51
© 2016, Amazon Web Services, Inc. or its Affiliates. All rights reserved. November 28, 2016 Disaster Recovery and Business Continuity for Systemically Important Financial Institutions Felix Candelario, Solutions Architect Benjamin Feldon, Solutions Architect FIN302

AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

Embed Size (px)

Citation preview

Page 1: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

© 2016, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

November 28, 2016

Disaster Recovery and Business Continuity for Systemically

Important Financial Institutions Felix Candelario, Solutions Architect

Benjamin Feldon, Solutions Architect

FIN302

Page 2: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

The takeaway

Systemically important workloads for Financial

Services are running on AWS

Disaster Recovery can be automated, auditable, &

elastic

You can leverage AWS for Disaster Recovery while

meeting your regulatory requirements

Page 3: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

Agenda

• Modernizing Disaster Recovery

• Trading refresher

• Customer Implementation

• Disaster Recovery demo

Page 4: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

Modernizing Disaster Recovery

Page 5: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

Current Disaster Recovery methods

Manual

Capital intensive

Infrequently tested

Page 6: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

Modernizing Disaster Recovery

AuditableAutomated Elastic

Page 7: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

Securities Exchange Commission

“having due regard for the public interest, the protection of investors, and the maintenance of fair

and orderly markets, to use its authority under the Exchange Act to facilitate the establishment of a

national market system for securities in accordance

with the Congressional findings and objectives set forth in Section 11A(a)(1) of the Exchange Act.”

[Release No. 34-73639; File No. S7-01-13]

Page 8: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

Regulation Systems Compliance and Integrity

• RegSCI requires

• “comprehensive policies and

procedures in place to help ensure

the robustness and resiliency of

their technological systems”

• “geographical diversity”

• “a two hour recovery goal would be

required for recovery facilities”

Page 9: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

Customer implementation

Page 10: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

Trading refresher

Page 11: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

Trading at Exchanges

Customers Broker/Dealers Exchange

Bid Ask

QTY Price QTY Price

300 25.10 500 25.12

400 25.09 600 25.13

150 25.08 300 25.14

900 25.06 250 25.15

B|50@$25.11

Bid Ask

QTY Price QTY Price

300 25.10 500 25.12

400 25.09 600 25.13

150 25.08 300 25.14

900 25.06 250 25.15

Bid Ask

QTY Price QTY Price

500 25.12

300 25.10 600 25.13

400 25.09 300 25.14

150 25.08 250 25.15

900 25.06

Bid Ask

QTY Price QTY Price

50 25.11 500 25.12

300 25.10 600 25.13

400 25.09 300 25.14

150 25.08 250 25.15

900 25.06

ACK

S|75@$25.11

Bid Ask

QTY Price QTY Price

50 25.11 75 25.11

300 25.10 500 25.12

400 25.09 600 25.13

150 25.08 300 25.14

900 25.06 250 25.15

Bid Ask

QTY Price QTY Price

50 25.11 75 25.11

300 25.10 500 25.12

400 25.09 600 25.13

150 25.08 300 25.14

900 25.06 250 25.15

Bid Ask

QTY Price QTY Price

50 25.11 25 25.11

300 25.10 500 25.12

400 25.09 600 25.13

150 25.08 300 25.14

900 25.06 250 25.15

F|50@$25.11

F|50@$25.11

Page 12: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

General exchange architecture

Customer Gateways Matching Engines Market Data Engines

Page 13: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

Demo workload: AEX

Page 14: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

AEX Properties

• 100 symbols listed

• Simulated 100 Broker/Dealers

• Each Broker/Dealer supports

100 customers

• Every customer sends a Buy

or Sell order for a random

symbol for a random quantity

every second

Our fictitious exchange – Amazon EXchange

DR Strategy

Page 15: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

AEX Tech Stack

AWS CloudFormation

Troposphere

Amazon EC2 Container Service

Weaveworks Weave Net

Amazon Route 53

Amazon Simple Storage Service (S3)

