Hosting .NET Applications on AWS - AWS Federal Pop-Up Loft

© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.1
Dmitry Kagansky
Senior Solutions Architect
Kagansky@amazon.com
Introduction to .Net on AWS

Agenda (first segment)
• Introduction to AWS
• Windows on AWS
• .NET on AWS
• PowerShell on AWS

What is AWS?
AWS provides a highly reliable, scalable, low-cost infrastructure platform in the
cloud that powers millions of businesses in 190 countries around the world.
Benefits
• Low Cost
• Elasticity & Agility
• Open & Flexible
• Secure
• Global Reach

What sets AWS apart?
Building and managing cloud since 2006
150+ services to support any cloud workload
History of rapid, customer-driven releases
22 regions, 69 availability zones, 150+ edge locations
69 proactive price reductions to date
Experience
Service Breadth & Depth
Pace of Innovation
Global Footprint
Pricing Philosophy
Ecosystem Thousands of consulting/system integrator & technology partners

Availability Zones
AWS Region
Availability Zone #1 Availability Zone #2 Availability Zone #3
Datacenter Datacenter
Datacenter Datacenter Datacenter Datacenter Datacenter Datacenter
Datacenter DatacenterDatacenter Datacenter
Transit Center #1 Transit Center #2

Windows on AWS

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Most Experience
11Years running Windows
workloads
Service offerings
175+
Global Reach & High Availability
69Availability zones spanning 21
geographic regions
With consistency
80,000
Capable of delivering up to
Security & Compliance
IOPS/
instance
HIPAA, FISMA, ITAR, EU Model Clauses
50+Compliance Certifications
SOC-1,2,3 FIPS, ISO
72price reductions since 2006
Customer Obsession &
Innovation
Improve TCO
WhyCustomersChooseAWSfortheir MicrosoftApplications

Innovation for Windows on AWS
KeyWindowslaunchessince2008
90+
40+
750+
instance types, 22 instance families
different AMIs for Windows workloads
Windows ISV listings
in AWS marketplace
Windows Deep Learning AMI
Hyper-V support in SMS
Application-consistent Snapshots through VSS
WS 2008 & SQL Server 2008
Visual Studio Toolkit
Microsoft SCOM plug-in release
AWS Directory Service
EC2 Dedicated Hosts (BYOL)
Microsoft SharePoint 2016 (Marketplace)
Windows Server 2008 R2
SQL Server 2008 R2
Windows Server 2003
SQL Server 2005
.NET SDK
Microsoft SCVMM Plug-in
Windows Server 2012
SQL Server 2012
AWS Tools for Windows PowerShell
Amazon RDS adds SQL Server
EC2 Run Command
EC2 Systems Manager
Windows Server & SQL Server 2016
EC2 Dedicated Instances (BYOL)
.NET on Lambda &
Codebuild
SAP instance on AWS 2012
Trusted Advisor
checks for Windows
SQL Server 2017 on EC2/RDS
X-Ray .NET SDK
CustomerAdoption
Windows for Lightsail
.NET Core & Powershell
on AL2/Ubuntu
2008 Today
.NET Core 2.0 Support
with Lambda & X-Ray
Windows Containers
.NET Core 2.1 Support

Compute

Amazon EC2 Instance Types
M5T3 H1D2 R5mR5 X1eX1 I3mI3 G3C5 F1P3 Z1 dmZ1dAmazon
Lightsail
Virtual
Private
Servers
General
Purpose
Burstable Big Data
Optimized
Dense
Storage
Memory Optimized Memory
Intensive
In-memory Bare Metal
High I/O
High I/O Graphics
Intensive
Compute
Intensive
FPGAGeneral
Purpose GPU
Compute and Memory
Intensive
EC2 Elastic GPUs
• Graphics acceleration for
EC2 instances
EC2 Fleet
• Simplified provisioning
• Massive scale
• Flexible capacity allocation

Leading Containers Offerings for .NET
 .NET Core on Linux
 .NET Core on Windows
 .NET Framework on
Windows
 .NET Core on Linux  .NET Core on Linux
 .NET Core on Windows
 .NET Framework on
Windows

