AWS 2017 re:Invent re:Cap - TriNimbus Presentation Slides

With Jarrod Levitan, Mency Woo & Dave Lindon
re:Invent re:Cap

● AWS Fargate
● Amazon EKS
● Amazon EC2 M5 Instances
● Amazon EC2 H1 Instances
● Amazon EC2 Bare Metal Instances
● Amazon EC2 T2 Unlimited
● Hibernation for Spot Instances
● Amazon Lightsail Load Balancer
● New Spot Pricing model and Spot on
RunInstances
● AWS Serverless Application Repository
● AWS Lambda Per Function Concurrency/Throttle
● Migrate Hyper-V VMs to AWS with AWS Server
Migration Service
● AWS Lambda Introduces Enhanced Console
Experience
● Amazon Time Sync Service
● Array Jobs for AWS Batch
COMPUTE

● Run Kubernetes applications on AWS with ease
● EKS automatically distributes K8 masters across multiple AZs to eliminate a single point of
failure
● Automatically detects and replaces unhealthy masters
● Automatically patches and performs version upgrades for masters
EKS (preview)

● Run containers easily without managing servers or clusters
● Launch tens or tens of thousands of containers in seconds
● Seamlessly integrates with Amazon ECS
FARGATE

● Deploy applications that use physical hardware resources directly on AWS infrastructure
● Ideal for workloads that require access to hardware feature sets
● Ideal for applications that need to run in non-virtualized environments
EC2 BARE METAL (preview)

● Latest generation of Amazon EC2’s Storage
Optimized instances
● Designed for applications that need low cost
storage, high disk throughput, and high
sequential disk I/O access to large data sets
● Ideal for data-intensive workloads,
distributed file systems, network file
systems, log or data processing applications,
and big data workload clusters
H1, M5 INSTANCES
● Next generation of the Amazon EC2 General
Purpose compute instances
● Designed to provide a balance of compute,
memory, storage and network resources
● Ideal for workloads such as web and
application servers, backend servers for
enterprise applications, gaming servers,
caching fleets, as well as for application
development environments.

● With T2 Unlimited, workloads can now burst beyond the baseline for as long as required.
● Workloads on T2 instances include micro-services, low-latency interactive applications, small and medium
databases, virtual desktops, development, build and stage environments, code repositories, and product
prototypes
T2 UNLIMITED

● Provides a highly accurate and reliable time reference that is natively accessible from EC2 instances
● Highly available with a continuously monitored time infrastructure and provides a low variance
reference time source
● Automatically smooths out (smears) leap seconds that are periodically added to UTC, so that
customers do not have to worry about application errors due to their addition
AMAZON TIME SYNC SERVICE

SPREAD PLACEMENT GROUPS
A spread placement group is a group of instances that are each placed on distinct
underlying hardware.
Launching instances in a spread placement group reduces the risk of simultaneous
failures that might occur when instances share the same underlying hardware.
Spread placement groups provide access to distinct hardware, and are therefore
suitable for mixing instance types or launching instances over time.
A spread placement group can span multiple Availability Zones, and you can have a
maximum of seven running instances per Availability Zone per group.
If you start or launch an instance in a spread placement group and there is
insufficient unique hardware to fulfill the request, the request fails. Amazon EC2
makes more distinct hardware available over time, so you can try your request again
later.

LAUNCH TEMPLATES
● Enables a new way to templatize your launch requests
● Streamline and simplify the launch process for Auto Scaling, Spot Fleet, Spot, and On-Demand
instances
● Launch Templates reduce the number of steps required to create an instance by capturing all
launch parameters within one resource

NEW SPOT PRICING MODEL AND SPOT ON
RUNINSTANCES
● New model delivers low, predictable prices that adjust gradually, based on long-term trends in supply
and demand
● Launch Spot instances via the RunInstances function, run-instances command or AWS management
console by simply indicating you want to use Spot

