aws re:invent 2016: stop managing email infrastructure: move to amazon workmail (bap205)

33
© 2016, Amazon Web Services, Inc. or its Affiliates. All rights reserved. November 30, 2016 BAP205 Stop Managing Email Infrastructure: Move to Amazon WorkMail Pranesh Ramalingam, Senior Product Manager Thomas Paré, Senior Manager

Upload: amazon-web-services

Post on 22-Jan-2017

93 views

Category:

Technology


0 download

TRANSCRIPT

Page 1: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

© 2016, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

November 30, 2016

BAP205

Stop Managing Email Infrastructure:

Move to Amazon WorkMail

Pranesh Ramalingam, Senior Product Manager

Thomas Paré, Senior Manager

Page 2: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

What to Expect from the Session

• Overview of WorkMail features and benefits

• Dive deep

• WorkMail storage encryption

• What’s New?

• Interoperability with Microsoft Exchange

• Email journaling on Amazon WorkMail

• IMAP support on Amazon WorkMail

• Support for Outlook 2016 on Mac

Page 3: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

A secure, fully managed business email and calendaring service

Page 4: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Managed business email and calendar service

• Eliminate up-front investments to license and provision on-premises email servers

• WorkMail automatically handles patches, back-ups, and upgrades.

• Integrates with your existing on-premise directory.

• As needs grow, add more users with a few clicks in the AWS Console

Page 5: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Enterprise grade security

Encryption using

customer managed

keys

Regional data

control

Secure mobile

access

Protection from

malware, spam, and

viruses

Page 6: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Anywhere access

From your PC/Mac From any browser From your phone

Page 7: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Microsoft Outlook on Windows

• Support for Outlook 2007, 2010, 2013, 2016

• Native support

• No additional software/plugins needed

• Autodiscover for easy setup

Page 8: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

MacOS support

• Support for Exchange Web Services (EWS) protocol

• Support for Outlook 2011 and Mac Mail

• Support for Outlook 2016 coming soon

• Email, calendaring, OOO rules and much more

Page 9: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Mobile device support

• Native mobile support through Exchange ActiveSync protocol

• Supported devices:

• iPhone, iPad

• Android

• BlackBerry 10

• Windows Phone

Page 10: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Mobile Device Management

• Policy support for:

• Password required

• Password strength

• Automatic screen lock

• Device encryption

• Remote wipe when device is lost or stolen

Page 11: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

WebMail client features

• Access to your email, contacts, and calendar

• Amazon WorkDocs integration

• Accessibility (support for screen readers &

keyboard-only usage)

Page 12: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Pricing and availability

• Pay-as-you-go

• Cost-effective -- $4/user/month for 50GB mailbox

• 30-day free trial for up to 25 users

• Currently available in US East (N. Virginia), US West

(Oregon), and EU West (Ireland) regions

Page 13: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Amazon WorkMail Encryption

Page 14: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Key hierarchy

Customer master key (AWS KMS) for your organization

Asymmetric key pair for each mailbox

Symmetric key for each mailbox item

Page 15: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Mailbox keys creation

Page 16: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Email encryption

Page 17: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Email decryption

Page 18: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Email journaling

Page 19: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

sent & received

emails

What is email journaling?

Admin

configure

journaling

addressArchiving Solution

add journaling

envelope and

sendAmazon WorkMail

Page 20: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Interoperability support with

Microsoft Exchange

Page 21: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Amazon WorkMail interoperability use cases

• Phased migration strategy

• Support globally dispersed teams

• Bolt on acquisitions

• Workforce fluctuations (seasonal workers)

Page 22: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Benefits of interoperability with Microsoft

Exchange

• Email routing between on-premises email environment and Amazon WorkMail

• Calendar free/busy lookups between on-premises email environment and Amazon

WorkMail

• Provide Amazon WorkMail users with a unified global address book containing all users,

groups, and resources

Page 23: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

AD Connector architecture

Availability Zone

Availability Zone

VPN

connection

corporate data center

AD

LDAP &

Kerberos

requests proxied

to on-premises

over VPN

AD Connector

proxy instance

AD Connector

proxy instance

Page 24: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Email routing in an integrated environment

On-premises environment Amazon WorkMail

example.comexample.comexample.awsapps.com

Forward to: [email protected]

Primary: [email protected] Alias: [email protected]

[email protected]:[email protected]

To: [email protected]

Page 25: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Calendar free/busy interoperability

On-premises environment Amazon WorkMail

example.com4. Free/busy lookup for Mary

with WM service account

john

1. Free/busy lookup for Mary

targetAddress:[email protected]

Primary: [email protected]: [email protected]

23

5

Page 26: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Unified Global Address Book

AD sync

AB lookups and

address resolution for

users, groups, and

resources

Admin

Manage users,

groups and

resources

Enable users on

Amazon WorkMail

Amazon WorkMail

Microsoft Exchange

Page 27: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

IMAP support

Page 28: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

IMAP support

• Extending the list of protocols supported by Amazon WorkMail

• Launching soon, limited preview starts today

• Integrate third-party applications (CRM solutions/ticketing solutions

etc.) with Amazon WorkMail

• Give users the option to use their favorite IMAP email clients

RPC

EWS

IMAP

ActiveSync

SMTP

Amazon

WorkMail

Amazon

Simple Email Service

Page 29: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Microsoft Outlook 2016 on Mac

Page 30: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Microsoft Outlook 2016 on Mac

• Highly requested feature on Amazon WorkMail

• Launching soon, limited preview starts today

• Support for email, calendaring, Out of Office rules and much more

• Native support; no plugins, no additional software or patches required

Page 31: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Features on Amazon WorkMail: Takeaways

• Available now in GA

• Interoperability with Microsoft Exchange (email routing & calendar free-busy

sharing)

• Email journaling

• Limited preview, contact [email protected]

• Interoperability with Microsoft Exchange (Access to Global Address Book)

• IMAP support

• Microsoft Outlook 2016 support

Page 32: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Thank you!

Thomas Pare – [email protected]

Pranesh Ramalingam – [email protected]

Page 33: AWS re:Invent 2016: Stop Managing Email Infrastructure: Move to Amazon WorkMail (BAP205)

Remember to complete

your evaluations!