by Joyjeet Banerjee, Enterprise Solution Architect, AWS
Amazon RDS allows you to launch an optimally configured, secure and highly available database with just a few clicks. It provides cost-efficient and resizable capacity while managing time-consuming database administration tasks, freeing you to focus on your applications and business. We’ll discuss Amazon RDS fundamentals, learn about the seven available database engines, and examine customer success stories. Level 100
1 of 34
More Related Content
Introduction to Amazon Relational Database Service
2. • Multi-engine support
– Aurora, MySQL, MariaDB, PostgreSQL, Oracle, SQL Server
• Automated provisioning, Scaling, Patching,
Backup/Restore
• High availability with RDS Multi-AZ, Auto-Failover
– 99.95% SLA for Multi-AZ deployments
• Security
• Monitoring
Amazon RDS
3. If you host your databases on-premises
Power, HVAC, net
Rack & stack
Server maintenance
OS patches
DB s/w patches
Database backups
Scaling
High availability
DB s/w installs
OS installation
App optimization
you
4. If you host your databases in Amazon EC2
Power, HVAC, net
Rack & stack
Server maintenance
OS patches
DB s/w patches
Database backups
Scaling
High availability
DB s/w installs
OS installation
App optimization
you
5. If you host your databases in Amazon RDS
Power, HVAC, net
Rack & stack
Server maintenance
OS patches
DB s/w patches
Database backups
App optimization
High availability
DB s/w installs
OS installation
Scaling
you
7. • Lower TCO because we manage the muck
• Get more leverage from your teams
• Focus on the things that differentiate you
• Built-in high availability and cross region replication
across multiple data centers
• Available on all engines, including base/standard
editions, not just for enterprise editions
• Now even a small startup can leverage multiple data
centers to design highly available apps with over
99.95% availability.
We Made Things Cheaper, Easier, and Better
8. Provisioning and Effortless Scaling
• Handle higher load or lower usage
• Naturally grow over time
• Control costs
9. Read Replicas
Bring data close to your customer’s
applications in different regions
Relieve pressure on your master
node for supporting reads and
writes
Promote a Read Replica to a
master for faster recovery in the
event of disaster
10. Enterprise-grade fault tolerance
solution for production
databases
Automatic failover
Synchronous replication
Inexpensive & enabled with one click
High Availability Multi-AZ Deployments
11. Security and Compliance
• Network Isolation
• Database instance IP firewall protection
• AWS IAM based resource-level
permission controls
• Encryption at rest using AWS KMS or
Oracle/Microsoft TDE
• SSL protection for data in transit
• Assurance programs for finance,
healthcare, government and more
12. Amazon Virtual Private Cloud (Amazon VPC)
Securely control network configuration
Availability Zone
AWS Region
10.1.0.0/16
10.1.1.0/24
Manage connectivity
VPN
connection
VPC
peering
Internet
gateway
MAWS Direct
Connect
Routing
rules
13. Security groups
Database IP firewall protection
Protocol Port Range Source
TCP 3306 172.31.0.0/16
TCP 3306 “Application
security group”
Corporate address admins
Application tier
M
14. IAM governed access
You can use AWS Identity and Access Management (IAM)
to control who can perform actions on RDS
Users and DBAApplications DBA and Ops
Your database RDS
Controlled with IAMControlled with database grants
M
15. At Rest Encryption for all RDS Engines
AWS Key Management Service (KMS)
Two-tiered key hierarchy using envelope encryption:
• Unique data key encrypts customer data
• AWS KMS master keys encrypt data keys
• Available for ALL RDS engines
Benefits:
• Limits risk of compromised data key
• Better performance for encrypting large data
• Easier to manage small number of master keys
than millions of data keys
• Centralized access and audit of key activity
Data key 1 Data key 2 Data key 3 Data key 4
Custom
application
Customer master
key(s)
Amazon
RDS
instance 3
Amazon
RDS
instance 2
Amazon
RDS
instance 1
17. Compliance
Aurora
SOC 1, 2, 3
ISO 20001/9001
ISO 27107/27018
PCI
HIPAA BAA
MySQL
SOC 1, 2, 3
ISO 20001/9001
ISO 27107/27018
PCI
FedRamp
HIPAA BAA
UK Gov. Programs
Singapore MTCS
Oracle
SOC 1, 2, 3
ISO 20001/9001
ISO 27107/27018
PCI
FedRamp
HIPAA BAA
UK Gov. Programs
Singapore MTCS
MariaDB
SOC 1, 2, 3
ISO 20001/9001
ISO 27107/27018
PCI
PostgreSQL
SOC 1, 2, 3
ISO 20001/9001
ISO 27107/27018
PCI
FedRamp
HIPAA BAA
UK Gov. Programs
Singapore MTCS
SQL Server
SOC 1, 2, 3
ISO 20001/9001
ISO 27107/27018
PCI
UK Gov.
