Running Microsoft Technologies on AWS - Pop-up Loft TLV 2017
•Download as PPTX, PDF•
1 like•460 views
In this session, you will discover the key tenets for architecting and deploying Microsoft Workloads in the AWS cloud environment. From core infrastructure and Microsoft Active Directory deployment to Microsoft SharePoint and Microsoft Exchange, we will cover the best practices applied by our customers on the platform.
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Running Microsoft Technologies on AWS - Pop-up Loft TLV 2017
Similar to Running Microsoft Technologies on AWS - Pop-up Loft TLV 2017 (20)
More from Amazon Web Services
More from Amazon Web Services (20)
Recently uploaded
Recently uploaded (20)
Running Microsoft Technologies on AWS - Pop-up Loft TLV 2017
- 1. Microsoft on AWS Julien Lépine, Principal Solutions Architect
- 2. Topics we’ll cover DEPLOYINGDEVELOPING ADMINISTRATION
- 3. Cloud is an ongoing optimization model On- Premises Lift & Shift Instance Right- Sizing Improved Elasticity Measure, Monitor, Improve Optimized EC2 Storage Optimization Serverless Architecture Managed Services True AWS Optimized Traditional TCO Comparisons
- 4. AWS Toolkit for Visual Studio AWS Toolkit for Visual Studio .NET SDK
- 5. ENTERPRISE APPS DEVELOPMENT & OPERATIONSMOBILE SERVICESAPP SERVICESANALYTICS Data Warehousing Hadoop/ Spark Streaming Data Collection Machine Learning Elastic Search Virtual Desktops Sharing & Collaboration Corporate Email Backup Queuing & Notifications Workflow Search Email Transcoding One-click App Deployment Identity Sync Single Integrated Console Push Notifications DevOps Resource Management Application Lifecycle Management Containers Triggers Resource Templates TECHNICAL & BUSINESS SUPPORT Account Management Support Professional Services Training & Certification Security & Pricing Reports Partner Ecosystem Solutions Architects MARKETPLACE Business Apps Business Intelligence Databases DevOps Tools NetworkingSecurity Storage Regions Availability Zones Points of Presence INFRASTRUCTURE CORE SERVICES Compute VMs, Auto-scaling, & Load Balancing Storage Object, Blocks, Archival, Import/Export Databases Relational, NoSQL, Caching, Migration Networking VPC, DX, DNS CDN Access Control Identity Management Key Management & Storage Monitoring & Logs Assessment and reporting Resource & Usage Auditing SECURITY & COMPLIANCE Configuration Compliance Web application firewall HYBRID ARCHITECTURE Data Backups Integrated App Deployments Direct Connect Identity Federation Integrated Resource Management Integrated Networking API Gateway IoT Rules Engine Device Shadows Device SDKs Registry Device Gateway Streaming Data Analysis Business Intelligence Mobile Analytics
- 6. Hosting your .NET applications AMAZON EC2 AWS LAMBDAANY PLATFORM AWS OpsWorks AWS Elastic Beanstalk Amazon ECS Amazon API Gateway
- 7. AWS also provides extended support AWS CodeCommit/CodePipeline/CodeDeploy • Manage a large fleet (on-premises and cloud-based) .NET SDK and PowerShell cmdlets • Integration in custom build pipelines in TFS or other AWS native integrations • Jenkins, Bamboo have native integration to AWS • Other IDE support AWS (Unity, Xamarin Studio, Eclipse…)
- 8. Building foundations AWS IAM AMAZON VPC AWS DIRECTORY SERVICE
- 9. Platform identity corporate data center ADDC ADFS AWS IAM Amazon S3 AWS CloudTrail AWS Config Logging and monitoring platform
- 10. Core network infrastructure Availability Zone Availability Zone Internet gateway NAT gateway NAT gateway VPN connection corporate data center Amazon S3 Logging and monitoring platform Public subnet Public subnet Private Subnet Private Subnet flow logs Amazon CloudWatch Logs Availability Zone
- 11. Windows identity Availability Zone Availability Zone Internet gateway NAT gateway Active Directory Tier AWS Directory Service NAT gateway VPN connection corporate data center AWS IAM ADFS ADDC
- 12. Moving initial Microsoft workloads to AWS BUILDING IN THE CLOUD MIGRATION