● Distribute traffic across attached target instances with automated health checks to ensure traffic is sent only to
healthy instances
● Create highly available architectures and increase the uptime of applications and websites, by distributing traffic
across instances
● Lightsail provides SSL/TLS certificates for free with use of a load balancer, along with integrated certificate
management plus automatically renews certificates on customer's behalf before expiry
LIGHTSAIL LOAD BALANCER + CERTIFICATE MANAGEMENT

● A collection of serverless applications published by developers, companies, and partners in the
serverless community
● Deploy code samples and components for building web and mobile applications and back-end
processing services and complete applications
● Each application is packaged with an AWS Serverless Application Model (AWS SAM) template that
defines the AWS resources used
AWS SERVERLESS APPLICATION REPOSITORY (preview)

GOLANG SUPPORT
You can now write your Lambda functions in Go

CLOUDTRAIL EXECUTION LOGGING
You can now log the execution activity of your AWS Lambda functions with AWS CloudTrail Lambda
data events. Previously, you could only log Lambda management events, which provide information
on when and by whom a function was created, modified, or deleted. Now, you can also record
Lambda data events and get additional details on when and by whom an Invoke API call was made
and which Lambda function was executed. All Lambda data events are delivered to an Amazon S3
bucket and Amazon CloudWatch Events, which allows you to respond to events recorded by
CloudTrail. For example, you can quickly determine which Lambda functions were executed in the
past three days and identify the source of the Invoke API calls. You can take immediate action to
restrict Invoke API calls to known users or roles if you detect inappropriate Lambda activity.
You can turn on logging for AWS Lambda data events using the AWS CloudTrail console, AWS CLI,
and SDKs. You can view and select which Lambda functions get logged by creating a new trail or
editing an existing trail.

LAMBDA NEW DEPLOYMENT OPTIONS
● New feature: traffic shifting
○ Specific weights & increments
○ Specific intervals
○ Error / Rollback conditions
● AWS CodeDeploy now supports Serverless
○ supports deployment to Lambda for both all in and traffic shifting options
○ integrated into SAM

● Amazon GuardDuty
● Managed Rules for WAF
● Advanced Security Features for Amazon Cognito
SECURITY, IDENTITY & COMPLIANCE

MANAGED RULES FOR AWS WAF
● Enable you to easily protect your web applications and APIs from Internet threats.
● Choose from preconfigured RuleGroups provided in the AWS Marketplace by experts like Alert
Logic, Fortinet, Imperva, Trend Micro and TrustWave
● Rules are automatically updated as new threats emerge and offer a wide range of protections

AMAZON GUARD DUTY
● A threat detection service that provides an accurate and easy way to continuously monitor and protect
your AWS accounts and the applications and services running within them
● Get intelligent threat detection and actionable detections without the heavy lifting of additional
security software or infrastructure to deploy and maintain

● Amazon Neptune
● Amazon DynamoDB on-Demand Backup
● Amazon DynamoDB Global Tables
● Amazon Aurora Multi-Master
● Amazon Aurora Serverless
DATABASES

AMAZON NEPTUNE
● A fast, reliable, fully-managed graph database service
● Makes it easy to build and run applications that work with highly connected datasets
● Optimized for storing billions of relationships and querying the graph with milliseconds latency

AURORA SERVERLESS (preview)
● On-demand auto-scaling configuration
● Database will automatically start up, shutdown and scale capacity based on application's needs
● Enables to run relational database in the cloud without managing any database instances or clusters
● Built for applications with infrequent, intermittent or unpredictable workloads

MULTI-MASTER AURORA AURORA MULTI-MASTER
● Creates multiple read/write master instances across multiple Availability Zones
● Enables applications to read and write data to multiple database instances in a cluster
● Multi-Master clusters improve Aurora's already high availability

MULTI-REGION, MULTI-MASTER AURORA

DYNAMODB GLOBAL TABLES
● Fully managed, multi-region, and multi-master database that provides fast, local, read and write
performance for massively scaled, global applications
● Eliminates the difficult work of replicating data between regions and resolving update conflicts
● Enables applications to stay highly available even in the unlikely event of isolation or degradation of an
entire region

