AWS 2017 re:Invent re:Cap - TriNimbus Presentation Slides
2 likes480 views
The document discusses a wide range of AWS services and features, including advancements in Amazon EC2, AWS Lambda, EKS, and new storage options such as DynamoDB and Aurora. It highlights tools for developers, serverless application management, security enhancements, and capabilities for IoT and machine learning. Additionally, it covers updates to application deployment processes and offers insights into networking and data management features.
AWS 2017 re:Invent re:Cap - TriNimbus Presentation Slides
- 1. With Jarrod Levitan, Mency Woo & Dave Lindon re:Invent re:Cap
- 5. ● AWS Fargate ● Amazon EKS ● Amazon EC2 M5 Instances ● Amazon EC2 H1 Instances ● Amazon EC2 Bare Metal Instances ● Amazon EC2 T2 Unlimited ● Hibernation for Spot Instances ● Amazon Lightsail Load Balancer ● New Spot Pricing model and Spot on RunInstances ● AWS Serverless Application Repository ● AWS Lambda Per Function Concurrency/Throttle ● Migrate Hyper-V VMs to AWS with AWS Server Migration Service ● AWS Lambda Introduces Enhanced Console Experience ● Amazon Time Sync Service ● Array Jobs for AWS Batch COMPUTE
- 6. ● Run Kubernetes applications on AWS with ease ● EKS automatically distributes K8 masters across multiple AZs to eliminate a single point of failure ● Automatically detects and replaces unhealthy masters ● Automatically patches and performs version upgrades for masters EKS (preview)
- 7. ● Run containers easily without managing servers or clusters ● Launch tens or tens of thousands of containers in seconds ● Seamlessly integrates with Amazon ECS FARGATE
- 8. ● Deploy applications that use physical hardware resources directly on AWS infrastructure ● Ideal for workloads that require access to hardware feature sets ● Ideal for applications that need to run in non-virtualized environments EC2 BARE METAL (preview)
- 9. ● Latest generation of Amazon EC2’s Storage Optimized instances ● Designed for applications that need low cost storage, high disk throughput, and high sequential disk I/O access to large data sets ● Ideal for data-intensive workloads, distributed file systems, network file systems, log or data processing applications, and big data workload clusters H1, M5 INSTANCES ● Next generation of the Amazon EC2 General Purpose compute instances ● Designed to provide a balance of compute, memory, storage and network resources ● Ideal for workloads such as web and application servers, backend servers for enterprise applications, gaming servers, caching fleets, as well as for application development environments.
- 10. ● With T2 Unlimited, workloads can now burst beyond the baseline for as long as required. ● Workloads on T2 instances include micro-services, low-latency interactive applications, small and medium databases, virtual desktops, development, build and stage environments, code repositories, and product prototypes T2 UNLIMITED
- 11. ● Provides a highly accurate and reliable time reference that is natively accessible from EC2 instances ● Highly available with a continuously monitored time infrastructure and provides a low variance reference time source ● Automatically smooths out (smears) leap seconds that are periodically added to UTC, so that customers do not have to worry about application errors due to their addition AMAZON TIME SYNC SERVICE
- 12. SPREAD PLACEMENT GROUPS A spread placement group is a group of instances that are each placed on distinct underlying hardware. Launching instances in a spread placement group reduces the risk of simultaneous failures that might occur when instances share the same underlying hardware. Spread placement groups provide access to distinct hardware, and are therefore suitable for mixing instance types or launching instances over time. A spread placement group can span multiple Availability Zones, and you can have a maximum of seven running instances per Availability Zone per group. If you start or launch an instance in a spread placement group and there is insufficient unique hardware to fulfill the request, the request fails. Amazon EC2 makes more distinct hardware available over time, so you can try your request again later.