Infrastructure as code

Generates CloudFormation templates

Container management service

Provides container overlay network

Highly available and scalable cloud DNS service

Captures streaming data to S3Amazon Kinesis Firehose

Secure, durable, highly-scalable cloud storage

Page 16: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

FirehoseS3

us-west-2

Page 17: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

CloudFormation

template

S3

us-west-2

Firehose

Page 18: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

Recovery time objective & recovery point objective

DisasterRecovery point Recovery time

Data loss Down time

Page 19: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

FirehoseS3

us-west-2 RPO = 0

Page 20: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

CloudFormation

template

S3

us-west-2

Firehose

RTO ~ 7 minutes

RPO = 0

Page 21: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

Disaster Recovery Demo

Page 22: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

FirehoseS3

us-west-2

Page 23: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )
Page 24: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )
Page 25: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

S3

us-west-2

Firehose

Page 26: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )
Page 27: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

CloudFormation

template

S3

us-west-2

Firehose

Page 28: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )
Page 29: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )
Page 30: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

CloudFormation

template

S3

us-west-2

Firehose

Page 31: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )
Page 32: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

CloudFormation

template

S3

us-west-2

Firehose

Page 33: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

AEX Architecture

AWS cloud

virtual private cloud

Customer Gateway Cluster Matching Engine Cluster Market Data Cluster

Weave Net

S3Firehose

ECS Cluster ECS Cluster ECS Cluster

Route 53

Page 34: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

Weave Net

AEX Architecture

AWS cloud

virtual private cloud

Matching Engine Cluster Market Data Cluster

S3Firehose

ECS Cluster ECS Cluster

Route 53

Customer Gateway Cluster

ECS Cluster

Page 35: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )
Page 36: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

AEX Architecture

AWS cloud

virtual private cloud

Customer Gateway Cluster Matching Engine Cluster Market Data Cluster

Weave Net

ECS Cluster ECS Cluster ECS Cluster

Route 53 S3Firehose

Page 37: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )
Page 38: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

AEX Architecture

AWS cloud

virtual private cloud

Customer Gateway Cluster Matching Engine Cluster Market Data Cluster

Weave Net

S3Firehose

ECS Cluster ECS Cluster ECS Cluster

Route 53

Page 39: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )
Page 40: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

AEX Architecture

AWS cloud

virtual private cloud

Customer Gateway Cluster Matching Engine Cluster Market Data Cluster

S3Firehose

ECS Cluster ECS Cluster ECS Cluster

Route 53

Weave Net

Page 41: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )
Page 42: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )
Page 43: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )
Page 44: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

Conclusion

Page 45: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

CloudFormation

template

S3

us-west-2

Firehose

RTO ~ 7 minutes

RPO = 0

Page 46: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

AWS

CloudFormationCloudFormation

template

Source code

AWS

CodePipeline

Modernizing Disaster Recovery

Assets

Automated

testing results

Scheduled

Page 47: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

Benefits of modernized Disaster Recovery

• Elastic

• Auditable

• Reusable

• Easy geolocation

• Reduced attack surface

Modernizing Disaster Recovery

AWS

CloudFormationCloudFormation

template

Source code

AWS

CodePipelineAWS cloud

virtual private cloud

Customer Gateway Cluster Matching Engine Cluster Market Data Cluster

Weave Net

Assets

Automated

testing results

Scheduled

Page 48: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

Process of modernizing Disaster Recovery

• Understand your workload

• Evaluate statefulness

• Select and monitor replication techniques

• Architect• Infrastructure as code

• Refactor where necessary

• Rehydrate state

• Test

• Automate

Modernizing Disaster Recovery

AWS

CloudFormationCloudFormation

template

Source code

AWS

CodePipelineAWS cloud

virtual private cloud

Customer Gateway Cluster Matching Engine Cluster Market Data Cluster

Weave Net

Assets

Automated

testing results

Scheduled

Page 49: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

Thank you!

Page 50: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

Remember to complete

your evaluations!

Page 51: AWS re:Invent 2016: Disaster Recovery and Business Continuity for Systemically Important Financial Institutions (FIN302 )

Related Sessions