Aws Re:invent 2017

In this session, we walk through the Amazon VPC network and describe the problems we were solving when we created it, and the features we've been adding as we scale it. We cover how these problems and features are traditionally solved, and why those solutions are not scalable, inexpensive, or secure enough for AWS. Finally, we provide an overview of the solution that we've implemented. We discuss some of the unique mechanisms that we use to ensure customer isolation, get packets into and out of the network, and support new features such as NAT and VPC endpoints.

Since last year's ‘Taking DevOps to the Edge', and with the introduction of AWS Lambda@Edge, the tools available to apply DevOps practices to your application edge have broadened. In this updated session, we dive deep into how you can integrate Amazon CloudFront and related services into your application, be agile in developing and adapting the application, and follow best practices when configuring the services to improve security and performance, all while reducing costs. Attend this session and learn how to determine the best location (origin, edge, or client) to execute your code, avoid needless forwarding of headers and cookies, test your application when making changes, version your configuration changes, monitor usage and automate security, create templates for new distributions, configure SSL/TLS certificates, and more.

Your application is exposed to a variety of threats from common distributed attacks to sophisticated zero-day vectors. Learn how to architect beyond the region and take advantage of the AWS Edge Network and upgrade your security posture with easy to deploy solutions that scale.  At this session you will learn how to I ensure your application will withstand malicious threats and DDoS attacks, what role does architecture play in your security posture, and how professional services and partners like Flux7 can help.

In this session, we take a pragmatic approach to enhancing common media workflows built around ingest, media asset management, live video, and OTT on-demand streaming. We show how to extract metadata as an additional intelligence layer for video using Amazon AI services, such as Amazon Rekognition, in combination with turnkey architecture built around AWS Lambda, Amazon ECS, and Amazon EC2 Spot Instances. The capabilities offered by Amazon AI services provide a unique opportunity to eliminate the traditional undifferentiated heavy lifting associated with contextual, facial recognition and object-based media metadata creation—that is, who is in with what, and where. We also discuss a large studio and broadcaster just starting to use these intelligent offerings from AWS as they change their method of how to best leverage the business value of their content.

AWS Lambda enables you to run code without provisioning or managing servers in one AWS Region. Today, Lambda@Edge provides the same benefits closer to your end users, enabling you to assemble and deliver content on-demand to create low-latency web experiences. Come and join us for examples of how customers can move significant workloads they previously managed server fleets into Lambda for truly serverless website backends.

Get a deep-dive planning and implementation analysis of Asurion's “All in AWS Edge” migration.   Jabez Abraham, Cloud Architect of Asurion, discusses their AWS edge location strategy including: Amazon CloudFront, AWS WAF, AWS Shield Advanced, and AWS Lambda@Edge, and engagement of partners.  Jabez shares premigration strategy, architectural reviews, A/B testing requirements, caching, and shielding of endpoints within the VPC, and partner engagements.

This session focuses on best practices for connectivity between many virtual private clouds (VPCs), including the Transit VPC. We review how the Transit VPC works and use cases for centralization, network security, and connectivity. We include best practices for multiple accounts, multiple regions, and designing for scale. In addition, we also review some of the variants and extensions to the Transit VPC, including how to customize your own.

Learn how Amazon.com continuously improves the availability and performance of its website with AWS. Gavin Jewell, Director of Amazon's Consumer Cloud Enablement group, will go in depth on how Amazon CloudFront helps them accelerate their website globally, and how it gives flexibility to apply various security measures at the edge. He will also explain how they are using services such as AWS Shield, AWS WAF, and Route 53. Lastly, we will explore Amazon.com's continuous and incremental re-architecture program that ensures their infrastructure is constantly updated to use AWS natively.

Security is paramount for media storage and workloads and can directly impact a studio's bottom line. As core media workloads move to the cloud, it's imperative to examine the security implications of a multi-tenant public cloud environment in light of various asset classifications, content production, and delivery scenarios, as well as content handling during production workloads. In this session, we address questions and concerns about security in the cloud in the context of tier-1 (pre-released) studio content, as well as the MPAA. We highlight a studio's journey to meet Marvel's security requirements and run a tier-1 content workflow in the cloud and discuss what it took to approve the environment on AWS.

Dow Jones, which produces the Wall Street Journal, engaged AWS Enterprise Support to plan for peak website usage during the United States presidential election in 2016. This preparation ensured that the Wall Street Journal website could scale to meet peak demands as election returns came in. They have since expanded their use of AWS services, including Lambda@Edge, AWS WAF, and AWS Shield.