DYNAMODB BACKUP/RESTORE
● Create full backups of your DynamoDB tables data for data archival
● Backup tables from a few megabytes to hundreds of terabytes of data
● Processes back up requests in seconds regardless of the size of your tables

AMAZON MQ
● Manages the administration and maintenance of ActiveMQ, a popular open-source message broker
● Designed to withstand failures so your messages are highly available

● Amazon S3 Select
● Amazon Glacier Select
STORAGE ANALYTICS

S3 SELECT (Preview)
● A new S3 capability designed to pull out only the data you need from an object
● Enables applications to offload the heavy lifting of filtering and accessing data inside objects to the
S3 service
● Improve the performance of most applications that frequently access data from S3 by up to 400%

GLACIER SELECT
● New way to query archived data in Amazon Glacier
● Allows queries to run directly on data stored in Amazon Glacier, retrieving only the data you need out
of your archives to use for analytics
● Reduces total cost of ownership while massively extending your data lake into cost-effective archive
storage

● AWS PrivateLink for Customer and Partner Services
● Inter-Region VPC Peering
● API Gateway Private VPC Integrations
● API Gateway Canary Deployments
NETWORKING AND CONTENT DELIVERY

INTER-REGION VPC PEERING
● Allows VPC resources like EC2 instances, RDS databases and Lambda functions running in different
regions to communicate using private IP addresses, without requiring gateways, VPN connections or
separate network appliances
● Provides a simple and cost-effective way to share resources between regions or replicate data for
geographic redundancy

AWS PRIVATELINK
● Allows customers to privately access select AWS services from their VPC and from on-premises via
Direct Connect
● Make services available to other accounts and VPC networks that are accessed securely as private
endpoints

API GATEWAY CANARY DEPLOYMENTS
● Canary deployments are a way to gradually roll out new APIs in Amazon API
Gateway
● Helps you more safely roll out API changes and limit the blast radius of new
deployments
● Using the new stage-level settings for canaries, set the percentage of API
requests that is handled by new API deployments to a stage

● AWS Cloud9
● AWS AppSync
DEVELOPER TOOLS | MOBILE SERVICES

AWS CLOUD9 IDE
● Provides a seamless experience for developing serverless applications
● Quickly share your development environment with your team, allowing you to pair program and
track each others’ inputs in real-time.

AWS APPSYNC
● Manage and update mobile app data in real-time between devices and the cloud
● Allows apps to interact with the data on the mobile device when it is offline

● AWS IoT 1-Click
● AWS IoT Device Management
● AWS IoT Analytics
● AWS IoT Device Defender
IoT
● Amazon FreeRTOS
● AWS GreenGrass
● AWS GreenGrass ML
Interface
● AWS IoT Core

AWS IoT DEVICE MANAGEMENT
● Securely onboard, organize, monitor, and remotely manage IoT devices at scale throughout their
lifecycle
● Provision your devices in bulk to register device information such as metadata, identity, and policies

AWS IoT DEVICE DEFENDER (H1 2018)
● A fully managed service that allows you to secure your fleet of IoT devices on an ongoing basis
● Audits your fleet to ensure it adheres to security best practices
● Detects abnormal device behavior, alerts you to security issues, and recommends mitigation actions

AWS IoT ANALYTICS (preview)
● A fully-managed IoT analytics service that collects, processes, enriches, stores, and analyzes IoT
device data at scale
● It is the easiest way to run analytics on IoT data and get insights that help make better and more
accurate decisions for IoT applications and machine learning use cases.