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark
13
.NET and PowerShell on AWS Lambda
Serverless event-driven
code execution
Short-lived
All language runtimes
Data source integrations
AWS Lambda

Fully Managed Solutions

AWS Managed DirectoryService for MicrosoftAD
AWS Managed
Microsoft AD
Directory
SaaS Applications
Azure AD
Amazon
WorKSpaces
RDS for SQL
Server
Amazon
WorkDocs
Amazon
WorkMail
Amazon
QuickSight
AWS Management
Console
Amazon
Chime
Amazon
Connect
AWS Apps & Services
Enable, authenticate, & authorize
Manage, authenticate,
& authorize
.NET
Applications
Server
SharePoint
Server
AD-aware Workloads
SQL ServerRemote
Desktop
Licensing
Manager
.NET SharePoint
SQL
Server
RD
Licensing
Enterprise
Certificate
Authority
Certificate
Services
Domain join &
manage
Amazon
Windows EC2
instances
Amazon Linux
EC2 instances
Amazon EC2
SAML
authenticate
Synchronize
users
AD FS
Server
AD FS
Azure AD
Connect
Server
Federate
ADSync
On-premises
Microsoft Active
Directory
On-premises user
credentials
Department
data center

RDS
Amazon RDS
Configuration
Improve
Availability
Increase
Throughput
Reduce
Latency
Push-Button Scaling
Multi AZ
Read Replicas
Provisioned IOPS
Read ReplicasPush-Button Scaling Provisioned IOPS
Region
Multi-AZ
availability
zone
availability
zone

Amazon FSx for Windows File Server
Learn more at aws.amazon.com/fsx/windows
Windows native for fully
compatible Windows File
System experience
Secure and compliant
including PCI-DSS, ISO,
and HIPAA
No hardware or software
to manage
Up to 10s of GB/s
throughput with sub-
millisecond latencies
NEW

Desktops

Managed cloud desktops
Secure
Pay-as-you-go
Secure, managed cloud
desktops your users
will love
Simple to deploy
and manage
Scale & consistent
performance

Desktop application streaming
Stream desktop applications
securely to any web browserPay as you go
Secure
applications and data
No infrastructure
to manage
Scale globally

Secure, fully managed, file
collaboration and management
service with an extensible SDK
Anywhere access
Rich collaboration and
sharing
Pay as you go
Easily integrated
File collaboration and management

Management

AWS Systems Manager capabilities
Resource groups
Run command
Inventory
Patch manager
Automation
Parameter store
State manager
Maintenance window
Session manager

Application migration using AWS SMS
Pre-built launch
templates
Faster migrations
Centralized
management
NEW

AWS License Manager
NEW

.NET on AWS

Ruby
iOS
Python (boto)
Android Node.js
AWS Toolkit
for Visual
Studio
.NET
AWS Toolkit
for Eclipse
PHP
AWS Tools
for Windows
PowerShell
AWS CLI
JavaScriptJava
Xamarin
Enter the SDKs

Comprehensive set of enterprise-grade tools
CI/CD Tools Monitoring & Tracing
SDKs
IDE
IDE and DevOps Toolkits CLI and Scripting Tools
Infrastructure as Code
AWS Cloud Dev. Kit
(CDK)
Web Apps
Mobile
AWS
Amplify
Amazon
Corretto
Languages

AWS SDK for .NET
AWS SDK for .NET
Service Clients
Amazon S3
TransferUtility
Amazon DynamoDB Object
Persistence …
AWS Tools for Windows
PowerShell
AWS Toolkit for
Visual Studio
“low-level” service APIs
“higher-level” utility APIs VM
Import
ASP.NET
Session
Provider
Trace
Listener

AWS Toolkit for Visual Studio
Full integration in Visual Studio AWS Toolkit for
Visual Studio
.NET SDK

PowerShell on AWS

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential
AWS Tools for PowerShell

5,000+ Cmdlets across 175+ Services

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential
PowerShell Basics

Working with S3
PS C:> New-S3Bucket -BucketName wincon-demo -Region us-west-1
BucketName CreationDate
---------- ------------
wincon-demo Sat, 4 May 2019 00:41:08 GMT
PS C:> Write-S3Object -BucketName wincon-demo -File demo.txt