Programs
Singapore MTCS
18. Standard monitoring
Amazon CloudWatch
metrics for Amazon RDS
l CPU utilization
l Storage
l Memory
l Swap usage
l DB connections
l I/O (read and write)
l Latency (read and write)
l Throughput (read and write)
l Replica lag
l Many more
Amazon CloudWatch Alarms
l Similar to on-premises custom
monitoring tools
19. Enhanced Monitoring
Access to over 50
new CPU, memory,
file system, and disk
I/O metrics as low as
1 second intervals
21. • Airbnb moved its main MySQL database to Amazon RDS
with only 15 minutes of downtime
• RDS simplifies much of the time-consuming administrative
tasks associated with databases so engineers can spend
more time on features
• Uses asynchronous master-slave replication to improve
website performance launched via the RDS console or an
API call
• Leverages multi-Availability Zone (Multi-AZ) for high
availability
Airbnb – Amazon RDS for MySQL
23. Key Questions We Asked
• What if we started from a clean sheet of paper with only constraint being that the
database was a relational database?
• Could we offer much better performance by leveraging the massive scale of our
cloud?
• Could we give you a database with designed durability indistinguishable from 100%
and availability of 99.99%?
• …And could we be better and cheaper than the 30-year old commercial databases in
use today?
24. Amazon RDS for Aurora
• MySQL compatible with up to 5x better performance on the
same hardware: 100,000 writes/sec & 500,000 reads/sec
• Scalable with up to 64 TB in single database, up to 15 read
replicas
• Highly available, durable, and fault-tolerant custom SSD
storage layer: 6-way replicated across 3 Availability Zones
• Transparent encryption for data at rest using AWS KMS
• Stored procedures in Amazon Aurora can invoke AWS
Lambda functions
Fastest growing service
in AWS history
A new relational database engine, built from the ground up to leverage AWS
26. Use case: Near real-time analytics and reporting
Master
Read
Replica
Read
Replica
Read
Replica
Shared distributed storage volume
Reader end-point
A customer in the travel industry migrated to Aurora for
their core reporting application accessed by ~1,000
internal users.
§ Replicas can be created, deleted and scaled within
minutes based on load.
§ Read-only queries are load balanced across replica
fleet through a DNS endpoint – no application
configuration needed when replicas are added or
removed.
§ Low replication lag allows mining for fresh data with
no delays, immediately after the data is loaded.
§ Significant performance gains for core analytics
queries - some of the queries executing in 1/100th
the original time.
► Up to 15 promotable read replicas
► Low replica lag – typically < 10ms
► Reader end-point with load balancing
27. Amazon Aurora is now PostgreSQL-compatible
• PostgreSQL 9.6 compatibility with support for PostGIS
• All the features you expect from Amazon Aurora including
15 read replicas with <10ms lag, shared storage, failover
without data loss, 6-way replication across 3 Availability
Zones, encryption with AWS KMS
• Available now in preview
28. Simplify monitoring from the
AWS Management Console
l Database load: Identifies
database bottlenecks
l Easy
l Powerful
l Identifies source of bottlenecks
l Top SQL
l Adjustable time frame
l Hour, day, week, and longer
Max CPU
Performance Insights for Amazon RDS
29. Feature Aurora MySQL MariaDB PostgreSQL Oracle SQL Server
VPC ü ü ü ü ü ü
High availability ü ü ü ü ü ü
Instance Scaling ü ü ü ü ü ü
Automated Backups ü ü ü ü ü ü
Encryption ü ü ü ü ü ü
Read replicas ü ü ü ü Oracle
Golden Gate
/ DMS
DMS
Cross region replicas ü ü ü ü
Max Storage 64 TB 6 TB 6 TB 6 TB 6 TB 4 TB
Scale Storage Auto scaling ü ü ü ü
Provisioned IOPS NA 30,000 30,000 30,000 30,000 20,000
Largest Instance R3.8XL
R3.8XL
M4.10XL
R3.8XL
M4.10XL
R3.8XL
M4.10XL
R3.8XL
M4.10XL
R3.8XL
M4.10XL
RDS Engine Capability Matrix
30. AWS Database Migration Service
• Fully managed service for migration from on-premises to the
AWS Cloud with minimal downtime
• Migrates data to and from all widely used commercial and
open source DBs
• Schema Conversion Tool that converts source DB schemas,
stored procedures and application code to a different target
format
• Supports homogenous and heterogeneous data replication
• A terabyte-sized DB can be migrated for as little as $3
31. Database Conversion Capabilities in SCT
Source Database Target Database
Microsoft SQL Server è Amazon Aurora, MySQL, PostgreSQL
MySQL è Amazon Aurora, PostgreSQL
Oracle è Amazon Aurora, MySQL, PostgreSQL
Oracle Data Warehouse è Amazon Redshift
PostgreSQL è Amazon Aurora, MySQL
Teradata, Netezza, Greenplum è Amazon Redshift
33. Heterogeneous Migration
• Oracle private DC to RDS PostgreSQL migration
• Used the AWS Schema Conversion Tool to convert their
database schema
• Used on-going replication (CDC) to keep databases in sync
until they reached the cutover window
• Benefits:
• Improved reliability of the cloud environment
• Savings on Oracle licensing costs
• SCT Assessment Report let them understand the scope of the
migration