AWS GovCloud (US) - d36cz9buwru1tt.cloudfront.netd36cz9buwru1tt.cloudfront.net/aws-gov-summit-2011/AWS_GovCloud_CJ...Amazon CloudWatch AWS Identity and Access Management ... by filling

AWS Gov Cloud Summit II

AWS GovCloud (US) CJ Moses

Deputy Chief Information Security Officer

Fault Separation and Geographic Diversity

Amazon CloudWatch

Note: Conceptual drawing only. The number of Availability Zones may vary

EU Region (IRE)

Availability Zone A

Availability Zone B

US East Region (N. VA)

Availability Zone A

Availability Zone C

Availability Zone B

APAC Region

(Tokyo)

Availability Zone A

Availability Zone B

US West Region (N. CA)

Availability Zone A

Availability Zone B

APAC Region (Singapore)

Availability

Zone B Availability

Zone A

Availability Zone C

BUT:

Data has to stay in CONUS

Must meet Federal standards for security and

privacy controls

US Persons only access

Data Isolation, Network Isolation, Machine

Isolation

a new region…

AWS GovCloud (US)

AWS GovCloud (US): A New Region

Ashburn, VA / Dallas, TX / Jacksonville, FL / Los Angeles, CA / Miami, FL / Newark, NJ / New York, NY / Palo Alto, CA / Seattle, WA / St. Louis, MO / Amsterdam / Dublin / Frankfurt / London / Hong Kong / Paris / Stockholm / Tokyo / Singapore

US East (Northern Virginia) US West (Northern California) GovCloud (US) (West Coast) Europe (Dublin) Asia Pacific (Singapore) Asia Pacific (Tokyo)

6 AWS Regions

19 AWS CloudFront Locations

Targeted to US Government Customers

US governmental entity or supporting company FISMA Moderate Compliant Controls

US Persons-Only access (Physical & Logical)

AWS will screen direct customers prior to providing access to the AWS GovCloud (US). Direct customers must be:

U.S. Persons; not subject to export restrictions; and comply with U.S. export control laws and regulations, including the International

Traffic In Arms Regulations.

Data Isolation (Service & IAM Controls) Network Isolation (VPC required, FIPS 140-2 Compliant endpoints)

Machine Isolation (Dedicated instances optional)

Customer’s

Network

Amazon

Web Services

Cloud Secure VPN

Connection over

the Internet

Subnets

Customer’s isolated

AWS resources

Amazon VPC Architecture

Router VPN

Gateway

Internet NAT

Security is Job Zero

http://aws.amazon.com/security/

Certifications and Accreditations

• FISMA Moderate Compliant Controls

• SAS70 Type II (next report SOC1 - SSAE 16)

• ISO 27001

• PCI DSS Level 1

• FIPS 140-2 Compliant Endpoints (GovCloud)

AWS GovCloud (US) Services

Amazon Elastic Compute Cloud (EC2)

Two Availability Zones

Standard, High-Mem and High-CPU Instances available

Amazon Simple Storage Service (S3) Full durability, designed at 99.999999999%

Amazon Elastic Block Store (EBS)

Amazon Virtual Private Cloud (VPC)

Required for all customers

Amazon CloudWatch

AWS Identity and Access Management (IAM)

Command Line API Access (No Console)

elasticfox (Firefox plugin)

AWS Deployment Models

Logical

Server and

Application

Isolation

Granular

Information

Access

Policy

Logical

Network

Isolation

Physical

server

Isolation

Government

Only Physical

Network and

Facility

Isolation

ITAR

Compliant

(US

Persons

Only)

Sample Workloads

Commercial

Cloud Public facing apps.

Web sites, Dev

test, FISMA Low

Virtual Private

Cloud (VPC) Data Center

extension, TIC

environment,

email, FISMA

Moderate

AWS

GovCloud

(US)

USP Compliant

and Government

Specific Apps.

Use Cases

Over 100 Government Agencies

Including:

Agencies using AWS to support

their mission . . .

GSA Infrastructure-as-a-Service

BPA Award

NASA US RATB US Treasury USDA

NASA – Jet Propulsion Laboratory

Mars Exploration

Rovers

Mars Science

Laboratory

Deep Space

Network Carbon in the Arctic Reservoir

Vulnerability Experiment

Lunar Mapper

Mission Project

ATHLETE

Robot

Mars Science Lab - Curiosity

Fast Motion Field Test - Image Processing in the Cloud

• Massively parallel computations on EC2

Image Stitching (panorama generation)

Stereo Correlation (depth perception)

Large Image Tiling

Elasticity

• Zero to a few hundred cores, back to zero – in a few weeks

Pay-as-you-go

• Mission paid only for what it used

Scalable – NASA JPL

“[AWS] allowed us to process nearly 200,000 Cassini images within a few hours under $200. [Before AWS] we were only able to use a single machine locally and spent more than 15 days on the same task.”

- Khawaja Shams, Sr. Solutions Architect, NASA JPL

European Space Agency

ESA Centre for Earth

Observation

• Data collected by Satellites

stored in Amazon Simple

Storage Service (S3)

• Earth science data provided to

organizations around the world –

50,000 users at peak, 30 TB at a time

Scalability

• Scale up storage infrastructure as much as needed

Speed and Agility

• Avoided time to procure dedicated hardware with on-demand

service

Government Solution Providers

“This new offering will enable the US federal government to continue to improve their organization’s performance, effectiveness, and efficiency with increased transparency. ESRI is pleased to continue working with AWS to offer federal agencies the powerful coupling of the cloud with ESRI’s suite of tools for mapping and geographic analysis.”

-Jack Dangermond, President, ESRI

AWS Gov Cloud Summit II

• Customers who are interested in learning more about the AWS GovCloud (US) should contact their government sales representative by filling out the Contact Us form on the AWS GovCloud (US) website.

• http://aws.amazon.com/govcloud-us/contact/ or call us at 703-561-9600

Getting Started

AWS Gov Cloud Summit II

• Steven Halliwell – GM SLED at [email protected] or (954) 778-6667

• Steve Spano – Global Defense and Aerospace at [email protected]

• Thomson Nguy or Cindy Brent – Civilian Agencies: Thomson at

[email protected] or (703)-371-8541 and Cindy at [email protected] or (703) 402-0880

• Brett McMillien – Healthcare and Department of Energy [email protected] or (571) 239-8860

• Mark Fox – Department of Defense at [email protected] or (703) 598-5822

• Dave Hirko – Intelligence Community [email protected] or (571) 421-7729

or go direct to:

AWS Gov Cloud Summit II

Thank You!!