Working with EC2
PS C:> PS C:> $myPSKeyPair = New-EC2KeyPair -KeyName myPSKeyPair
PS C:> New-EC2Instance -ImageId ami-c49c0dac -MinCount 1 -MaxCount 1 -KeyName
myPSKeyPair -SecurityGroups myPSSecurityGroup -InstanceType t2.micro
ReservationId : r-b70a0ef1
OwnerId : 123456789012
RequesterId :
Groups : {myPSSecurityGroup}
GroupName : {myPSSecurityGroup}
Instances : {}

Working with IAM
PS C:> New-IAMUser -UserName "myNewUser”
UserName : myNewUser
UserId : AIDAJOJSPSPXADHBT7IN6
Arn : arn:aws:iam::455364113843:user/ps-created-users/myNewUser
CreateDate : 11/20/2018 3:26:31 PM
PS C:> Add-IAMUserToGroup -UserName myNewUser -GroupName powerUsers
ServiceResponse
---------------
Amazon.IdentityManagement.Model.AddUserToGroupResponse

Working with Credentials
1) Passed as Parameters (Don’t do this)
• PS C:> Get-EC2Instance -AccessKey XXX -SecretKey YYY
2) Environment Variables
• PS C:> set AWS_ACCESS_KEY_ID=XXX
• PS C:> set AWS_SECRET_ACCESS_KEY=YYY
3) Windows Credential Store (Encrypted)
• PS C:> Set-AWSCredential -AccessKey XXX -SecretKey YYY
4) AWS Config File (Shared by CLI)
• C:UsersBrian.awscredentials
5) EC2 Instance Profile

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential
PowerShell Everywhere

EC2 Instance User Data

Sessions Manager

Systems Manager – Run Command

Systems Manager - DSC

Demo

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C TO R
S U M M I T
Best Practices for Migrating & Optimizing
Microsoft Workloads on AWS
Dmitry Kagansky
Senior Solutions Architect
Amazon Web Services
M o d i f i e d f r o m A W S P u b l i c S e c t o r S u m m i t 2 9 5 5 0 4

S U M M I T

S U M M I T
Network Design
VPC
Design
Subnet
Design
Access Control Lists &
Security Groups
Logging and
Monitoring
VPN /
AWS Direct Connect
AWS Cloud

S U M M I T
What Does Every Enterprise Microsoft Service Depend
On?
• Active Directory!
• With Active Directory, identify your AD architecture
• You can choose to extend your existing domain or domains into AWS
or deploy a new domain in AWS - with or without trust relationships
• Bring your existing group policies

S U M M I T
AWS Managed Directory Service for Microsoft AD
AWS Managed
Microsoft AD
Directory
SaaS Applications
Azure AD
Amazon
WorKSpaces
RDS for SQL
Server
Amazon
WorkDocs
Amazon
WorkMail
Amazon
QuickSight
AWS Management
Console
Amazon
Chime
Amazon
Connect
AWS Apps & Services
Enable, authenticate, & authorize
Manage, authenticate,
& authorize
.NET
Applications
Server
SharePoint
Server
AD-aware Workloads
SQL ServerRemote
Desktop
Licensing
Manager
.NET SharePoint
SQL
Server
RD
Licensing
Enterprise
Certificate
Authority
Certificate
Services
Domain join & manage
Amazon
Windows EC2
instances
Amazon Linux
EC2 instances
Amazon EC2
SAML
authenticate
Synchronize
users
AD FS
Server
AD FS
Azure AD
Connect
Server
Federate
ADSync
On-premises
Microsoft Active
Directory
On-premises user
credentials
Department
data center

S U M M I T
Microsoft Active Directory migration using ADMT
Availability Zone B
Department Network
Trust relationship
Availability Zone A
department.local
VPNDomain
client
AWS Managed Directory Service
PES Install
ADMT
DC1
Direct
Connect

