Hi everyone my name is Hasan and welcome to the webinar how to use Amazon Linux workspaces for agile development to introduce myself a little bit I’m the lead product manager for Amazon workspaces for more than four years I’ve been working at Amazon building technologies and solutions that make it easy for enterprises to effectively build test and deploy services.
Of any size by simply using an internet connection and they use their internet connection to access their AWS cloud resources like ec2 s3.
And EBS while these enterprises have been using a lot of these server based infrastructure to serve their end-users with web applications and other artifacts there has been a huge requirement in the field where the desktops were still arcane people were still using Hardware laptops Hardware desktops and then they started using VDS where they were using their own managed infrastructure the issue with all of these infrastructure deployments was that they were expensive they were hard.
To recycle and above all the security breach risk was so high that enterprises were always scared of a new data breach so come Amazon workspaces we started to develop a solution where enterprises don’t have to worry about infrastructure they don’t have to go through longer cycles of image management or go through longer Hardware recycle cycles and now I am focused on providing developers with desktop solutions.
That get them started fast so they can develop software quickly these solutions.
Need to be easy to use and above all they need to be well integrated with the existing development tools so introduced Bernard first of all we will cover why Amazon Linux workspaces is a fit solution for.
Enterprises how does that fit into their picture and how easy it is to manage these Amazon Linux workspaces when you are talking about deploying them in your enterprises then we will cover a little bit about what our customers are doing with Amazon Linux workspaces how they’re using it what type of.
Benefits they’re providing to them we will switch over to go a little bit more.
Detail around what exactly is inside these workspaces what are the stock images what type of modifications can you do.
What type of capabilities do you get when you deploy in Amazon Linux workspace then we will go into image management so one of the biggest.
Things that we see customers have a lot of you know hard time doing is managing their images.
There’s just so many of them there’s just so many different personas that they need to address there’s so many different developers so many different employees that they need to do the images for then we will talk about specifically the developers that exist in your organization how their needs are aligned with what you.
Are going to do in terms of image building and then we.
Will have a pretty detailed demo of establishing those images so you can create customized bundles for workspaces which you can then use to launch a lot of new workspaces so let’s.
Get started so first of all Amazon Linux workspaces bring the same benefit of AWS cloud to your doorstep so when we talk about laptops desktops and VD eyes all of them require a significant amount of capex a significant amount of investment upfront that you have to do and then the reward is more like you know three years or four years down the road with workspaces it’s.
Pay-as-you-go you launch a instance you pay for it you terminated you stop getting charged for it so there’s a huge benefit that you don’t have really have.
Into you know managing your infrastructure or ordering like you know six months in advance so there’s a big benefit there second of course simplicity and ease of management is probably one of the key factors that you will get when you’re using any cloud service so when you.
Look at Amazon workspaces they are very very easy to deploy you can go into the workspaces console and with a few clicks you have a desktop ready in minutes as soon.
As the desktop is ready it’s connected to your directory or your domain and which means that you can use either your existing IT.
Management tools or you can create new tools to manage these instances and by management I mean you have to set up access you have to set up security policies and a lot of other things the third thing very important is security of course Security’s our priority zero so we make sure that we have done a good job of providing a secure parameter parameter for your workspaces so every workspace.
Gets lost in the cloud in your V PC a user accessing that workspace does not have access to the data directly because the data is in the cloud and all they’re seeing is a pane of glass to which they can interact so they’re seeing a stream.
Of that workspace that is actually sitting in the cloud and they’re interacting with that workspace so very very hard and security where you cannot take the data out and you cannot have you know bad actors in your organization finally we have a very good integration with AWS development tools and other existing development tools so a workspace essentially is a.
Desktop in case of Linux workspaces it’s a Linux desktop.
That means that any of your existing development tools that are compatible.
Will continue to work with it and at the same time since this workspace is sitting in your V PC you can connect your EC tool and other AWS resources on which your.
Developers are doing their work.
Day-in day-out so second important thing is.
Developers to start developing so imagine two scenarios you have generally in a lot of organizations they have both on campus developers and then they have offshore developers when you talk about on-campus developers the day that they join.
Generally it takes a day or two to even get their first laptop and during that time they are not working so with Amazon Linux workspaces you can actually automate provisioning of these workspaces through an.
API and what that impacts is that your developers can literally walk.
Into the office they request a workspace and by the time they’ll get to their desk in like 15-20 minutes they will have a workspace provision for them on which they can start coding then the third thing that customers.