- 13. LAUNCH TEMPLATES ● Enables a new way to templatize your launch requests ● Streamline and simplify the launch process for Auto Scaling, Spot Fleet, Spot, and On-Demand instances ● Launch Templates reduce the number of steps required to create an instance by capturing all launch parameters within one resource
- 14. NEW SPOT PRICING MODEL AND SPOT ON RUNINSTANCES ● New model delivers low, predictable prices that adjust gradually, based on long-term trends in supply and demand ● Launch Spot instances via the RunInstances function, run-instances command or AWS management console by simply indicating you want to use Spot
- 15. ● Distribute traffic across attached target instances with automated health checks to ensure traffic is sent only to healthy instances ● Create highly available architectures and increase the uptime of applications and websites, by distributing traffic across instances ● Lightsail provides SSL/TLS certificates for free with use of a load balancer, along with integrated certificate management plus automatically renews certificates on customer's behalf before expiry LIGHTSAIL LOAD BALANCER + CERTIFICATE MANAGEMENT
- 16. ● A collection of serverless applications published by developers, companies, and partners in the serverless community ● Deploy code samples and components for building web and mobile applications and back-end processing services and complete applications ● Each application is packaged with an AWS Serverless Application Model (AWS SAM) template that defines the AWS resources used AWS SERVERLESS APPLICATION REPOSITORY (preview)
- 17. LAMBDA CHANGES
- 18. GOLANG SUPPORT You can now write your Lambda functions in Go
- 19. CLOUDTRAIL EXECUTION LOGGING You can now log the execution activity of your AWS Lambda functions with AWS CloudTrail Lambda data events. Previously, you could only log Lambda management events, which provide information on when and by whom a function was created, modified, or deleted. Now, you can also record Lambda data events and get additional details on when and by whom an Invoke API call was made and which Lambda function was executed. All Lambda data events are delivered to an Amazon S3 bucket and Amazon CloudWatch Events, which allows you to respond to events recorded by CloudTrail. For example, you can quickly determine which Lambda functions were executed in the past three days and identify the source of the Invoke API calls. You can take immediate action to restrict Invoke API calls to known users or roles if you detect inappropriate Lambda activity. You can turn on logging for AWS Lambda data events using the AWS CloudTrail console, AWS CLI, and SDKs. You can view and select which Lambda functions get logged by creating a new trail or editing an existing trail.
- 20. LAMBDA NEW DEPLOYMENT OPTIONS ● New feature: traffic shifting ○ Specific weights & increments ○ Specific intervals ○ Error / Rollback conditions ● AWS CodeDeploy now supports Serverless ○ supports deployment to Lambda for both all in and traffic shifting options ○ integrated into SAM
- 21. ● Amazon GuardDuty ● Managed Rules for WAF ● Advanced Security Features for Amazon Cognito SECURITY, IDENTITY & COMPLIANCE
- 22. MANAGED RULES FOR AWS WAF ● Enable you to easily protect your web applications and APIs from Internet threats. ● Choose from preconfigured RuleGroups provided in the AWS Marketplace by experts like Alert Logic, Fortinet, Imperva, Trend Micro and TrustWave ● Rules are automatically updated as new threats emerge and offer a wide range of protections
- 23. AMAZON GUARD DUTY ● A threat detection service that provides an accurate and easy way to continuously monitor and protect your AWS accounts and the applications and services running within them ● Get intelligent threat detection and actionable detections without the heavy lifting of additional security software or infrastructure to deploy and maintain
- 24. ● Amazon Neptune ● Amazon DynamoDB on-Demand Backup ● Amazon DynamoDB Global Tables ● Amazon Aurora Multi-Master ● Amazon Aurora Serverless DATABASES
- 25. AMAZON NEPTUNE ● A fast, reliable, fully-managed graph database service ● Makes it easy to build and run applications that work with highly connected datasets ● Optimized for storing billions of relationships and querying the graph with milliseconds latency
- 26. AURORA SERVERLESS (preview) ● On-demand auto-scaling configuration ● Database will automatically start up, shutdown and scale capacity based on application's needs ● Enables to run relational database in the cloud without managing any database instances or clusters ● Built for applications with infrequent, intermittent or unpredictable workloads
