Microsoft Workloads on AWS Best Practices and Patterns for Architecture, Migrations, and Licensing

Transcription

1 Microsoft Workloads on AWS Best Practices and Patterns for Architecture, Migrations, and Licensing Andrew Reay, Solutions Architect Amazon Web Services 2016, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

2 What will we cover today? Microsoft and AWS Architecture: Foundations Migration: Collateral, Tools and Options Licensing: Considerations and Options Resources: For Partners This is a 200 Level session. Assumes an introductory level knowledge of AWS and Microsoft technologies.

3 AWS and Microsoft Dedicated team for MS & Windows workloads Launched Windows Server in 2008 The team provides: Amazon Machine Images, EC2Config, Drivers, Patching Getting Started Guides, Documentation Whitepapers, Reference Architectures, Quick Starts Microsoft FAQ including licensing guidance MS workloads are supported on AWS Contact the team at: Our customers have successfully deployed virtually every MS application available Find resources at:

4 Regions & Availability Zones 12 Regions (2016: Ohio, India, UK, Canada) 33 Availability Zones 54 Edge Locations AZ Transit AZ AZ AZ AZ Transit

5 Reliability: Easily build highly available applications A VPC and many features of that are regional many benefits Use multiple AZs to host solutions Exceptional RPO and RTO Easier than developing, testing and maintaining DR Use AWS services - Auto Scaling, Elastic Load Balancing Consider reserving capacity, not just about discounts If you can t host across multiple AZs Can still achieve very good RPO and RTO Can the DB be replicated synchronously Zero data loss? Use Route 53, Health Checks, AMIs, EBS Snapshots, S3 etc. to be prepared for a failover. Think blue/green

6 Security: AWS Shared Responsibility Model Customers Platform, Amazon Applications, Inspector Identity & Access Management AWS CloudTrail Operating System, Network & Firewall Configuration Client- side Data Encryption AWS Foundation Services Customer content Server- side Data Encryption Network Traffic Protection Compute Storage Database Networking AWS Global Infrastructure AWS CloudHSM Availability Zones Regions AWS Config AWS KMS AWS IAM Edge Locations Customers are responsible for their security and compliance IN the Cloud AWS is responsible for the security OF the Cloud

7 AWS Quick Starts Single-click deployments Highly-available Extensive documentation Based on customer deployments & AWS best practices Fully functional, not demos Included: SQL Server with WSFC SharePoint, Lync, Exchange PowerShell DSC, RD Gateway Active Directory, ADFS, Direct Access

8 Use the tools available Configuration Monitoring AWS Config Amazon EC2 Run Command AWS Tools for PowerShell AWS CloudWatch AWS CloudTrail Develop and Deploy.NET SDK AWS Toolkit for Visual Studio AWS CodeDeploy AWS Elastic Beanstalk AWS CloudFormation AWS OpsWorks

9 AWS Directory Service Simple AD Managed directory powered by Samba 4 Active Directory Compatible Server Supports user accounts, group memberships, domain-joining Amazon EC2 instances, and more Microsoft AD Managed directory powered by Microsoft Active Directory Supports trusts and integrates with RDS SQL Server Up to 50,000 users AD Connector Proxies directory requests to on-premises environment Users can access AWS resources and applications with existing corporate credentials

10 Active Directory Common Options: Host a resource domain in AWS Establish trust with an on-premise directory for SSO Extend AD into AWS Specify your DNS servers to be used in your VPC

11 SQL Server on AWS Wide array of choices Fully managed services Enterprise-grade security 99.95% availability Flexible and scalable

12 SQL Server High Availability (HA) Synchronous-commit Synchronous-commit Primary Replica Secondary Replica Primary: WSFC: AG Listener: Private Subnet Automatic Failover AG Listener: ag.awslabs.net Primary: WSFC: AG Listener: Private Subnet Availability Zone 1 Availability Zone 2

13 SQL Server HA with Readable Replica Synchronous-commit Synchronous-commit Asynchronous-commit Primary Replica Automatic Failover Secondary Replica 1 Secondary Replica 2 (Readable) File Server Witness AG Listener: ag.awslabs.net Reporting Application Private Subnet Private Subnet Availability Zone 1 Availability Zone 2

14 Sample MS Architecture Public Subnet VPC NAT Gateway IIS Web Availability Zone IIS App Private Subnet MS SQL AWS Directory Service VPC Endpoint Amazon S3 Internet Gateway RDGW Always On Availability Group Virtual Private Gateway VPN Corporate Office Remote Users RDGW AWS Direct Connect IIS Web IIS App MS SQL VPC NAT Gateway Public Subnet Private Subnet AWS Directory Service Availability Zone

15 AWS Cloud Adoption Framework Business Perspective Platform Perspective Planning, creation, management, and support for your cloud environment. Maturity Perspective People Perspective Process Perspective Guidance for establishing, developing and running AWS environments. Operations Perspective Security Perspective Structure where business and IT can work together toward a common strategy and vision. AWS Cloud Adoption Framework:

