Bienvenidos WEBINAR VIRTUAL Arquitectura en AWS Orador Gerardo

¡Bienvenidos! WEBINAR VIRTUAL Arquitectura en AWS

Orador Gerardo Attardi © 2019, Amazon Web Services, Inc. or its Affiliates. All rights

Agenda Global Infrastructure Elastic Load Balancing © 2019, Amazon Web Services, Inc. or its

Agenda Infraestructura Global de Amazon AWS Servicio VPC: Arquitectura de RED en AWS Servicio EC 2: Maquinas Virtuales en AWS Demo VPC y EC 2 © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

Agenda Servicio ELB: Balanceo de Carga en AWS Demo ELB Servicio Auto. Scaling: Elasticidad en AWS Servicios complementarios: AWS Cloud. Watch Demo Auto. Scaling © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

Infraestructura Global de Amazon AWS © 2019, Amazon Web Services, Inc. or its Affiliates.

AWS Global Infrastructure: Current Regions © 2019, Amazon Web Services, Inc. or its Affiliates.

Infraestructura global de AWS VM VM © 2019, Amazon Web Services, Inc. or its

Infraestructura global de AWS = Cluster de Datacenters © 2019, Amazon Web Services, Inc.

Infraestructura global de AWS Avaiabilty Zone 1 = REGION Low Latency Link = ©

AWS Availability Zones • Cada Availability Zone está: • Compuestra por 1 o más Centros de Cómputos (Las más grandes 6) • Diseñada para aislación de fallas entre sí (Energía eléctrica, Almacenamiento, Bakc. UP, Refrigeración, Networking) • Interconectada con otras Availability Zones usando enlaces PRIVADOS de alta velocidad • Usted puede elegir su AZ al posicionar un recurso • AWS recomienda replicar entre AZ para Alta Disponibilidad © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Availability Zone

AWS Global Infrastructure: Edge Locations © 2019, Amazon Web Services, Inc. or its Affiliates.

AWS Global Infrastructure: Edge Locations Edge Location • Servicios presents en EL: Amazon Cloud. Front, Amazon Route 53, AWS Firewall Manager, AWS Shield, and AWS WAF • Cloud. Front usa una red GLOBAL de 150 Puntos de Presencia (139 Edge Locations y 11 Regional Edge Caches) en 65 ciudades en 29 countries © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

Amazon VPC (Virtual Private Cloud) © 2019, Amazon Web Services, Inc. or its Affiliates.

Que es la VPC? • Brinda un Servicio de RED VIRTUAL, privado y aislado en la nube de AWS • Usted tiene control de la red. (rangos de IP, subredes, Amazon VPC tablas de ruteo, etc. ) • Tiene alcance REGIONAL • Posee Subredes donde posicionar los recursos © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

Configuración Típica VPC: Región Subred: AZ 10. 0/16 WEB Server 10. 0. 1. 0/24 Public subnet 10. 0. 3. 0/24 Public subnet DB Server © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. DB Server 10. 0. 2. 0/24 Private subnet 10. 0. 4. 0/24 Private subnet Availability Zone A Availability Zone B Subredes Públicas: • Tienen acceso desde y hacia Internet Subredes Privadas: • • Sin acceso desde Internet. Pueden tener acceso hacia Internet.

Seguridad en la VPC • Security groups Firewall que proteje VMs • Network access control lists (ACLs) Firewall que proteje Subredes instance Security group Subnet 10. 0/24 Subnet 10. 0. 1. 0/24 Network ACL Route table VPC Router 10. 0/16 © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. VPN Gateway Internet gateway

Componentes de la VPC Internet Customer Network Internet gateway R Web server VPC NAT Gateway Web server Public subnet © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. App Server Private subnet Virtual private gateway DB server VPN-only subnet

Amazon EC 2 (Elastic Compute Cloud) © 2019, Amazon Web Services, Inc. or its

Amazon EC 2 Virtual Machine Web hosting Bases de Datos Amazon EC 2 ©

Amazon EC 2 AMIs Servicio Amazon EC 2 AMI: Amazon Machine Image Plantilla de

Donde conseguir una AMI? 3 maneras de obtener AM I Pre-Construidas © 2019, Amazon

Instancias EC 2– Tipos Propósito General 6 available selections A 1, T 3, T 2, M 5 a, M 4, T 3 a… coming soon Optimizadas en Procesamiento 3 available Selections C Optimizadas en Memoria 7 available Selections R, X, High Memory, Z Accelerated Computing 4 available Selections P, G, F Optimizadas en Storage 3 available Selections H, I, D © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. https: //aws. amazon. com/ec 2/instance-types/

Instancias EC 2 – Nomenclatura m 5. large m es la FAMILIA 5 es la GENERACION large es el TAMAÑO © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Ejemplos t 2. large c 5. xlarge p 3. 2 xlarge

DEMO VPC y EC 2 © 2019, Amazon Web Services, Inc. or its Affiliates.

Estructure su arquitectura con multiples capas de defensa VPC 10. 1. 0. 0/16 SG in Internet gateway Tabla de Ruteo Network ACL in Network ACL out Subred 10. 1. 1. 0/24 SG out SG in SG out © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Instancia EC 2 - 1 10. 1. 1. 6 Instancia EC 2 - 2 10. 1. 1. 7

Estructure su arquitectura con multiples capas de defensa VPC 10. 1. 0. 0/16 SG in Internet gateway Tabla de Ruteo Network ACL in Network ACL out Subnet 10. 1. 1. 0/24 SG out SG in SG out © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Instancia EC 2 - 1 10. 1. 1. 6 Instancia EC 2 - 2 10. 1. 1. 7

No olvidar para habilitar acceso desde y hacia INTERNET a instancias en una subred, usted DEBE: Enlazar un internet gateway a la VPC Destination Target 10. 0/16 local 0. 0/0 <igw-id> Agregue route tables con rutas al internet gateway © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. app Asigne una public IP o Elastic IP a la Instancia Configure network ACLs y SGs pra permitir el tráfico correspondiente

Amazon ELB (Elastic Load Balancing) © 2019, Amazon Web Services, Inc. or its Affiliates.