Really really look for is security and compliance so security is itself a big task to perform you have to harden the parameters you have to encrypt your data and you have to make sure that there are no leaks so as I mentioned earlier that we ensure that your data is staying in your V PC of course because the workspace.
And then the compliance piece so recently there has been a lot of discussions and efforts about gdpr about other compliance efforts and it’s hard it’s hard to make sure that your systems are compliant with a certain Authority so with workspaces you get HIPAA compliant.
For example you get PCI you get GD P R so we do all that heavy lifting for you so you don’t have to worry about that and as a result of all these three things you are resulted in an IT department that is very agile that can provide service faster that can reclaim Hardware faster and in this case the hardware is.
Workspaces you know in the cloud they can claim that workspace very easily by just clicking a terminate button and that makes them to focus more on higher-level tasks in terms of understanding their users understanding their use cases and how they can serve their users better and speed up their processes let’s go a little bit deeper into what is inside the Amazon.
Linux workspace so inside an Amazon Linux workspace first of all it’s prepared for the cloud it is built inside the cloud for the cloud and what that.
Means is we took the Amazon Linux 2 based kernel and we modified it into a desktop so Amazon Linux 2 provides an awesome army 4 server and they have different flavors of those um and what we do is that we take that army and we put.
Make it into a desktop army and basically rendered now.
There’s certain capabilities of this additional desktop army so first of all of course needless to say that once it is built for the cloud the resource utilization of this army is very very low we make sure that the CPU usage is low we made sure that it’s.
You know giving you more CPU then use the image using more CPU similarly Allen’s on Linux Works business support docker so you can actually deploy code even faster if you have darker pipelines or related images you can actually run them on top of this then the second important piece of course is enterprise readiness once we start talking about developers they are not isolated they are also working in an enterprise so they also need to have the same degree.
And level of support that other employees get when they’re working in an enterprise and what I mean by that is that the image is always updated its security hardened the maintenance.
Updates are flowing through and of course the most important part is that we keep the kernel itself five years of support so that you know when you’re developing applications they don’t break backward compatibility and finally this.
Is the main Delta when we are talking about desktop image that in the desktop image.
You generally need a faster development of packages you need the bleeding edge of the packages to be on your desktop but at the same.
Time you want your server environment to stay consistent and stay in the long term long term support mode so that’s exactly what we do we have Amazon Linux core and extras repository when we are talking about Amazon the next.
Core repository all of the packages in there are LTS so that you can use them for your server workloads and they are mostly server workload packages and then we have the extras repository where you will find the most of the bleeding-edge packages most of the desktop packages that we prepare and all of this comes at no additional cost so you just pay for the workspace you don’t.
Pay for the Amazon Linux on top of it so let’s go into image management so the main thing that we want to cover today is how do you customize your images how do.
You make sure that you can scale your images and how can you set your images in such a way that they can be repeated again and again so every.
Time you’re launching a new workspace you don’t have to go modify it every time so a big benefit comes from just having that you.
Know or is not gold an image and preparing it in such a way that you can repeat that process again and again so first of all the main thing to remember here is.
That you always should have a base image and this base image is really just connected to your ad it’s connected to your corporate network it can have the certificates that your corporate network requires and those type of things please keep in mind that these are not are provided vanilla base image this is your base image where you are adding your network connectivity and access controls in.
It then once you have this base image a best practice is to create several you know subsequent images with different software applications for different types of developers so frequently when you are in an organization you will notice that there are different types of developers some developers are doing Java work some are doing C++ work so you need probably a different image for all of these different type of developers so the point is.
That you have a base image and then you create these different types of images for different developers.
And finally of course you want to keep your images continuously maintained and by continuous maintenance.
It means that you are continuously upgrading your image to the latest kernel to the latest security patch and latest software if you have some sort of software enforcement and there’s the need for this is there.
Because image is a static artifact whereas a workspace is a living artifact so.
When you’re when you have a static artifact of this image you need a way to upgrade it so it doesn’t become outdated so it doesn’t become vulnerable because there’s been so many software updates so let’s talk a little bit about what developers types are generally existing in the enterprise there are a lot of developer types of course that do different sorts of developments I hand-picked four of the.
Top ones that I believe are most common occurence even here at Amazon we have a huge set of developers who work on these type of applications day-in day-out so.
Let’s talk a little bit about the dotnet developer so a.net developer requires dotnet core and this is a recently launched a product that you know was launched for Amazon Linux which lets you write code for dotnet then you.