Berlin.

Transcription

1 Berlin

2 AWS Cloud Adoption Framework an overview Marcus Fritsche

3 AWS Cloud Adoption Journey What are the priorities? When to deliver solutions? Business Impact? What to measure? How to measure? What tooling do we need? What is the new ITSM cycle? What skills and capabilities are required? How to compose adoption team? How to design foundations? How to migrate workloads? Will risk increase? Can we run cloud secure and compliant? How to structure cloud programs? Strategy for quality delivery and operations? Customers are asking us for the high-level enterprise-wide organizing logic for mapping their business needs to IT capabilities, reflecting the agility, integration and standardization changes that cloud computing brought to IT industry. Strategic relationships are openingup new set of questions, requiring AWS to demonstrate delivery capability, technology insight, and practical business value to our customers.

4 AWS Cloud Adoption Framework Maturity Perspective Business Perspective Operations Perspective People Perspective Platform Perspective Security Perspective Process Perspective The AWS CAF organizes and describes the perspectives in planning, creating, managing, and supporting a modern IT service. Offers practical guidance and comprehensive guidelines for establishing, developing and running AWS cloud-enabled environments. It provides a structure where business and IT can work together towards common strategy and vision, supported by modern IT automation and process optimization.

5 AWS Cloud Adoption Framework KEY PERSPECTIVES AND MODELS

6 Business Perspective Information Technology (IT) is used by organizations to process, manage and communicate information efficiently and is a vital capability within modern business environments. Increasingly, IT also serves as the basis for delivering innovative products and services that can transform conventional ways of doing business. The Business Perspective represents areas that business and IT people must focus on to ensure that IT is utilized in an optimum way to deliver the maximum value. CAF Business Perspective Budget and Cost Management Risk Management IT Strategy Governance Benefit Management Supplier Management

7 IT Strategy Model Financial Manage cost of IT Maximize shareholder returns Enable value creation Customer Demonstrate competitive costs Deliver quality IT services Maximize business productivity Achieve business strategies Internal Business Processes Optimize IT processes Manage IT service quality Standardize platforms and architectures Utilize economies of scale Deliver on schedule and within budget Improve IT productivity Empower and support end-users Understand business strategies Propose enabling solutions Understand emerging technologies Learning and Growth Attract and retain key talent Enable strong career development Promote culture of innovation Acquire skills in enabling technologies

8 Application Disposition Model Manual Install Manual Config Use Migration Tools Automated Manual Deploy Determine Migration Path Modify underlying Infrastructure Transition Discover/Assess/Prioritise Applications Test Production Retain / Not Moving Purchase COTS/ SaaS & licensing Manual Install & Setup Retire / Decommission Redesign Application/ Infrastructure Architecture App Code Development Full ALM / SDLC Integration

9 Process Perspective What is a process in Cloud Adoption? For the purposes of the CAF, process can be defined as a set of interrelated actions and activities performed to achieve a specified set of results, outcomes or services. The Process Perspective components cover activities across complete IT lifecycle, help structuring the work, re-engineer manual processes, assure quality and govern delivery of agreed outcomes. CAF Process Perspective Portfolio Management Continuous Integration/ Continuous Delivery Service Delivery Management Quality Management Process Automation Program & Project Management

10 Cloud Lifecycle Model Strategy Analysis Design Transition Operations Improvement - Assessing and analyzing the current state - Defining strategic vision and direction - Setting financial, GCR and organizational structure - Validation before delivery begins - Creating/building/coding IT services that meet/exceed defined expectations - Testing/validating IT services against testing plan and acceptance criteria - Transition/deployment of IT services into operations - Effective ongoing service management - Governance and monitoring - Initiation of new activities - Feedback loop and Optimization Value-based Planning Iterative Development Automated Operations

11 Initiative Roadmap Cloud Adoption Strategic Initiative Launch and mobilize Define Cloud Strategy & Team Cloud Adoption Service Analysis & Design Maturity and Gap Analysis Cloud Technology Foundation Design IT Organization Redesign IT Process Redesign Application Portfolio Assessment Cloud Adoption Service Transition Integrated IT Operating model Provisioning, Migrations, Handover Cloud Adoption Service Operations Monitoring, ITSM Management SLA Management, Billing, Reporting Cloud Adoption Portfolio Governance Weeks 1-4 Weeks 5-8 Weeks 9-12 Weeks Weeks Weeks Weeks Weeks 29+

12 Maturity Perspective Maturity model helps customers with structured, systematic assessment and planning of capability maturity, defining the most optimal map towards effective use of cloud computing. Focus of maturity perspective components is on consistent implementation towards more secure, well-managed and cost-optimized cloud-based IT capabilities. Cloud Readiness Assessment CAF Maturity Perspective Application Portfolio Analysis Cloud Maturity Heat-map Assessment IT Management Assessment Roadmap sequencing Target Platform Capabilities