- 14. Migrating data to and from AWS AWS Database Migration Service Minimize downtime during migrations, migrate between different DB platforms, Schema Conversion Tool Amazon RDS Native Backup / Restore Store your existing SQL Server backups ‘.bak’ files in Amazon S3 and restore them on Amazon RDS Microsoft SQL Server Database Publishing Wizard Export to T-SQL files, load using sqlcmd 1 2 3 AWS Marketplace Third-party data import and export tools and solutions 4
- 16. Creating repeatable architectures BOOTSTRAPPING CONTAINERS AUTOMATED DEPLOYMENTS AWS CloudFormation Amazon ECS PowerShell AWS Systems Manager State Manager
- 18. Amazon RDS features Your familiar Microsoft SQL Server platform Choose from SQL Server 2008 R2 / 2012 / 2014 / 2016, in Express, Standard, Web or Enterprise Edition All major processes automated Creation via one API call, automated failover, patching, backup, point in time recovery, easy scalability, AD integration You retain a high level of control Use your existing licenses, the settings of the database engine, programmability 1 2 3 So you focus on your business Focus on the data schema, query planning and workload optimization based on your business 4
- 19. Scaling Web Application Availability Zone Availability Zone Internet gateway NAT gateway NAT gateway VPN connection corporate data center ADDC ADFS AWS IAM users Active Directory Tier Database Tier Web Tier ELB IIS Server Amazon RDS AWS Directory Service IIS Server
- 20. Administration at scale REMOTE DESKTOP ACCESS REMOTE SCRIPTING RDGW Amazon WorkSpaces CLOUD CONTROL CENTER PowerShell AWS Tools for Windows PowerShell AWS Systems Manager
- 21. Keeping the platform up to date IMAGE HYGIENE PowerShell DSC MONITORING INVENTORY AUDITING CONFIGURATION MANAGEMENT Amazon CloudWatch AWS Systems Manager PATCHING AWS Config
- 22. Licensing LICENSE INCLUDED LICENSE MOBILITY LEGACY / OS
- 23. Licensing Continuum License Included • Amazon manages the licenses • Pay-as-you-go pricing • Multi-tenant or dedicated • No license management overhead • AWS provides images Hybrid • Baseline in BYOL • Leverage scalability and pay-as-you-go where applicable • Limit management overhead • Import and use some of your OS or software BYOL • Import and use your own OS/software • Reduce your spend if you already pay an ISV for licensing • You manage licensing costs and compliance with your ISV • Committed contracts with your ISVs
- 24. Delaware North Moves Data Center to AWS to Save $3.5M Over Five Years • Construction of new headquarters building led company to reevaluate its IT platform • Evaluated several cloud vendors and chose AWS • Reducing its data center server footprint by 91% • Anticipates saving at least $3.5 million over five years with leaner IT • Improving security compliance, disaster recovery, and delivery of new services and solutions From a CIO’s perspective, I looked very closely at the reputation and value proposition that each cloud vendor brought to the table. AWS had a clear lead over the competition. Kevin Quinlivan, Chief Information Officer ” “ Delaware North is $3 billion leader in the food service and hospitality industry. It is based in Buffalo, New York.
- 25. How to get started Create an AWS Account and leverage the free tier • 1 year Amazon EC2 instance • 1 year AWS Directory Service for Microsoft Active Directory • 1 year Amazon RDS Instance • Much more Contact us and come meet us AWS and partners offer training and certification Amazon EC2 AWS Directory Service Amazon RDS
Editor's Notes
- The initial lift and shift TCO model doesn’t fully capture the on-going Economic case for the cloud. Cost Optimization overtime continues to drive down costs through ongoing improvements, leveraging managed services, expanding the scope of analysis beyond just EC2 (i.e. RDS, lambda, storage, etc.), etc.
- What changes a lot in cloud computing is that the platform you are building on is evolving. An application that was optimal a year ago may not be optimized anymore, and most probably you will be able to remove many unnecessary features 722 new features and services in 2015, in 2016 we have about 40% increase What you can know is that an application built one year ago can be optimized, and often simplified. Benefit from the hexagonal architecture practices to include the best of breed services in your applications.