- 27. MULTI-MASTER AURORA AURORA MULTI-MASTER ● Creates multiple read/write master instances across multiple Availability Zones ● Enables applications to read and write data to multiple database instances in a cluster ● Multi-Master clusters improve Aurora's already high availability
- 29. DYNAMODB GLOBAL TABLES ● Fully managed, multi-region, and multi-master database that provides fast, local, read and write performance for massively scaled, global applications ● Eliminates the difficult work of replicating data between regions and resolving update conflicts ● Enables applications to stay highly available even in the unlikely event of isolation or degradation of an entire region
- 30. DYNAMODB BACKUP/RESTORE ● Create full backups of your DynamoDB tables data for data archival ● Backup tables from a few megabytes to hundreds of terabytes of data ● Processes back up requests in seconds regardless of the size of your tables
- 31. AMAZON MQ ● Manages the administration and maintenance of ActiveMQ, a popular open-source message broker ● Designed to withstand failures so your messages are highly available
- 32. ● Amazon S3 Select ● Amazon Glacier Select STORAGE ANALYTICS
- 33. S3 SELECT (Preview) ● A new S3 capability designed to pull out only the data you need from an object ● Enables applications to offload the heavy lifting of filtering and accessing data inside objects to the S3 service ● Improve the performance of most applications that frequently access data from S3 by up to 400%
- 34. GLACIER SELECT ● New way to query archived data in Amazon Glacier ● Allows queries to run directly on data stored in Amazon Glacier, retrieving only the data you need out of your archives to use for analytics ● Reduces total cost of ownership while massively extending your data lake into cost-effective archive storage
- 35. ● AWS PrivateLink for Customer and Partner Services ● Inter-Region VPC Peering ● API Gateway Private VPC Integrations ● API Gateway Canary Deployments NETWORKING AND CONTENT DELIVERY
- 36. INTER-REGION VPC PEERING ● Allows VPC resources like EC2 instances, RDS databases and Lambda functions running in different regions to communicate using private IP addresses, without requiring gateways, VPN connections or separate network appliances ● Provides a simple and cost-effective way to share resources between regions or replicate data for geographic redundancy
- 37. AWS PRIVATELINK ● Allows customers to privately access select AWS services from their VPC and from on-premises via Direct Connect ● Make services available to other accounts and VPC networks that are accessed securely as private endpoints
- 38. API GATEWAY CANARY DEPLOYMENTS ● Canary deployments are a way to gradually roll out new APIs in Amazon API Gateway ● Helps you more safely roll out API changes and limit the blast radius of new deployments ● Using the new stage-level settings for canaries, set the percentage of API requests that is handled by new API deployments to a stage
- 39. ● AWS Cloud9 ● AWS AppSync DEVELOPER TOOLS | MOBILE SERVICES
- 40. AWS CLOUD9 IDE ● Provides a seamless experience for developing serverless applications ● Quickly share your development environment with your team, allowing you to pair program and track each others’ inputs in real-time.
- 41. AWS APPSYNC ● Manage and update mobile app data in real-time between devices and the cloud ● Allows apps to interact with the data on the mobile device when it is offline
- 42. ● AWS IoT 1-Click ● AWS IoT Device Management ● AWS IoT Analytics ● AWS IoT Device Defender IoT ● Amazon FreeRTOS ● AWS GreenGrass ● AWS GreenGrass ML Interface ● AWS IoT Core
- 43. AWS IoT DEVICE MANAGEMENT ● Securely onboard, organize, monitor, and remotely manage IoT devices at scale throughout their lifecycle ● Provision your devices in bulk to register device information such as metadata, identity, and policies
- 44. AWS IoT DEVICE DEFENDER (H1 2018) ● A fully managed service that allows you to secure your fleet of IoT devices on an ongoing basis ● Audits your fleet to ensure it adheres to security best practices ● Detects abnormal device behavior, alerts you to security issues, and recommends mitigation actions
- 45. AWS IoT ANALYTICS (preview) ● A fully-managed IoT analytics service that collects, processes, enriches, stores, and analyzes IoT device data at scale ● It is the easiest way to run analytics on IoT data and get insights that help make better and more accurate decisions for IoT applications and machine learning use cases.