IoT CORE ENHANCED AUTH
● Using the custom authentication feature, customers can utilize bearer token
authentication strategies, such as OAuth, to connect to AWS without using a X.509
certificate on their devices

AMAZON FreeRTOS
● An IoT operating system for microcontrollers that makes small, low-power edge devices easy to
program, deploy, secure, connect, and maintain
● Provides the core operating system as well as software libraries that make it easy to program
connected microcontroller-based devices and collect data from them for IoT applications

GREENGRASS MACHINE LEARNING INFERENCE
● Deploy and run ML inference locally on connected devices
● With AWS Greengrass ML Inference, your AWS Greengrass devices can make smart decisions quickly
as data is being generated, even when they are disconnected

● AWS Deep Lens
● Amazon Rekognition Video
● Amazon Kinesis Video Streaming
● Amazon SageMaker
MACHINE LEARNING
● Amazon Translate
● Amazon Comprehend
● Amazon Transcribe

REKOGNITION VIDEO
● Accurately detect, track, recognize, extract, and moderate thousands of objects, faces, and content
from a video
● It is the first video analysis service of its kind that uses the complete context of visual, temporal,
and motion of the video to perform activity detection and person tracking
● Derives more complete insights about what activities are being performed in the video

AWS DEEP LENS
● A deep learning enabled wireless video camera specifically designed to help developers of all skill
levels grow their machine learning skills through hands-on computer vision tutorials, example code,
and pre-built models
● DeepLens includes an HD video camera with on-board compute optimized for deep learning, which is
fully programmable using AWS Lambda

AMAZON KINESIS VIDEO STREAMS
● A fully managed video ingestion and storage service
● Securely stream video from connected devices to AWS for machine learning, Analytics, & processing
● Automatically provisions and elastically scales all the infrastructure needed to ingest video streams
from millions of devices

● A fully-managed service that enables data scientists and developers to quickly and easily build,
train, and deploy machine learning models at any scale
● Includes modules that can be used together or independently to build, train, and deploy your
machine learning models
SAGEMAKER

AMAZON COMPREHEND
Amazon Comprehend analyzes text and tells you what it finds, starting with the language, from Afrikaans to
Yoruba, with 98 more in between. It can identify different types of entities (people, places, brands, products, and
so forth), key phrases, sentiment (positive, negative, mixed, or neutral), and extract key phrases, all from text in
English or Spanish. Finally, Comprehend provides a topic modeling service which is able to extract topics from
large sets of documents for analysis or topic-based grouping.

AMAZON TRANSCRIBE
● An automatic speech recognition (ASR) service that makes it easy for developers to add speech to text
capabilities to their applications.
● Can analyze audio files stored in Amazon S3 and return a text file of the transcribed speech with time
stamps for every word so you can easily locate the audio in the original source by searching for the text.

AMAZON TRANSLATE
A high-quality neural machine translation service that uses advanced machine learning technologies
to provide fast language translation of text-based content and enable the development of applications
that provide multilingual user experiences.

● Alexa for Business
● AWS Systems Manager
BUSINESS PRODUCTIVITY | MANAGEMENT TOOLS|

ALEXA FOR BUSINESS
● Alexa for Business provides you the tools and controls you need to use Alexa in your organization
● Provision and manage shared Alexa devices from a centralized console, specify device locations,
and enable a set of skills that can be accessed from those devices
● Alexa for Business conferencing API allows you to build skills so that Alexa can work with
additional equipment or perform specific tasks in your conference rooms

SYSTEMS MANAGER
● Provides a unified user interface so you can view operational data from
multiple AWS services
● Allows you to automate operational tasks across your AWS resources

● AWS Elemental MediaConvert
● AWS Elemental MediaPackage
● AWS Elemental MediaLive
MEDIA SERVICES & AR/VR
● AWS Elemental MediaStore
● AWS Elemental MediaTailor
● Amazon Sumerian

AMAZON SUMERIAN
● Lets you create and run virtual reality (VR), augmented reality (AR), and 3D applications quickly and
easily without requiring any specialized programming or 3D graphics expertise

QUESTIONS?
COMMENTS?
LET’S DISCUSS!

AWS 2017 re:Invent re:Cap - TriNimbus Presentation Slides

Recommended

More Related Content

Similar to AWS 2017 re:Invent re:Cap - TriNimbus Presentation Slides (20)

More from TriNimbus (20)

Recently uploaded (20)

AWS 2017 re:Invent re:Cap - TriNimbus Presentation Slides