- Add API GW -> Check with Steve Roberts
- From an on-premises existing Active Directory environment, how can we give access to specific accounts to our users. Talk about how AWS IAM secures access and AWS CloudTrail and AWS Config can help auditing the environment. Explain how ADFS is used for federation and the flow of information that goes on. *Demo: Show how ADFS can be configured to access the platform and what features it gives*
- Getting the network right is key. Explain the basics of the Windows Services we will be deploying, and what design we can get running there. Talk about how Security Groups, Routing, Gateways and Network ACLs can secure the network and how Amazon VPC Flow Logs can help for auditing and troubleshooting. Explain that network design has an impact on the availability profile of the application, by leveraging AZs (two AZs vs 3 AZs consideration, for application and for witness) *Demo: CloudFormation for creating a full network foundation for the platform in 5 minutes*
- Explain how customers can either create completely separate Active Directory environments on AWS, extend their own existing domain, or create resource forests in AWS, leading to AWS Directory Service: Managed AD. *Demo: Setup an AWS Directory Service: Managed AD for hosting the platform*
- Explain how AWS provides a familiar environment to host Windows Workloads, and how companies can extend their existing practices to work on AWS. Build: System Center VMM or VMware vCenter Migration: VM Import, AWS Application Discovery Service and Server Migration Services, Cloud Endure and Racemi Supervision: System Center Operations Manager Maintenance: Extending WSUS and other platforms to AWS *Demo: Show how System Center can be used to create instances and monitor instances on AWS*
- So how do we migrate data to Amazon RDS? There’s typically 3 paths we see customers use to migrate and synchronize data: You can use the SQL Server Database Publishing Wizard to export data from your source DB, and load it into the new DB instance. This is a simple process and works great if you can tolerate some downtime and your data set isn’t very large. Unfortunately you cannot ship your backup files, or database files over to Amazon RDS, due to lack of filesystem access You can leverage the Amazon RDS Migration tool, to achieve minimal downtime migrations, that involve both bulk loading of your existing data, but also keeping up with changes. This is a tool you deploy on Amazon EC2, and has the capability to migrate data across DB engines as well. Also take a look at the AWS Marketplace, where 3rd party vendors offer data import, export and migration solutions. Often you pay for the solutions the same way you do for AWS services, and only for the amount of time you only need them.
- Explain the main options we see customers using for managing their platforms: Image Management: baking AMIs helps have fast scaling and presents the advantages of immutable infrastructure Bootstrap / Cfn-Init / Desired State Configuration: Speak about PowerShell and PowerShell DSC for instance configuration, and how the bootstrap features (user-data / cfn-init) can help configure the platform Containers: Explain how Amazon ECS supports Windows Containers on Windows Server 2016, allowing easy scalability and micro-services architectures on Windows CloudFormation: automation for everything,
- So how do we migrate data to Amazon RDS? There’s typically 3 paths we see customers use to migrate and synchronize data: You can use the SQL Server Database Publishing Wizard to export data from your source DB, and load it into the new DB instance. This is a simple process and works great if you can tolerate some downtime and your data set isn’t very large. Unfortunately you cannot ship your backup files, or database files over to Amazon RDS, due to lack of filesystem access You can leverage the Amazon RDS Migration tool, to achieve minimal downtime migrations, that involve both bulk loading of your existing data, but also keeping up with changes. This is a tool you deploy on Amazon EC2, and has the capability to migrate data across DB engines as well. Also take a look at the AWS Marketplace, where 3rd party vendors offer data import, export and migration solutions. Often you pay for the solutions the same way you do for AWS services, and only for the amount of time you only need them.
- STORY BACKGROUND Delaware North is a leading food service and hospitality company, serving more than 500 million customers at 200+ venues around the world, including sports stadiums, airports, and major tourist destinations Sought a platform to host a redesigned IT architecture that would reduce its hardware footprint, deliver a lower long-term TCO, and enable more streamlined operations SOLUTION & BENEFITS Moved 91%+ of its data center server footprint to AWS, using a wide range of AWS products Anticipates at least $3.5 million in savings over five years Enhanced security and compliance Better disaster recovery procedures Faster delivery of new services to its business units CONTENT TAGS Main use case: Data Center Migration Keywords (seperated by commas): enterprise, data center, TCO, food service, hospitality All AWS Services used by the customer: Amazon EC2, Amazon S3, Amazon CloudFormation, Elastic Load Balancing, Amazon RDS, Amazon ElastiCache, Amazon Elastic Beanstalk, Amazon CloudWatch, Amazon SNS, Amazon SES, AWS Lambda, AWS Direct Connect, AWS IAM Benefits Realized: Lower cost, Agility, Scalability/Elasticity, Speed