Recap of AWS re:invent 2015

Editor's Notes

• #5: Access to limited Elastic-API Kibana v4 (also v3) Can enable zone-aware Easy to import cloudwatch/VPC-logs etc Performance through cloudwatch Price t2.micro 0.020/hr (vs. 0.014) Automated snapshot each 24 hr, stored 14 days
• #6: Easy to run jetty, scala and other embedded runtimes/containers Beanstalk use nginx as proxy - now easier to configure it
• #8: The AWS Well-Architected Framework is based around four pillars: Security – The ability to protect information systems and assets while delivering business value through risk assessments and mitigation strategies. Reliability – The ability to recover from infrastructure or service failures, dynamically acquire computing resources to meet demand, and mitigate disruptions such as misconfigurations or transient network issues. Performance Efficiency -The efficient use computing resources to meet system requirements, and maintaining that efficiency as demand changes and technologies evolve. Cost Optimization – The ability to avoid or eliminate unneeded cost or suboptimal resources.
• #9: 19000+ attendees, 2 keynotes, ca 400 breakout sessions networking, hands-on-labs, certifications, bootcamps, re:play 2.5 days + 1 day for partners
• #10: t2.nano - 512MB x1 - up to 2TB RAM, 100+ vCPU, four way 2.3GHz Intel Xeon E7 8880 v3 (Haswell) An Amazon EC2 Dedicated Host is a physical server with EC2 instance capacity fully dedicated to your use. Dedicated Hosts gives you additional visibility and control over how instances are placed on a physical server, and you can continually use the same physical server over time. As a result, Dedicated Hosts enable you to use your existing server-bound software licenses and address corporate compliance and regulatory requirements.
• #14: typical cases: sql injection, xss attacks, by IP/browser/url integration with cloudfront and using 3rd party services (eg. barricade.io) to get dynamic rules keep sampling data for 2 hours
• #15: http://blog.powerupcloud.com/2015/10/16/awsinspector-howto/ Available in us-west-1 Automated security assessment service Install agents on each ec2, tag them, see findings Check software version, system activity, known vulnerabilities
• #16: Continuous monitoring of AWS resources changes (EC2 should be tagged, important SG is missing, or SG is too open)
• #17: Continuous monitoring of AWS resources changes (EC2 should be tagged, important SG is missing, or SG is too open)
• #19: Mobile features like: user sign-in - Cognito content delivery - Cloudfront content storage push notifications backend logic - Lambda analytics tests Pay only for used AWS services
• #20: 50 TB/snowball, 10 days free usage, no transfer-fee into S3 Static/dhcp - 10G/sec eth Ecncrypted (KMS-keys), tamper resistant, shock resistant Secure erase Kindle serves as interface and address-lable and tracking
• #21: Migration service - supports same DB platform and different, where 80% of code will be converted (triggers, stored procedures, views, the rest will be marked for review)
• #22: Firehose - directly to S3 or redshift. More datastores to come. Scales automatically. Can compress and encrypt on the fly Analytics - run SQL queries on live-datastream, example moving average Extended retention - 24 hrs or 7 days in Kinesis stream
• #23: Managed BI-solution
• #26: Datasources: Redshift, RDS, EMR, DynamoDB, Kinesis, S3, flat files (streaming data!!!) Autodiscovery to make it easy to connect, recommends graphs and visualizations Sharing of playbooks Native access on major mobile platforms from 9 USD/user/month incl 10 GB data
• #27: Comment: Interesting talk from re:invent - https://www.youtube.com/watch?v=rMiplPiU2nI
• #28: MQTT - old, but small and efficient protocol over TLS Pub/sub makes it scalable and low latency IAM-integration makes automation easy (new devices revoke access) Rules-engine (rules to process and route messages), trigger lambda, kinesis, sotre s3 Star video at 09:00 to 12:05 (02:00-07:00) is more extensive
• #29: MQTT - old, but small and efficient protocol over TLS Pub/sub makes it scalable and low latency IAM-integration makes automation easy (new devices revoke access) Rules-engine (rules to process and route messages), trigger lambda, kinesis, sotre s3 Star video at 09:00 to 12:05 (02:00-07:00) is more extensive
• #30: MQTT - old, but small and efficient protocol over TLS Pub/sub makes it scalable and low latency IAM-integration makes automation easy (new devices revoke access) Rules-engine (rules to process and route messages), trigger lambda, kinesis, sotre s3 Star video at 09:00 to 12:05 (02:00-07:00) is more extensive
• #35: re:play was built using containers :)