Balancing (ELB) AWSS AWS PCI , AWSS Region . 110. Chained Defense-in-Depth VPN Web Web App App NAT Web Web App App NAT VPN 111. Chained Defense-in-Depth VPN Web Web App App NAT Web Web App App NAT VPN WebTierAppTierDBTierPublicFacing VPN NFW IPS/ IDS WAF AV VPN NFW IPS/ IDS WAF AV VPN NFW IPS/ IDS WAF AV 112. ELB End-to-End Encryption ELB SSL termination SSL ELB Web Web Web Web WebTier Backend-SSL SSL termination Backend SSL 113. High Availability Forward Proxy ELBProxy+AutoScaling Squid, ExaProxy Proxy PROXY /OS Proxy Proxy . 114. Log Aggregation S3 Glacier 115. Encrypted Log Aggregation S3 Glacier 116. OnDemand Bastion Bastion OnDemand Bastion Bastion Good 117. High Availability IAM AZ Role , , . http://blogs.aws.amazon.com/security/post/TxQ0OYRWOOK9L3/High-Availability- IAM-Design-Patterns 118. : Storage/Data Security EC2 EBS S3 Glacier Encryption Client Key Management File Encryption Full Disk Encryption Database Encryption AWS Server Side Encryption Key Management File Encryption Full Disk Encryption Database Encryption AWS Server Side Encryption File Encryption Full Disk Encryption Database Encryption AWS Server Side Encryption S3 Glacier On premise Encryption Client EC2 On premise 119. 120. (Design ForFailure) (DesignForFailure) 121. Serendipity 122. In near Future 126 CloudOn-premise 123. vCDP AWS 124. . @KenTamagawa 125. Todays slides: