AWS for Finance Institutes

Transcription

1

2 AWS for Finance Institutes The 1 st Stpps to adopt AWS Bertram Dorn Specialized Sollutions Architect for Secuirty and Compliance 30. Juni , Amazon Web Services, Inc. or its Affiliates. All rights reserved.

3 Infrastructure

4 What is DevOps? Software development lifecycle delivery pipeline build test release developers plan monitor customers feedback loop DevOps = efficiencies that speed up this lifecycle

5 Monolith development lifecycle build test release developers app delivery pipeline

6

7 Microservice development lifecycle build test release build test release build test release build test release build test release developers services build test delivery pipelines release

8 Service-Oriented Architecture (SOA) Single-purpose Connected through APIs Highly decoupled Microservices

9 TECHNICAL & BUSINESS SUPPORT Support Professional Services Partner Ecosystem Training & Certification Solutions Architects HYBRID ARCHITECTURE Integrated Networking Direct Connect Identity Federation Integrated App Deployments Business Apps ANALYTICS Data Warehousing Business Intelligence Hadoop/ Spark Streaming Data Analysis Streaming Data Collection Machine Learning Elastic Search Identity Business Intelligence APP SERVICES Access Control Queuing & Notifications Workflow Search Transcoding DevOps Tools Key & Storage MOBILE SERVICES API Gateway Identity Sync Mobile Analytics Single Integrated Console Push Notifications MARKETPLACE Security DEVELOPMENT & OPERATIONS One-click App Deployment DevOps Resource Application Lifecycle Containers Triggers Resource Templates SECURITY & COMPLIANCE Monitoring & Logs Configuration Compliance Networking Web application firewall Databases IoT Rules Engine Device Shadows Device SDKs Device Gateway Registry Assessment and reporting Storage ENTERPRISE APPS Virtual Desktops Sharing & Collaboration Corporate Backup Resource & Usage Auditing Account Data Backups Compute VMs, Auto-scaling, & Load Balancing Storage Object, Blocks, Arc hiv al, Import/Ex port CORE SERVICES CDN Databases Relational, NoSQL, Caching, Migration Networking VPC, DX, DNS Security & Pricing Reports Integrated Resource Regions INFRASTRUCTURE Availability Zones Points of Presence

10 TECHNICAL & BUSINESS SUPPORT Support Professional Services Partner Ecosystem Training & Certification Solutions Architects HYBRID ARCHITECTURE Integrated Networking Direct Connect Identity Federation Integrated App Deployments Business Apps ANALYTICS Data Warehousing Business Intelligence Hadoop/ Spark Streaming Data Analysis Streaming Data Collection Machine Learning Elastic Search Identity Business Intelligence APP SERVICES Access Control Queuing & Notifications Workflow Search Transcoding DevOps Tools Key & Storage MOBILE SERVICES API Gateway Identity Sync Mobile Analytics Single Integrated Console Push Notifications MARKETPLACE Security DEVELOPMENT & OPERATIONS One-click App Deployment DevOps Resource Application Lifecycle Containers Triggers Resource Templates SECURITY & COMPLIANCE Monitoring & Logs Configuration Compliance Networking Web application firewall Databases IoT Rules Engine Device Shadows Device SDKs Device Gateway Registry Assessment and reporting Storage ENTERPRISE APPS Virtual Desktops Sharing & Collaboration Corporate Backup Resource & Usage Auditing Account Data Backups Compute VMs, Auto-scaling, & Load Balancing Storage Object, Blocks, Arc hiv al, Import/Ex port CORE SERVICES CDN Databases Relational, NoSQL, Caching, Migration Networking VPC, DX, DNS Security & Pricing Reports Integrated Resource Regions INFRASTRUCTURE Availability Zones Points of Presence

11 TECHNICAL & BUSINESS SUPPORT Support Professional Services Partner Ecosystem Training & Certification Solutions Architects HYBRID ARCHITECTURE Integrated Networking Direct Connect Identity Federation Integrated App Deployments Business Apps ANALYTICS Data Warehousing Business Intelligence Hadoop/ Spark Streaming Data Analysis Streaming Data Collection Machine Learning Elastic Search Identity Business Intelligence APP SERVICES Access Control Queuing & Notifications Workflow Search Transcoding DevOps Tools Key & Storage MOBILE SERVICES API Gateway Identity Sync Mobile Analytics Single Integrated Console Push Notifications MARKETPLACE Security DEVELOPMENT & OPERATIONS One-click App Deployment DevOps Resource Application Lifecycle Containers Triggers Resource Templates SECURITY & COMPLIANCE Monitoring & Logs Configuration Compliance Networking Web application firewall Databases IoT Rules Engine Device Shadows Device SDKs Device Gateway Registry Assessment and reporting Storage ENTERPRISE APPS Virtual Desktops Sharing & Collaboration Corporate Backup Resource & Usage Auditing Account Data Backups Compute VMs, Auto-scaling, & Load Balancing Storage Object, Blocks, Arc hiv al, Import/Ex port CORE SERVICES CDN Databases Relational, NoSQL, Caching, Migration Networking VPC, DX, DNS Security & Pricing Reports Integrated Resource Regions INFRASTRUCTURE Availability Zones Points of Presence

12 Dedicated Security Services SECURITY & COMPLIANCE Identity Access Control Key & Storage Monitoring & Logs Configuration Compliance Web application firewall Assessment and reporting Resource & Usage Auditing I n h e r i t Deployment & Administration Application Services Compute Storage Database Networking C o n t r o l Tennant Isolation Deep Network Security Scaling Crypto Services Detailed Monitoring Access Control Mandatory Fine Grade MFA Possible AWS Global Infrastructure

13 Security Possibilities Lift and Shift Integrate standards Replicate Automate Transparency Federate Monitor Every Activity Transparent Scale and Data Innovate Flows No Hidden Use IT Cloud Security Cost Driven Functions Awareness Automatic Scale Alarming Permanent Monitoring/Audit Out Automatic Reaction Services Permanent as Code Monitoring Continuous Integrated Deployment Audit Continuous Security Security - DevOps

14 Mapping

15 Point-in-time, or continuous compliance assessments? ISO 27001/

16 Shared Responsibility Managed by Customer Optimized Network/OS/App Controls Service-specific Controls Cross-service Controls Cloud Service Provider Controls Security in the Cloud Security of the Cloud Managed by AWS ISO ISO 9001 Request reports at: aws.amazon.com/compliance/#contact

17 The main AWS Compliance Frameworks of today Certificates: Programmes: ISO MPAA ISO 9001

18 Scope By Service (not only Datacenter) By Region By Certification Global Scalable

19 Setup Auftragsdatenvereinbahrung Inclusive Technische und Organisatorische Massnahmen

20 Compliance Requirements Mapping of Internal Controls Mapping of Regulator Controls Meeting Regulator/Legal Requirements Continuous Monitoring AWS Control Framework AWS Control Framework Enterprise Agreement EA + AWS Controls Discuss the Needs in the Enterprise Agreement Dive Deep in the AWS Control Framework Learn and Integrate the AWS Security Technology

21 Vielen Dank Bertram Dorn

22 What is AWS? Deployment & Administration Application Services Compute Storage Database Networking AWS Global Infrastructure

23 AWS Global Footprint US West (Oregon) GovCloud EU West (Ireland) EU Central (Frankfurt) China (Beijing) Indien (Mumbai) Korea (Seul) Asia Pacific (Tokyo) Region US East (Virginia) An independent collection of AWS resources in a defined geography US West (N.California) A solid foundation for meeting locationdependent privacy and compliance requirements^ Asia Pacific (Sydney) São Paulo Asia Pacific (Singapore)

24 AWS Global Footprint Availability Zone Designed as independent failure zones Physically separated within a typical metropolitan region