POOQ - Content Alliance Platform is the primary OTT service provider in Korea. In this session, we discuss how Content Alliance Platform migrated its workloads to AWS this year using AWS Elemental Cloud, Amazon CloudFront, and other AWS services. After their initial migration, Content Alliance Platform has continuously optimized video transcoding for better quality and cost-effective delivery using CloudFront. To achieve this, they developed various video profiles using AWS Elemental Live, according to the content, by using various CloudFront features, such as geo-blocking, signed cookies and URLs, and HTTPS with ACM, and by adopting various new media technologies, such as H.265, UHD, VBR, and HFR. Finally, we discuss how Content Alliance Platform is developing its next generation of OTT services using microservice architecture with Docker. 

As enterprises move to the cloud, robust connectivity is often an early consideration. AWS Direct Connect provides a more consistent network experience for accessing your AWS resources, typically with greater bandwidth and reduced network costs. This session dives deep into the features of AWS Direct Connect and VPNs. We discuss deployment architectures and the process from start to finish. We show you how to configure public and private virtual interfaces, configure routers, use VPN backup, and provide secure communication between sites by using the AWS VPN CloudHub.

In this session, learn how Hulu launched a new Live TV service and Cloud DVR platform using Amazon CloudFront, Amazon S3, Amazon Aurora, and Amazon EC2 to enable the necessary scale for live video ingest, storage, and delivery of content streams. Learn best practices for geographic redundancy, index and naming challenges, hitting performance targets, optimizing for cost, and measuring the user experience to ensure smooth playback for when you build your own video streaming solution.

Turner Broadcasting is using the AWS Cloud to provide storage and content processing required to enable mission-critical video libraries. Turner is creating a copy of CNN's 37-year news video library in AWS to take advantage of the cost and architectural benefits of cloud storage. This project has unique requirements around retrieval times, and Turner partnered with AWS to drive specific capabilities such as those Amazon Glacier expedited and bulk retrieval options.  These cloud-based archives can enable Turner to use other cloud-based value-add services, such as AI/ML/search, and media supply chains efficiently. Turner's global content exploitation strategies call for extensive versioning of content assets required for distribution to different platforms, products, and regions.  Today, this involves complex workflows to derive multiple downstream versions. Adopting the SMPTE Interoperable Mastering Format (IMF) and cloud-based object storage, Turner will dramatically simplify these workflows by enabling clou

In this series of technical flash talks, learn directly from Amazon CloudFront engineers about best practices on security, caching, measuring performance using Real User Monitoring (RUM), and customizing content delivery with Lambda@Edge.

Elastic Load Balancing automatically distributes incoming application traffic across multiple Amazon EC2 instances for fault tolerance and load distribution. In this session, we go into detail about Elastic Load Balancing configuration and day-to-day management, and also its use with Auto Scaling. We explain how to make decisions about the service and share best practices and useful tips for success.

Join NASA behind the scenes of the advanced video and cloud workflows that power deep space research. Create the foundation for space commerce, and ignite our imagination about the future. Gain firsthand knowledge of the lessons learned from the first-ever 4K live stream from space.

AWS provides the building blocks for modern broadcast and OTT video workflows. In this session, we show how the broad array of AWS services can be used to build world class video workflows that are resilient, cost effective, and easy to manage. Both live and file-based video workflows are highlighted, and advanced monetization techniques are discussed.

Every evening video streaming consumes over 70% of the internet's bandwidth, with demand only expected to increase as young households forego traditional pay TV for OTT services (whether live, on-demand, ad-supported, transactional, subscription, or a combination thereof). In this session senior tech architects from Netflix, Hulu, and Amazon Video discuss lessons and best practices around hosting largest scale video distribution workloads to enable high traffic consumption at demanding reliability requirements. You will also hear from AWS experts on the latest developments in cloud-based video processing, distribution, and personalization for both live and on-demand streaming.

End users expect to be able to view static, dynamic, and streaming content anytime, anywhere, and on any device. Amazon CloudFront is a web service that accelerates delivery of your websites, APIs, video content, or other web assets to end users around the globe with low latency, high data transfer speeds, and no commitments. In this session, learn what a content delivery network (CDN) such as Amazon CloudFront is and how it works, the benefits it provides, common challenges and needs, performance, recently released features and examples of how customers are using CloudFront. You will also learn about recustomizing content delivery through AWS Lambda@Edge - a serverless compute service that lets you execute functions to customize the content delivered through CloudFront.