In this session, we discuss the best practices and approaches for managing your Microsoft Windows-based infrastructure on AWS. We describe the AWS services that can help you manage Windows servers at scale and realize the maximum benefit of the cloud. In addition, we show you how to build simple and effective solutions to manage logging, configuration drift, inventory, licensing, and more.

1. P U B L I C S E C T O R
S U M M I T
Washingt on D.C.

2. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Operationalizing Microsoft
Workloads
3 0 1 0 2 8
Mike Colson
SA Manager
WWPS – Department of
Defense
Jason Opdycke
Sr. Solutions Architect
WWPS – Department of Defense

3. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Agenda
Infrastructure
provisioning
Configuration
management
Governance &
compliance
Monitoring &
performance
Resource
optimization

4. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Infrastructure
provisioning
Configuration
management
Governance &
compliance
Monitoring &
performance
Resource
optimization

5. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
What are the steps to build an environment?
AWS
CloudFormation
Availability Zone
Private Subnet
Availability Zone
Private Subnet
Remote
Users
IIS
App
IIS
Web
IIS
App
IIS
Web
AWS
Directory
Service
AWS
Directory
Service
MS
SQL
MS
SQL

6. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
AWS CloudFormation
• Automated
• Repeatable

7. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
AWS Quick Starts
https://aws.amazon.com/quickstart/

8. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Infrastructure
provisioning
Configuration
management
Governance &
compliance
Monitoring &
performance
Resource
optimization

9. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Managing your Windows instances
Amazon Elastic
Compute Cloud
(Amazon EC2)
AWS Systems Manager
Run Command
AWS Systems Manager
Session Manager
Tools Tasks Target

10. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Running PowerShell
AWS Systems Manager
Run Command
AWS Systems Manager
Session Manager
InteractiveNon-interactive
Good for bulk administrative changes Good for full, interactive access

11. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Secure remote configuration management
Availability Zone
Web security group
Private subnet
Accept traffic from SSM
WEB2
WEB1
AWS administrator
Corporate data center
AWS Systems Manager
Amazon S3
bucket
SNS topic Amazon CloudWatch
metric
Amazon
IAM policy

12. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T

13. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Patching Microsoft Windows in the cloud
Up-to-date
instances
Out-dated
instances
AWS Systems Manager
Maintenance Windows
AWS Systems Manager
Patch Manager

14. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
AWS Systems Manager
Maintenance Windows
AWS Systems Manager
Patch Manager
• Scan instances for missing patches
Create recurring schedules to perform
administrative tasks
Create baselines that include
rules for auto approving patches
Apply missing patches individually
or to bulk instances using tags Integrates with AWS Systems Manager
Run command, Automation, AWS
Lambda, AWS Step Functions

15. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Keeping your golden images up to date
Up-to-date AMIOut-dated AMI

16. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Simplify common IT tasks
Support for Run command, Lambda functions, AWS APIs
Express your workflow as automation steps in a JSON-
based document

17. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T

18. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Infrastructure
provisioning
Configuration
management
Governance &
compliance
Monitoring &
performance
Resource
optimization

19. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Visibility into Cloud Resources and Applications
Service and application availability
Monitor individual systems and applications
Detect and Troubleshoot problems
Set-up monitoring infrastructure and systems

20. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Monitoring Windows workloads using Amazon
CloudWatch
Monitor and Manage AWS, hybrid, and on-premises applications and infrastructure resources.
Get Visibility
• Windows Performance Counters
• IIS Logs, SQL Server Logs,
custom application log
Monitor
• High resolution alarms
• Custom dashboards
Take Action

21. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Observability for N-tier .NET applications

22. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Amazon CloudWatch Application Insights for .NET &
SQL Server
Machine learning based
anomaly detection for
metrics and logs
Visualize root cause with
Amazon CloudWatch
Automatic Dashboards
Improved
customer experience
Easily and quickly detect and diagnose common problems with .NET and SQL Server
applications

23. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Examples
• SQL Server errors such as Failed backups, Scheduler deadlocks
• .NET application problems such as Memory leaks, custom log errors
• Elastic Load Balancer such as latencies due to high CPU on application server

24. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T

25. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Getting Started
Limited Preview:
https://pages.awscloud.com/cloudwatch-applicationinsights-preview.html

26. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Infrastructure
provisioning
Configuration
management
Governance &
compliance
Monitoring &
performance
Resource
optimization

27. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Keeping inventory
Amazon EC2
Tools Items Target
AWS Systems
Manager Inventory

28. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
AWS Systems Manager
Inventory
Enables you to manage application assets, track licenses,
monitor file integrity, discover applications …
Collects information about your instances and the
software installed on them

29. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Managing configuration drift
Amazon EC2
Tools Tasks Target
AWS Systems Manager
State Manager

30. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
AWS Systems Manager
State Manager
Amazon EC2 instances or on-premises instances
Configuration management
Configuration policies

31. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T

32. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Infrastructure
provisioning
Configuration
management
Governance &
compliance
Monitoring &
performance
Resource
optimization

33. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Fine-tuning your Microsoft workloads in the cloud
What to fine tune?
Amazon EC2
Target
AWS Trusted Advisor
Tools

34. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Core checks and
recommendations available to all
AWS customers
Security
AWS Service limits
Full Trusted Advisor benefits
available with business or
enterprise support plans
Security
AWS service limits
Cost optimization
Performance
Fault tolerance
AWS Trusted Advisor

35. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Infrastructure
provisioning
Configuration
management
Governance &
compliance
Monitoring &
performance
Resource
optimization
Summary
AWS
CloudFormation
AWS Systems Manager
AWS Systems Manager
AWS Trusted Advisor
Amazon CloudWatch Amazon CloudWatch
Application Insights for .NET
and SQL Server (preview)

36. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Next steps
Apply what you’ve learned
• Revisit and assess your existing lifecycle management process
• Reinvent lifecycle management on AWS by leveraging the tools and services we discussed
Learn more
• Attend other AWS for Microsoft sessions
• 301024 - Microsoft SQL Server Migration Strategies
• 301025 - Design, Deploy, and Optimize Microsoft SQL Server on AWS
• 301027 - Microsoft Active Directory Deep Dive
• 301029 - Containerize Legacy .NET Framework Web Apps for Cloud Migration
• 295504 - Best Practices for Migrating your Microsoft Workloads to AWS
• Review resources
• Windows on AWS - https://aws.amazon.com/windows/
• Reach out to AWS or Partner for assistance if necessary

37. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Thank you!
© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Mike Colson
SA Manager
WWPS – Department of
Defense
Jason Opdycke
Sr. Solutions Architect
WWPS – Department of Defense

38. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T