13 Customer State Roadmap Leading Qualitydriven Growthobsessed Innovative Stimulating Innovation Preparing For M&A Costfocused Traditional

14 People Perspective People perspectives covers organizational capacity, capability and change management functions that are required for efficient Cloud Transformation. Activities include assessment, organizational re-alignment and training/readiness required to build agile IT organization capable of leading the change towards effective cloud computing adoption. CAF People Perspective Organizational Structures Training Certification Readiness Roles and Job Descriptions Organizational Change Management Manage Staffing Skills and Competencies

15 Cloud Adoption Team Skills Project Mgmt. Office Scheduling Progress Monitoring Reporting Orchestration Initiative Leadership Strategy Definition Business Alignment Adoption Roadmap Benefit Management Governance Risk & Compliance Mgmt. Cost Management Information Assurance IT Architecture Feasibility Analysis Technical Requirements Cloud Architecture Application Migration Design Technology Blueprints Validation SOA Strategy IT Delivery Infrastructure Provisioning Solution Development Service Deployment Application Migration - Rehosting - Replatforming Solution Deployment IT Operations Monitoring SLA Management Incident Management Metering Billing Business Continuity Mgmt. Disaster Recovery

16 Migration V-Team Org Model Business Sponsors Program Mgmt. Office Lead Program Manager Architecture Team Lead Architect Migration Team Migration Lead Operations Team Cloud Operations Lead Security Lead Networking Lead Foundation Lead Cloud Ops - Network DevOps Process Lead Storage & DB Lead Web migration Lead Cloud Ops - Automation Program/Project Manager Linux Compute Lead Linux app stack Lead Cloud Ops Front-end Windows Compute Lead Win app stack Lead Cloud Ops Middleware Automation Lead Oracle DB Lead Cloud Ops Database Tools Lead

17 Skill Domains People and Team Modeling Sourcing Partnering/sourcing options structural, geo and legal Validating vendor capabilities & SLAs Hardened interfaces defined expectations and penalties Team Composition Scalable teaming model based on 2-pizza teams Roles and accountabilities for delivery and operation Security Strategy Architecture Core Team Support Engineering DevOps Skills and Capabilities Competency Levels Well-rounded universalists for cloud computing era Skills profiles for various roles in the team Balancing development, sysops, project management and business skills

18 Platform Perspective Helps architects and technology teams understand the relationship of abstractions used to model cloud computing elements that are common across an enterprise. CAF Platform Perspective Conceptual Architecture Logical Architecture Implementation Architecture Platform Perspective components describe the fundamental organization of a hybrid IT system spanning multiple environments, that is embodied in its components, their relationships to each other and their design and evolution. Application Migration Patterns Cloud design principles and patterns

19 Conceptual Architecture Mapping IT Capability Workload Stack An ability of IT to provide value to the business through a collection IT workloads, such as: Line of Business Platform An aggregated IT functionality performed by collection of various IT stacks, such as: Managed Desktop A technology collection that can be transparently obtained from collection of available stencils, such as a LAMP stack Stencil An IT component that includes pre-defined and configured cloud services, such as Spot instances in auto-scaling group Service Measured elastic IT resource that can be rapidly provisioned on-demand, such as: Object storage service

20 Functional Architecture Modeling App Services Platform Services Foundational Services Management & Deployment App Development BCP & Continuity Clients Browser Legacy App Store app Mobile App TXT Term Remote Desktop Dev Env Protocols HTML REST SMTP IM/SMS SOAP/WS-* SSH RDP/VNC Data Analytics Data streaming Data Processing Data Mining Machine Learning Event Processing Mobile App Store Push Analytics Identity Composites Search Workflow Messaging Orchestration Streaming Transcoding SDK kit IDE kit App Server Java PHP Python Ruby.NET Node.js SAP Data Integration ETL/ELT Replication Queueing Data Load MDM Database Relational NoSQL In-memory DB Data Warehouse HANA Server OS BSD Linux Windows Other High Availability Disaster Recovery Compute General Purpose Compute optimized Memory Optimized GPU Optimized Storage Optimized Storage Object Store File Store Archiving Backup/Recovery Storage Integration Security Firewall Identity & Access Auditing Encryption Networking Cloud Isolation Content Delivery Connectivity Elasticity Name Resolution Monitoring App Containers Management Provisioning

21 Implementation Architecture Modeling Internet Gateway External ELB External Subnet External Subnet Internal ELB Internal Subnet Availability Zone Internal Subnet Availability Zone VPN Gateway

22 Operating Perspective Every organization has an operations group that defines how day-to-day, quarter-to-quarter, and year-to-year business will be conducted. IT operations must align with and support the operations of the business. Operating Perspective components describe the focus areas used to enable, run, use, operate and recover IT workloads to the level agreed to with business stakeholders. CAF Operating Perspective Cloud Service Management Incident & Problem MGMT SLA/OLA Strategy Performance & Operational Health Change and Configuration Management Business Continuity Planning