- 46. IoT CORE ENHANCED AUTH ● Using the custom authentication feature, customers can utilize bearer token authentication strategies, such as OAuth, to connect to AWS without using a X.509 certificate on their devices
- 47. AMAZON FreeRTOS ● An IoT operating system for microcontrollers that makes small, low-power edge devices easy to program, deploy, secure, connect, and maintain ● Provides the core operating system as well as software libraries that make it easy to program connected microcontroller-based devices and collect data from them for IoT applications
- 48. GREENGRASS MACHINE LEARNING INFERENCE ● Deploy and run ML inference locally on connected devices ● With AWS Greengrass ML Inference, your AWS Greengrass devices can make smart decisions quickly as data is being generated, even when they are disconnected
- 49. ● AWS Deep Lens ● Amazon Rekognition Video ● Amazon Kinesis Video Streaming ● Amazon SageMaker MACHINE LEARNING ● Amazon Translate ● Amazon Comprehend ● Amazon Transcribe
- 50. REKOGNITION VIDEO ● Accurately detect, track, recognize, extract, and moderate thousands of objects, faces, and content from a video ● It is the first video analysis service of its kind that uses the complete context of visual, temporal, and motion of the video to perform activity detection and person tracking ● Derives more complete insights about what activities are being performed in the video
- 51. AWS DEEP LENS ● A deep learning enabled wireless video camera specifically designed to help developers of all skill levels grow their machine learning skills through hands-on computer vision tutorials, example code, and pre-built models ● DeepLens includes an HD video camera with on-board compute optimized for deep learning, which is fully programmable using AWS Lambda
- 52. AMAZON KINESIS VIDEO STREAMS ● A fully managed video ingestion and storage service ● Securely stream video from connected devices to AWS for machine learning, Analytics, & processing ● Automatically provisions and elastically scales all the infrastructure needed to ingest video streams from millions of devices
- 53. ● A fully-managed service that enables data scientists and developers to quickly and easily build, train, and deploy machine learning models at any scale ● Includes modules that can be used together or independently to build, train, and deploy your machine learning models SAGEMAKER
- 54. AMAZON COMPREHEND Amazon Comprehend analyzes text and tells you what it finds, starting with the language, from Afrikaans to Yoruba, with 98 more in between. It can identify different types of entities (people, places, brands, products, and so forth), key phrases, sentiment (positive, negative, mixed, or neutral), and extract key phrases, all from text in English or Spanish. Finally, Comprehend provides a topic modeling service which is able to extract topics from large sets of documents for analysis or topic-based grouping.
- 55. AMAZON TRANSCRIBE ● An automatic speech recognition (ASR) service that makes it easy for developers to add speech to text capabilities to their applications. ● Can analyze audio files stored in Amazon S3 and return a text file of the transcribed speech with time stamps for every word so you can easily locate the audio in the original source by searching for the text.
- 56. AMAZON TRANSLATE A high-quality neural machine translation service that uses advanced machine learning technologies to provide fast language translation of text-based content and enable the development of applications that provide multilingual user experiences.
- 57. ● Alexa for Business ● AWS Systems Manager BUSINESS PRODUCTIVITY | MANAGEMENT TOOLS|
- 58. ALEXA FOR BUSINESS ● Alexa for Business provides you the tools and controls you need to use Alexa in your organization ● Provision and manage shared Alexa devices from a centralized console, specify device locations, and enable a set of skills that can be accessed from those devices ● Alexa for Business conferencing API allows you to build skills so that Alexa can work with additional equipment or perform specific tasks in your conference rooms
- 59. SYSTEMS MANAGER ● Provides a unified user interface so you can view operational data from multiple AWS services ● Allows you to automate operational tasks across your AWS resources
- 60. ● AWS Elemental MediaConvert ● AWS Elemental MediaPackage ● AWS Elemental MediaLive MEDIA SERVICES & AR/VR ● AWS Elemental MediaStore ● AWS Elemental MediaTailor ● Amazon Sumerian
- 61. AMAZON SUMERIAN ● Lets you create and run virtual reality (VR), augmented reality (AR), and 3D applications quickly and easily without requiring any specialized programming or 3D graphics expertise