© 2014 Amazon Web Services, Inc. and its affiliates. All rights reserved. Developing on AWS © 2014 Amazon Web Services, Inc. and its affiliates. All rights reserved. Copyright © 2014 Amazon Web Services, Inc. and its affiliates. All rights reserved. This work may not be reproduced or redistributed, in whole or in part, without prior written permission from Amazon Web Services, Inc. Commercial copying, lending, or selling is prohibited. Questions? us at

© 2014 Amazon Web Services, Inc. and its affiliates. All rights reserved. Developing on AWS © 2014 Amazon Web Services, Inc. and its affiliates. All rights reserved. C2S Region Overview Instructor Name

© 2014 Amazon Web Services, Inc. and its affiliates. All rights reserved. Developing on AWS C2S Region Module Objectives After completing this module, learners will be able to:  Describe the architectural differences between the C2S Region and other Amazon Regions  Understand what features are available in the C2S Region  Understand which technologies are available for accessing VPCs in the C2S Region

© 2014 Amazon Web Services, Inc. and its affiliates. All rights reserved. Developing on AWS C2S Region OVERVIEW C2S Region

© 2014 Amazon Web Services, Inc. and its affiliates. All rights reserved. Developing on AWS C2S Region | Features of C2S Cloud “Air-gapped” Region – no Internet connection  Available on JWICS (JWICS = Internet for purposes of training & documentation)  Available to all 17 members of the Intelligence Community Most API interaction w/ Region utilizes AWS Secure Token Service (STS) via customer’s Federated Identity Broker 3AZ (Availability Zone) architecture  2 EC2 Availability Zones; 1 dedicated to Amazon S3 storage Amazon S3 available at all 3 Fault-Isolated Locations/Availability Zones Overview

© 2014 Amazon Web Services, Inc. and its affiliates. All rights reserved. Developing on AWS C2S Region | Security Region will be accredited  Moderate/Moderate/Moderate via ICD503 Customers will leverage the Region accreditation via reciprocity as the foundation for workload accreditation  Coordinate with the C2S PMO security POC for guidance Overview

© 2014 Amazon Web Services, Inc. and its affiliates. All rights reserved. Developing on AWS C2S Region | Overview Initial Operating Capability (July 2014 *) Simple Storage Service (Amazon S3) Elastic Compute Cloud (Amazon EC2) Elastic Block Storage (EBS) Amazon CloudWatch Elastic Load Balancer (ELB) VM Import Management Console Billing Platform Service APIs and SDKs Direct Connect not available at this time Virtual Private Cloud No EC2 Classic Interact w/ VPCs via Internet (JWICS) Gateway or VPN Gateway

© 2014 Amazon Web Services, Inc. and its affiliates. All rights reserved. Developing on AWS C2S Region | Overview Full Operating Capability (January 2015 *) Elastic Map Reduce (EMR) Elastic Map Reduce w/ HBase Relational Database Service (RDS) w/ mySQL Amazon CloudHSM Simple Queue Service (Amazon SQS) Simple Workflow Service (Amazon SWF) Simple Notification Service (Amazon SNS) AWS CloudFormation CloudTrail