23 Operating Model Transition Operations Improvement Architectural Governance Standards Cloud Architecture & Strategy PMO Cloud Transition Foundational cloud services Application migrations in volumes Training, coaching, communications MSP Transition Foundational MSP requirements SLA definition Transition to Managed Services Operational Governance Operational Assurance Resource Management Cost Management Cloud Operations Access control (traffic & connectivity) Tooling (self service, automation) Knowledge Mgmt (insights, metrics) Monitoring (reliability, BCP) Legacy Operations On-premise infrastructure & platform Tooling (integration) Incident Management Environment Optimization Service Management Alerting & Escalations Problem Management Reporting IT & Cost Optimization BCM Improvement Management (portfolio, lifecycle, sun-setting) Risk & Security 1 st Line of Defense Security architecture & advisory Tooling (PenTest, IDS) Forensics & Insights

24 Security Perspective Every company is concerned with protecting information and assets as they grow the business. They also want to ensure they are operating within the legal boundaries and standards set by and on the behalf of governmental agencies and industry associations. Security Perspective components provide guidance that enables a comprehensive and rigorous method of describing a structure and behavior for an organization s security and compliance processes, systems and personnel. Security Strategy CTF Security Perspective Lifecycle Security Capabilities Reference Security Architectures DevSecOps Security Operations Playbooks Governance, Risk, Compliance

25 Design Plan, Learn Whitepapers Security Reference Architecture Manage Organize, Deploy, & Operate Authenticate & Authorize Monitor AWS Reference Architectures AWS Security Test Drive Labs AWS Simple Monthly Calculator AWS Webinars & Videos AWS Security Best Practices Overview of Security Processes AWS Risk and Compliance Governance for AWS AWS CloudFormation AWS CloudHSM SSL API, CLI, Console Resource Tagging Snapshots & Replication IAM STS Federation IAM SAML 2.0 IAM Users, Groups & Roles Log, Audit, & Analyze Monitor & Alert Trusted Advisor AWS Abuse Notifications Amazon SNS Notifications Amazon CloudWatch AWS CloudTrail S3, CloudFront Access Logs Amazon Kinesis People AWS SAs & ProServe Instance SSH Keys Bastion Host Database Oracle Transparent Data Encryption Oracle NNE AWS Sales, Support, TAM Auto Scaling CloudFront Load Distribution MS-SQL Transparent Data Encryption MS-SQL SSL Storage & Content AWS System Integration Partners Bootstrapping Amazon Machine Images (AMIs) RDS Auto Minor Patching MySQL SSL AWS Compliance Forum Elastic Beanstalk Rolling Patching Penetration Testing Process SimpleDB SSL PostgreSQL SSL AWS Training & Certification Server Certificates Resource-Level Permissions Redshfit Cluster Encryption Redshift Encrypted S3 Backups AWS Forums & Documentation AWS Marketplace Offerings Dedicated Instances DynamoDB Fine Grained Access DynamoDB SSL EMR Job Flow Roles Logging in AWS IAM Password Policy Amazon EMR S3 ACLs, Bucket Policies S3 MFA Delete S3 SSL Glacier SSL Lifecycle Rules Client-Side Encryption Storage Gateway SSL Security for Microsoft Apps on AWS Operational Checklists for AWS AWS Auditing Security Checklist Customer & Partner Whitepapers IAM MFA IAM Web Identities Access Policy Language Access Policy Simulator Amazon Redshift Application Logs Database Logs Operating System Logs S3 Object Metadata Network AWS Internet Security Geographic Diversity S3 Server-Side Encryption Direct Connect Security Groups S3 Object Versioning VPC Subnets VPC NACLs S3 Object ETags VPC VPN Gateway VPC Routing Tables Glacier Server- Side Encryption ELB SSL Route 53 Health Checks CloudFront Signed URLs CloudFront SSL Platform Security Operations Center AWS Service Level Agreements AWS Assurance Programs HIPAA SOC 1 / 2 / 3 PCI DSS Level 1 ISO FedRAMP DIACAP and FISMA ITAR FIPS CSA MPAA

26 Identifying What Needs To Be Done We examine each of these perspectives with you to identify the goals, implications, and specifically what needs to be addressed

27 Roadmap - Example Organizational Structure Skills and Competencies Define EA Policies and Practices Continuous Integration/ Continuous Delivery Cloud Business Case Discovery Workshop Define Network Environment Define Cloud Environments Operational Integration Cloud Environment Optimization IT Strategy Application Portfolio Analysis Cost and Billing Analysis Define Security Requirements Security Operations Playbook

28 AWS Cloud Adoption Framework WE HAVE THE EXPERTS TO GUIDE YOUR BUSINESS SUCCESSFUL INTO THE CLOUD!

29