S U M M I T
Where can I run SQL Server workloads on AWS?
Amazon Relational Database Service
(Amazon RDS)
Amazon Elastic Compute Cloud
(Amazon EC2)
Managed service with up to 64 vCPU, 488 GB RAM, and 16 TB storage
Self-managed virtual machine with up to 128 vCPU, 4 TB RAM, and 400 TB storage
MS SQL instance

S U M M I T
SQL Server EC2 vs. RDS: Which should I use?
EC2 RDS
License included  
BYOL 
Full control over the instance 
Automated backups 
Self-managed AlwaysOn Availability Groups 
AWS-managed Multi-AZ deployment 

S U M M I T
SQL Server storage optimization
Storage I/O contention is one of the
main causes for poor SQL Server
performance
• Use EBS Optimized EC2 Instances
• Match storage technology with I/O
pattern of workload components
• Match instance type to IOPS and
throughput needs of workload
• Create multiple volumes for data and
logs

S U M M I T
SQL Server Migration Options
* Network bandwidth and latency considerations
Migration method Amazon
RDS Target
Amazon EC2
Target
Downtime DB Objects Cross-
Engine
Backup/Restore Yes Yes
Yes
(hrs)
Data, Schemas, Stored
Procedures, Triggers, Indexes
No
Import/Export
Bulk Copy
Yes Yes
Yes
(mins-hrs)
Data, Schemas, Stored
Procedures, Triggers, Indexes
No
SQL Log
Shipping*
No Yes
Minimal
(secs-mins)
Pre-create the DB, Sync No
Hybrid
Architecture*
No Yes
Minimal
(secs-mins)
Pre-create the DB, Sync No
AWS DMS* Yes Yes
Minimal
(secs-mins)
With SCT (Data, Schemas, Stored
Procedures, Triggers, Indexes)
Yes (SCT)

S U M M I T
Application users
AWS Database Migration Service (DMS) for Live migration
Start a replication instance
Connect to source and target
databases
Select tables, schemas, or
databases
Let AWS DMS create tables, load
data, and keep them in sync
Switch applications over to the
target at your convenience
Customer
premises
AWS
Internet
VPN

S U M M I T
AWS
Direct
Connect
A private connection
between your data
center, office, or
colocation
environment and
AWS
AWS Snow
family
(Snowball, Snowball
Edge, Snowmobile)
Secure, physical
transport
appliances that move
up to Exabytes of
data into and out of
AWS
AWS
Storage
Gateways
Hybrid storage that
seamlessly connects
on-premises
applications to AWS
storage. Ideal for
backup, DR, bursting,
tiering or migration
Amazon
Kinesis Firehose
Capture, trans-form,
& load streaming
data into S3 for use
with Amazon
business intelligence
and analytics tools
Amazon EFS File
Sync
Up to 5x faster file
transfers than open
source tools. Ideal for
migrating data into
EFS or moving
between cloud file
systems
Amazon S3
Transfer
Acceleration
Up to 300% faster
transfers into and
out of S3. Ideal
when working with
long geographic
distances
APN
competency
partners
Integrations between
3rd party vendors and
AWS services. Ideal
for leveraging existing
software licenses and
skills
Networks Shipping Hybrid
Many ways to move data to AWS

S U M M I T
AWS Snowball AWS Snowball Edge AWS Snowmobile
• 80 TB capacity/10 G network
• Data encryption end-to-end
• Rugged 8.5 G impact case
• Rain and dust resistant
• 100 TB capacity/10 Gb network
• Rugged 8.5 G impact case
• Rain and dust resistant
• Compute and storage for hybrid/edge
workloads
• Rack-mountable, clusterable
• Exabyte-scale 45ft container
• Dedicated security personnel
• GPS tracking, alarm monitoring, 24/7
surveillance, and optional additional
security
AWS Snow family

S U M M I T
Migrating to the Cloud - The 6 Rs
• Re-Hosting
• Lift & Shift
• Re-Platforming
• Lift, Tinker & Shift or Optimize
• Re-Purchase
• Move to a different platform
• Re-Factor/Re-Architect
• Going “cloud native”
• Retire
• Retain

