AWS re:Invent 2017

In this session, we explore multi-account considerations for compliance and auditing. We include topics such as API call prefiltering, a repeatable approach to SCP and IAM policy creation, internal separation of duty and need to know, compliance scope ring-fencing, scope of impact limitation, and mandatory access control. We review approaches for log and event analytics and log record lifecycle management (including redaction where necessary) and alerting. We also discuss how you can deploy compliance assessment tools in multi-account environments and how you can interpret these tools' output so it makes sense. Finally, no set of detailed multi-account sessions is complete without discussing tools for visualization.

When you plan your data center migration to the cloud, it's critical to consider how workloads will run to ensure maximum performance and availability. With Microsoft applications making up 60% or more of most on-premises data centers, more and more customers are moving their Microsoft workloads to AWS to improve performance, increase availability, and improve their security posture. In this session, we discuss how customers are accomplishing this task. We cover the common architectural patterns for moving Microsoft applications such as SQL Server, SharePoint, and Dynamics, and we discuss how to integrate with Active Directory for a seamless transition. We also examine tools like AWS Application Discovery and AWS Server Migration Service that can help make your move faster and easier.

Oracle enterprise applications and middleware such as E-Business Suite, PeopleSoft, Siebel, and WebLogic are central to many IT departments. They often require complex deployments that can greatly benefit from the flexibility, scalability, and security of the cloud. In this session, we discuss architecture patterns and best practices for migrating these applications to and running these applications on AWS. We cover how to work with Oracle enterprise applications and multiple services including Amazon RDS, AWS Database Migration Service, Amazon Elastic File System, and AWS CloudFormation. As part of this, we show examples of successful customer deployments.

Databases continue to grow to be multiple terabytes in size, but migrating to the cloud doesn't have to take days or create disruption for your business. To perform data migration at petabyte scale with minimal impact to your business, you can now use the new combination of AWS Database Migration Service replication agents and AWS Snowball. In this session, we discuss how to extract large-scale data from an on-premises Oracle database and migrate it to Amazon Aurora. We then outline a step-by-step process for converting your Oracle schema to a PostgreSQL-based schema.

Financial Impact Regulatory Authority (FINRA)'s Technology Group has changed its customers' relationship with data by creating a managed data lake that enables discovery on petabytes of capital markets' data, while saving time and money over traditional analytics solutions. FINRA's managed data lake unlocks the value in its data to accelerate analytics and machine learning at scale. The data lake includes a centralized data catalog and separates storage from compute, allowing users to query from petabytes of data in seconds. Learn how FINRA uses Spot Instances and services such as Amazon S3, Amazon EMR, Amazon Redshift, and AWS Lambda to provide the right tool for the right job at each step in the data processing pipeline. All of this is done while meeting FINRA's security and compliance responsibilities as a financial regulator.

IT organizations today need to support a modern, flexible, global workforce and ensure their users can be productive from anywhere. Moving desktops and applications to AWS offers improved security, scale, and performance, with cloud economics. In this session, we provide an overview of Amazon WorkSpaces and Amazon AppStream 2.0, and talk through best practices for moving your end-user computing to AWS. We also dive deep into Amazon AppStream 2.0, and demonstrate some of the newest capabilities, including Microsoft Active Directory integration, single sign-on with SAML 2.0, and new graphics instances.

Cox Automotive provides digital solutions that transform how the world buys, sells, and owns cars. Cox is currently engaged in a multiyear effort to migrate the bulk of its applications from physical data centers to AWS, including client-facing SaaS applications and large, consumer-facing websites. In this session, they discuss their learnings on how to effectively migrate large, service-based architectures to AWS while minimizing the impact to customers. They also share lessons learned for conducting organizational change at scale and creating a culture of self-service.

Maintaining control of sensitive data is critical in the highly regulated financial investments environment that Vanguard operates in. This need for data control complicated Vanguard's move to the cloud. They needed to expand globally to provide a great user experience while at the same time maintaining their mainframe-based backend data architecture. In this session, Vanguard discusses the creative approach they took to decouple their monolithic backend architecture to empower a microservices architecture while maintaining compliance with regulations. They also cover solutions implemented to successfully meet their requirements for security, latency, and end-state consistency.

With serverless computing, you can build and run applications without the need for provisioning or managing servers. Serverless computing means that you can build web, mobile, and IoT backends, run stream processing or big data workloads, run chatbots, and more. In this session, learn how to get started with serverless computing with AWS Lambda, which lets you run code without provisioning or managing servers. We introduce you to the basics of building with Lambda. As part of that, we show how you can benefit from features such as continuous scaling, built-in high availability, integrations with AWS and third-party apps, and subsecond metering pricing. We also introduce you to the broader portfolio of AWS services that help you build serverless applications with Lambda, including Amazon API Gateway, Amazon DynamoDB, AWS Step Functions, and more.

Prime Day is Amazon's global shopping event exclusively for Amazon Prime members, offering great deals, events, and exclusive content. Running an event of this magnitude on the AWS Cloud offers many unique challenges. The Infrastructure Readiness Team for Prime Day 2017 focused on helping Amazon teams realize operational and executional efficiencies so they could reduce costs and ensure event readiness. Join us for an overview and Q&A of lessons learned from our largest event, including event readiness, how to support infrastructure events at scale, communication planning, building escalation paths with unknown issues, and more.