16 AWS Migration Patterns (Path to Cloud) Do Not Move Discover, Assess (Enterprise Architecture and Applications) Decommission Design, Build AWS Environment Determine Migration Path Vendor S/PaaS (if available) Move the App Infrastructure Move the Application Replatform (typically legacy applications) Refactor for AWS Refactor for AWS Lift and Shift (Minimal Change) Application Lift and Shift Rearchitect Application Rebuild Application Architecture Determine Migration Process Determine Migration Process Recode App Components Recode Application AWS VM Import 3 rd Party Tools Manually Move App and Data Org/Ops Impact Analysis Plan Migration and Sequencing 3 rd Party Migration Tool Identify Ops Changes Migration and UAT Testing Manually Move App and Data Architect AWS Environment and Deploy App, Migrate Data Change Management Plan Tuning Signoff Cutover Operate

17 Migration Options AWS VM Import/Export AWS Import/Export Snowball AWS Database Migration Tool AWS Management Portal for vcenter AWS Systems Manager for Microsoft System Center VMM AWS Data Pipeline Partner Tools

18 Windows Server 2003 Migration Options on AWS Import and stay with Server 2003 until ready Import and upgrade in-place to a Modern OS Re-write the application Replace with AWS managed services Keep a replica of a legacy environment

19 Microsoft Products on Amazon EC2 AWS provided License costs included in EC2 costs Microsoft Windows Server Microsoft SQL Server - Standard, Web & Enterprise * Leverage MS License Mobility Program Microsoft Windows Server (AWS provided) Microsoft SQL Server Microsoft Remote Desktop Services (User CALs) Microsoft Exchange Server Microsoft SharePoint Server Microsoft System Center Microsoft Dynamics products Plus others ** AWS + BYOL Leverage EC2 Dedicated Host - Software Assurance & License Mobility not needed Microsoft Windows Server Microsoft Windows Desktop 7, 8 etc. ** Microsoft Office MSDN Microsoft SQL Server Microsoft Remote Desktop Services (User CALs) Microsoft Exchange Server Microsoft SharePoint Server Microsoft System Center Microsoft Dynamics products Plus others ** Full BYOL * Some AWS Regions and SQL Server versions only ** See the licensing section of aws.amazon.com/windows/faq for full details

20 Licensing Continuum AWS Provided AWS + BYOL Full BYOL EC2 manages licensing compliance & cost No CALs required PAYG or reserved pricing Save with right-sizing Save with variable workloads Save with efficiencies EC2 manages Windows Server licensing and compliance PAYG or reserved pricing Import and use your own MS licenses & CALs Requires active Software Assurance and License Mobility You manage licensing costs and compliance for your software Save through re-use of existing licenses Import and use your own MS software Software Assurance & License Mobility not needed Use Dedicated Hosts You manage all licensing costs and compliance Save through re-use of existing licenses Customers always retain responsibility for managing compliance with the terms of their licenses.

21 EC2 Dedicated Host What is it? A physical EC2 server dedicated to your use Specified in terms of physical processors and cores Allocate and Release On-Demand Reserve capacity for a term

22 EC2 Dedicated Hosts Benefits: Licensing and Compliance Host ID = h-123abc Sockets = 2 Physical Cores = 20 Use per-socket or per-core licenses AWS Config: data source for license reporting Tagging your instances helps Enable compliance through controlling instance placement on hosts over time Enables BYOL Microsoft licenses without Software Assurance

23 Partner Resources and Benefits 1. Content in APN Portal for partners

24 Partner Resources and Benefits 2. Opportunity Support from AWS

25 Partner Resources and Benefits 3. Microsoft Partner Competencies SharePoint, Exchange Public designation on AWS Website and AWS Partner Directory Use of AWS Competency Logo in marketing tools Preferred access to GTM funding Selective eligibility to customer opportunities Preferred access to Market Development Funds

26 Partner Resources and Benefits 4. POC Program Funding for Partner Professional Services AWS Promotional Credits Free AWS usage to support customer trials Push to Pilot credits For qualified partners

27 Partner Resources and Benefits 5. AWS Test Drive Your Microsoft Solution Stack,Natively on the Web Improves the Time to Value for customers Instant Access to solutions for PoC, testing & training Evaluate, procure, deploy and use solutions Quickly, easily, friction free Windows 2003 Live Migration Bleecker - Skype for Business / Lync Voice Test Drive F5 BIG-IP SharePoint Test Drive

28 Next Steps Attend the Sydney Summit: Andrew Mitchell: Running your Enterprise Windows Workloads on AWS Peter Stanski & Daniel Zoltak: Moving MS Apps using Containers George Watts: Strategic Approaches to AWS Enterprise Application Migration Speak to your Partner Manager about Microsoft Workloads on AWS Learn more at Sign up for free at Contact the Microsoft at AWS team: Conor McNamara: Demystifying Cloud Economics

29 Thank You!