S U M M I T
Migrating to the Cloud - The 6 Rs
https://aws.amazon.com/blogs/enterprise-strategy/6-strategies-for-migrating-applications-to-the-cloud/

S U M M I T
Application migration options
Start
Replication
Deploy AWS
SMS Connector
Tag AMIs Deploy using
CloudFormation
(CF)
Swap Blue-
Green
Use ECR for
storing images
Create/ Extend
code build to AWS
Deploy
using CF
RefactorSelect AWS
Serverless
services
Deploy using
SAM
ReplatformRehost Refactor
Fastest
Cloud economies
Adopt Cloud native
services

S U M M I T
Importing a VM

S U M M I T
Rehost using AWS Server Migration Service
SCVMM
HV
HOST
HV
HOST
HV
HOST AWS SMS
SMS VM
Web AMI
App AMI
AMI
AMI

S U M M I T
.NET Application migration strategies
 Deploy .NET Framework apps “as is” to EC2
 Every app can have custom server configuration, different .NET
Framework versions, IIS configuration, dependencies, etc.
 Containerize in Windows Containers and orchestrate with ECS
 Supports different .NET Framework versions, IIS configurations,
dependencies
 Reduces $$ for OS licensing costs (host only)
 Port to .NET Core, and run in ECS or Fargate as Linux Containers,
Windows Nano containers, or serverless
 No OS licensing costs, smaller containers
 Enables deploying apps to Lambda
LevelofEffort
Level of
effort

S U M M I T
Replatform using Amazon ECS
Developers Version Control
Repository
Test & Deployment
Manager
Infrastructure
Provisioning
Container Scheduling
& Orchestration
Image Build Service Container Image
Repository
AWS Toolkit for
Visual Studio
dg16

dg16 Rahul
daga, giriraj, 10/31/18

S U M M I T
Replatform Windows File Servers using File Gateway
Customer Premises
HTTPS
SMB or
NFS
File Gateway Objects in your S3
bucket
Application
Server
• Supports SMB & NFS protocols
• Fully-managed local cache for low latency
access
• Ownership, permissions and timestamps
are preserved
• Files stored as native S3 objects
• Apply versioning, lifecycle
management, and cross-region
replication (CRR) policies
Store and access objects in Amazon S3 from file-based applications with local caching

S U M M I T
Refactor using AWS Lambda
VPC private subnet
Pull data from CSV file
Perform ETL
Insert data into SQL table
Upload Users
Data dropped in S3
Schedule / event triggered
DB in private subnet
DB on Instance
Web 01 Web 02 Web 03
App 01 App 02 App03
SQL 01 SQL 02
Batch
Jobs
E-commerce website
Profile # 1 Regulatory
Apps (PCI) with Batch Jobs
Implement scheduled tasks with AWS Lambda
dg17

S U M M I T
Building repeatable architecture
Automate- Automate- Automate!

S U M M I T
Resources
• How do I use AWS VM Import/Export to create an EC2 instance
based on my on-premises server?
• https://www.youtube.com/watch?v=xeQ6tzwoXn4
• Running .NET applications with AWS Elastic Beanstalk Windows Server Platform
• https://www.youtube.com/watch?v=miZT7Hr042k
• AWS for Microsoft Workloads: Amazon Elastic Container Service (ECS) with .NET Core
• https://www.youtube.com/watch?v=tHg0EnmRztE
• Deploying Your First .NET Application to Amazon Elastic Container Service for Kubernetes
• https://www.youtube.com/watch?v=fUSf6wH3c3s
• 6 Strategies for Migrating Applications to the Cloud
• https://aws.amazon.com/blogs/enterprise-strategy/6-strategies-for-migrating-applications-to-the-
cloud/

Hosting .NET Applications on AWS - AWS Federal Pop-Up Loft

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Hosting .NET Applications on AWS - AWS Federal Pop-Up Loft

Similar to Hosting .NET Applications on AWS - AWS Federal Pop-Up Loft (20)

More from Amazon Web Services

More from Amazon Web Services (20)

Hosting .NET Applications on AWS - AWS Federal Pop-Up Loft