EJ Grom, The Group, LLC Trang Le, EPA SDWIS State in the Cloud GA experience hosting SDWIS State in Amazon Cloud EJ Grom, The Group, LLC Trang Le, EPA U.S. Environmental Protection Agency

U.S. Environmental Protection Agency Overview What is Cloud computing? Why Cloud Computing for SDWIS State? Georgia SDWIS State on Amazon Cloud Migrating to Cloud Contract Support U.S. Environmental Protection Agency

U.S. Environmental Protection Agency Cloud Computing U.S. Environmental Protection Agency 3

What is Cloud Computing? Cloud Computing is a general term used to describe a new class of network based computing that takes place over the Internet a collection/group of integrated and networked hardware, software and Internet infrastructure (called a platform). Using the Internet for communication and transport provides hardware, software and networking services to clients U.S. Environmental Protection Agency

U.S. Environmental Protection Agency Cloud Computing The platform provides on demand services, that are always on, anywhere, anytime and any place. Pay for use and as needed, elastic scale up and down in capacity and functionalities U.S. Environmental Protection Agency

Cloud Service Providers Amazon Web Services ( AWS ) Microsoft Azure Rackspace U.S. Environmental Protection Agency

Why Cloud Computing for SDWIS State? Last delivery of SDWIS State product suite in 2012 – Java 6/7 Current SDWIS State not compiled for Java 8 or later (user support bulletin January 21, 2016) preliminary testing indicates key functions of SDWIS/FedRep, SDWIS/STATE and other SDWIS applications work with Java 8 but there are known issues with at least the reporting functions of these applications (i.e. the SDWIS/STATE Compliance Determination reports and SDWIS/FedRep reports and job listing/details functions) with update to Java 8 Increased risk each year to update SDWIS State to latest version of Java U.S. Environmental Protection Agency

Why Cloud Computing for SDWIS State? Cont’d States servers are vulnerable using a JVM version 7 as opposed to latest version SDWIS State on Cloud server isolates the java vulnerability off the State’s network/infrastructure. Keeps data secure (data centers provide security) Keep running SDWIS State until move to SDWIS Prime Allow state to continue use of their interfacing applications until move to SDWIS Prime Gives state time to make transition to SDWIS Prime U.S. Environmental Protection Agency

Georgia SDWIS State on Amazon Cloud Moved SDWIS State to cloud in 2010 Lower IT infrastructure cost primary driver Running SDWIS State 3.33 Product Suite on Amazon Web Services Oracle Database as service Java 7/Tomcat 6 with Apache and Nginx GA’s Non-SDWIS apps deployed from GA IBM Cloud Servers connect to/extract data from SDWIS/STATE DB on Amazon Cloud U.S. Environmental Protection Agency

Georgia SDWIS State Cloud Environment Georgia has control/ownership over its SDWIS environment GA has three cloud servers (database server, application server and small Linux server) Oracle as Services provide Oracle patches/updates Nightly DB backup Backup saved for default of 7 days but # days saved is configurable (e.g. 15, 30, 60 days) Servers support both test and production environments for SDWIS State and SDWIS product suite (FedRep, SDWIS Bridge, XML sampling etc.) Cloud Linux server is used for the public facing application for Drinking Water Watch U.S. Environmental Protection Agency 10

U.S. Environmental Protection Agency Georgia SDWIS State Before Cloud U.S. Environmental Protection Agency

U.S. Environmental Protection Agency Georgia SDWIS State on Cloud Internet SDWIS State on Amazon Cloud U.S. Environmental Protection Agency

Georgia SDWIS State Cloud Security VPN connection is set up for GA state user access to the system Amazon Cloud provides security based on their certification level (FISMA compliant) Java Security risk mitigated by Amazon data center physical security VPN user access Firewall rules Use of proxy web servers U.S. Environmental Protection Agency

U.S. Environmental Protection Agency Georgia SDWIS State Cloud Costs GA medium size state and data storage costs are based on data size Costs for Amazon are being paid by GA directly Licensing for Oracle Database Service included in Amazon cost Amazon costs approximately $600 per month for GA set up U.S. Environmental Protection Agency

U.S. Environmental Protection Agency Georgia SDWIS State Cloud Support SAIC continuing to provide Administrative support (have had minor issues so far) SAIC handling operations and maintenance for GA but could be done by state SAIC provides additional support for trouble shooting U.S. Environmental Protection Agency

Migrating to Cloud Benefits States have control over their SDWIS environment once setup Same database server could host multiple smaller schemas – e.g. States with smaller databases could share a DB server Single app server can host multiple instances of an application (e.g. GA’s Amazon app server hosts its Production and Test instances of SDWIS applications) Eliminates stand alone server need in state Costs for state infrastructure moved to Cloud costs and contract support costs More and possibly quicker access to contractor support than state IT support in some cases U.S. Environmental Protection Agency

U.S. Environmental Protection Agency Migrating to Cloud Cost Considerations Costs are based on usage as well storage needs and number of servers needed or different set ups Each state needs will be dependent on size and system needs (add on applications and format for the system) Database Licensing for Oracle or SQL Server on Amazon Cloud can be through Amazon or bring own license U.S. Environmental Protection Agency

U.S. Environmental Protection Agency Contacts Trang Le – Systalex Program Implementation Task Lead Le.Trang@epa.gov (202-564-1572) Roger Howard – Systalex Alt-COR Howard.Roger@epa.gov (202-564-9907) U.S. Environmental Protection Agency

U.S. Environmental Protection Agency Questions ???? U.S. Environmental Protection Agency