Elastic Load Balancing (ELB) Un Servicio de load balancing administrado que distribuye el trafico entrante de las APPs entre multiples instancias EC 2. App Listener Elastic Load Balancing App Trafico de Usuarios © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. ELB App TARGET GROUP

ELB: Features Elastic Load Balancing © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • Soporta los protocolos HTTP, HTTPS, TCP and SSL (secure TCP). • Puede ser externo o interno • Se le asigna un Nombre DNS • Reconoce y responde según la salud de las Instancias

ELB: Opciones Application Load Balancer HTTPS Network Load Balancer Classic Load Balancer TCP PREVIOUS GENERATION for HTTP, HTTPS, and TCP • Opera en CAPA 7 • Balancea tráfico TCP • Soporte LEGACY • Soporta TLS Termination • Opera en CAPA 4 • Soporta Afinidad por cookie • Posee IP Pública FIJA • No usar en implementaciones nuevas • Soporta Connection Drainning © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. https: //docs. aws. amazon. com/elasticloadbalancing/latest/userguide/what-is-load-balancing. h

DEMO Balanceo de Carga en AWS © 2019, Amazon Web Services, Inc. or its

Amazon Auto. Scaling © 2019, Amazon Web Services, Inc. or its Affiliates. All rights

Elasticidad – Auto Escalado Elastic Load Balancing Latencia Utilización Auto Scaling group Auto Scaling © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Ejecutar directiva de Escalado Amazon 39 Cloud. Watch

Formas de Escalar Automáticamente Agendado Dinámico (Cloud. Watch) Predictivo Para cargas predecibles Exelente para casos generales Sencillo de usar Nov 2018 Escala basado en Calendario Basado en métricas Machine learning Ejemplo: Apagar los entornos de Testing y Desarrollo de noche Ejemplo: Escalar basado en utilización de CPU Uso: Ya no necesita ajustar reglas manuales © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

Cloud. Watch Metrics Logs Alarms Events Rules Targets © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Promedio Utilización de CPU 60 50 40 30 20 10 0 0: 30 1: 00 1: 30 2: 00 2: 30 3: 00 Las métricas se guardan por un periodo de 15 meses

Cloud. Watch Logs Metrics Orígenes de LOGS Log_File. txt Logs VPC Flow Logs Errors: 3 Warnings: 12 Alarms Events Aplicación Connections: 20 Cloud. Watch Print out … ALB Access Logs Agent e Visor de Sucesos Etc. Rules Targets © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Route 53 Amazon S 3

Cloud. Watch Alarms Metrics CPU Utilization 80% 60% 45% 25% 10% 10% 5% Logs Application Alarms Alarm If CPU utilization is > 50% for 5 minutes Events Rules Targets © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Dispara una acción como por ejemplo: • Enviar un mensaje al deparamento de Desarrollo • Crear otra instancia para soportar la carga

Cloud. Watch Events Metrics Logs Event Alarms Events Rules Targets © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Ejemplos de Eventos Console sign-in Auto Scaling state change EC 2 instance state change EBS volume creation Cualquier API call

Cloud. Watch Rules Metrics Logs Event Alarms Events Rules Targets © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Rule { "source": [ "aws. ec 2" ], "detail-type": [ "EC 2 Instance State-change Notification" ], "detail": { "state": [ “terminated" ] } }

Cloud. Watch Targets Metrics Logs Event Alarms Events Rules Targets © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Rule { "source": [ "aws. ec 2" ], "detail-type": [ "EC 2 Instance State-change Notification" ], "detail": { "state": [ “terminated" ] } } Targets EC 2 instances AWS Lambda Kinesis streams Amazon ECS Step Functions Amazon SNS Amazon SQS

DEMO Auto. Scaling © 2019, Amazon Web Services, Inc. or its Affiliates. All rights

Por último AWS Batch AWS Snowmobile Schema Conversion Tool AWS Ops. Works AWS Code. Deploy AWS Organizations Amazon Lex AWS Managed Services AWS Code. Commit Amazon Inspector Amazon Kinesis Firehose Amazon Pinpoint Amazon Dynamo. DB Amazon Athena AWS WAF AWS Io. T Amazon Polly AWS Personal Health Dashboard Amazon Elasti. Cache Amazon Lumberyard Amazon Redshift AWS Snowball Amazon Work. Mail AWS Storage Gateway AWS Config AWS Shield Amazon EFS Amazon App. Stream 2. 0 5, 089 Amazon Lightsail AWS Ops. Works for Chef Automate Work. Spaces Amazon EC 2 Systems Manager © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Machine Learning AWS Io. T Greengrass AWS Direct Connect AWS Certificate Manager Amazon Cognito Device Farm Work. Docs Amazon Inspector AWS Step Functions AWS Elastic Beanstalk Amazon Route 53 Lambda AWS Glue AWS X-Ray AWS Code. Build AWS Snowball Edge Amazon Rekognition Amazon Quick. Sight AWS Discovery Services AWS Code. Pipeline Amazon RDS for Aurora AWS Mobile Hub Cloud. Watch Logs Mobile Analytics AWS Service Catalog AWS Import/Export

¡GRACIAS!