There is a large number of legacy enterprise Microsoft applications (HR, Finance, CMS, BPM apps) still running on premises. This session will focus on retiring technical debt and bringing some of those applications into AWS. You will learn why it's important to go cloud, how easy it is to run & optimize Microsoft applications on AWS, the different approaches to maximize server utilization and save money.

1. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Migrate & Optimize Microsoft
Applications on AWS
Rebeker Choi, Solutions Architect

2. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Challenge
• Migrating existing Microsoft applications to AWS
• Active Directory?
• Web & Application tier?
• SQL?
• Any good migration suggestions for simplifying my Microsoft
workloads?
• New Applications or application refactoring?

3. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Deploying Active Directory

4. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Options for Microsoft AD Deployment
On-premises
Windows Server
DC
AD
You manage
1
VPC
EC2 for Windows
Server DC
AD
You manage
2
VPC Endpoint
AWS Microsoft AD
AWS manages
3
AWS Directory Service
for Microsoft Active Directory
also known as AWS Managed Microsoft AD

5. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
What AWS Managed Microsoft AD Is
AWS managed, actual Microsoft Active Directory
Windows 2012 R2 domain controllers (DC)
• ~3-click setup from directory service console
or script through API
• 2 DCs each in separate Availability Zones (AZs)
• Scale-out with additional DCs
• Amazon manages multi-AZ deployment, patching,
monitoring, DC snapshot and recovery, restore
• Compliance audited
Auth/
LDAP
Availability Zone
Private Subnet
10.0.2.0/24
EC2
App
Server
EC2
IIS
Server
AWS Managed
Services
AWS Managed
Microsoft AD
Auth/
LDAP
Availability Zone
Private Subnet
10.0.2.0/24
EC2
App
Server
EC2
IIS
Server
AWS Managed
Services
AWS Managed
Microsoft AD

6. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS Managed Microsoft AD as a Primary Directory
AWS Managed
Microsoft AD
Amazon
WorKSpaces
Manage, authenticate,
& authorize
.NET
Applications
Server
SharePoint
Server
AD-aware Workloads
SQL ServerRemote Desktop
Licensing
Manager
.NET SharePoint
SQL
Server
RD
Licensing
Domain join & manage
Amazon
Windows EC2
instances
Amazon
Linux EC2
instances
Amazon EC2
Administer
users & groups
SAML
authenticate
Synchronize
users
AD FS
Server
AD FS
Azure AD
Connect Server
Federate
ADSync
SaaS Applications
Azure AD
(example.cloud)
https://aws.amazon.com/blogs/security/how-to-enable-your-users-to-access-office-365-with-aws-microsoft-active-directory-credentials/

7. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS Managed Microsoft AD as a Resource Directory
On-premises
Microsoft AD
On-premises user
credentials
Corporate data center
AWS Managed
Microsoft AD
Amazon
WorKSpaces
Manage, authenticate,
& authorize
.NET
Applications
Server
SharePoint
Server
AD-aware Workloads
SQL ServerRemote Desktop
Licensing
Manager
.NET SharePoint
SQL
Server
RD
Licensing
Domain join & manage
Amazon
Windows EC2
instances
Amazon
Linux EC2
instances
Amazon EC2
Administer
users & groups
SaaS Applications
Azure AD
Trust Authenticate
& authorize AD FS
Server
Azure AD
Connect Server
Synchronize
users
SAML
authenticate
(example.cloud)
(example.local)
• Separate directories, single identity
• Identity mastered on-premises,
separate AD Forest in AWS with Forest
Trust(s) configured
Direct Connect
or VPN

8. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Deploying Web/App Tier

9. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Options for Deploying .Net Application
Your code
Managed by Elastic
Beanstalk
Focus on building
your application
HTTP server
Application
server
Language
interpreter
Operating
system
Host
Elastic Beanstalk
.NET on Windows Server with IIS
HTTP/Application
server
Operating
system
Host
Your code
Managed by
Customer
Managed by
AWS
EC2
Windows Server 2016, 2012 R2, 2012,
2008, 2008 R2, 2003 R2

10. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Information required to deploy an application
01
02
03
04
Region
Tech Stack type
Single-instance
Load balanced with
auto-scaling
Or
Database (RDS) Optional
Your code
Supported platforms

11. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS Toolkit for Visual Studio
• Full integration in Visual Studio
• Deploy from Visual Studio
AWS Toolkit for
Visual Studio
Deploy code to AWS
Select AWS Region
Select AWS Service

12. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Deploying SQL Server

13. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Options for Deploying SQL Server on AWS
Amazon RDS for SQL Server SQL Server on Amazon EC2
Versions Supported: 2008 R2, 2012, 2014, 2016, 2017 2005, 2008, 2008 R2, 2012, 2014, 2016, 2017
Editions Supported: Express, Web, Standard, Enterprise
High Availability: Self-managed; AlwaysOn, Mirror, Log ShipAWS-managed
Encrypted storage using AWS KMS (all editions); TDE supportEncryption:
Authentication: Windows & SQL authentication
Maintenance plans & third-party toolsManaged automated backupsBackups:
SQL Install / Maintenance / PatchingSQL Install / Maintenance / PatchingDatabase
OS Install / Maintenance / PatchingOS Install / Maintenance / PatchingOperating System:
Customer-managedAWS-managed
1 2

14. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Amazon RDS – On-Demand, Pay-as-you-go
AWS deals with Microsoft on
licenses

15. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Amazon RDS - Flexibility of Choices
Flexibility of Choices on MS
SQL server engine version

16. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Amazon RDS is simple and fast to scale
• Scale up or down among
instance types on demand
• Minimal downtime for
multi-AZ deployment
• Select your window to
apply the change

17. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Amazon RDS – built-in Multi-AZ deployment
For high availability:-
• Automatic failover
• Synchronous replication
across AZs

18. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Amazon RDS – consistent IOPS performance
Provisioned IOPS is available
for IOPS demanding database
workload

19. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Amazon RDS – Network & Security
VPC support
• Web / application servers
can access SQL database
via private IP addresses

20. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Amazon RDS – Encryption
Native Encryption Support
- Data-at-rest

21. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
What does it look like after RDS is up?
Availability Zone A
AWS Region
10.1.0.0/16
10.1.1.0/24
Availability Zone B
10.1.2.0/24
Synchronous replication
Same
instance
type as
master
• Managed high availability across
multiple datacenters
• No application code change
• 60-120 seconds failover time
• RPO = zero
Automatic failover
Synchronous replication
dbinstancename.1234567890.us-west-2.rds.amazonaws.com:3006
Application

22. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Simplify Migration

23. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS Server Migration Service – Web / App tier
• Support VMware/Hyper-V virtual
machine (windows & Linux)
migration
• Agentless VM migration
• Capture incremental change made
to on-premises VMs and
automatically transfer to AWS
• Migrate a group of VMs
simultaneously and orchestrate
multiple migrations
• No additional fee to use Server
Migration Service
Source: on-premises server AWS Server Migration Service Target: Amazon Machine
Image

24. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
SQL Server Migration Options to AWS
* Network bandwidth and latency considerations
Migration method Amazon RDS
Target
Amazon EC2
Target
Downtime DB objects Cross-Engine
Backup/Restore Yes Yes Yes (hrs) Data, Schemas Stored,
Procedures, Triggers, Indexes
No
Import/Export Bulk
Copy
Yes Yes Yes (mins-hrs) Data, Schemas Stored,
Procedures, Triggers, Indexes
No
SQL Log Shipping* No Yes Minimal (secs-
mins)
Pre-create the DB, Sync No
AWS Database
Migration Service
(DMS)*
Yes Yes Minimal (secs-
mins)
With SCT (Data, Schemas,
Stored Procedures, Triggers,
Indexes)
Yes

25. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Keep your SQL Server Applications Running During the Migration
Customer
premises
Application users
AWS
Internet
VPN
® Start a replication instance
® Connect to source and target
databases
® Select tables, schemas, or
databases
® Let AWS DMS create tables, load
data, and keep them in sync
® Switch applications over to the
target at your convenience
AWS
DMS

26. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Benefits - Rehost Microsoft .NET Application
Availability zone
Private subnetPublic subnet
Availability zone
Private subnetPublic subnet
Virtual private
gateway
Corporate
office
IIS
app
IIS
Web
IIS
app
IIS
Web
Internet
gateway
RDGW
VPC NAT
gateway
RDGW
VPC NAT
gateway
AWS
Directory
Service
AWS
Directory
Service
Auto Scaling
RDS for
MSSQL
(Multi-AZ
deployment)
ü Improved high availability
across multiple availability
zones
ü Improved scalability &
performance
ü Offload operation tasks to
AWS
ü AWS deals with Microsoft
licenses
Benefits:

27. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Refactoring / New
Applications?

28. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Where do you want to be?
• Stateless, loosely coupled architecture
• Highly scalable, self-healing
• Agile & innovate faster
• Faster time to market, pushing more new application features, optimize & improve existing
user experience
• Focus more at business logic
• Offloading more undifferentiated heavy lifting tasks to AWS
• Faster application release deployment cycle
• Microservices
• Be more cost effective

29. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
.NET Core AWS Lambda architecture
Amazon S3
CloudFront
Amazon API
Gateway
Amazon
ElastiCache
Amazon
DynamoDB
RDS for
SQLserver
(static content)
AWS
Lambda
Amazon ECS
end-users

30. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS Lambda and Amazon ECS
AWS Lambda
• the smallest unit of compute
• function of application logic
• Run your code without managing
servers
• Pay only for the compute time
(duration in response to an
event/request)
Amazon ECS
• managed container orchestration
service
• support Docker containers
• Placement strategies
• Auto-scaling
• Native integration with other AWS
services (load balancer, VPC, etc)

31. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Why does this matter now?
July 9, 2019
SQL Server 2008 and 2008 R2
End of Extended Support
January 14, 2020
Windows Server 2008 & 2008 R2
End of Extended Support
https://azure.microsoft.com/en-us/blog/announcing-new-options-for-sql-server-2008-and-
windows-server-2008-end-of-support/

32. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Summary
• Leverage what AWS has developed for you as much as possible
• For new applications, using a cloud-native approach is preferred
• Refactoring application is a journey. ”Rehost” as the 1st step of cloud
migration.

33. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Additional Resources
Microsoft on AWS
http://aws.amazon.com/windows/
AWS Windows and .NET Developer Center (with sdk)
http://aws.amazon.com/net/
Amazon EC2 Windows Guide
http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/
Microsoft Licensing on AWS
http://aws.amazon.com/windows/resources/licensing/
Windows Whitepaper
(http://aws.amazon.com/microsoft/whitepapers)
• Implementing Microsoft Windows Server Failover Clustering and
SQL Server AlwaysOn Availability Groups in the AWS Cloud
• Implementing Active Directory Domain Services on AWS
• Remote Desktop Gateway Reference Architecture
• Secure Microsoft Applications on AWS

34. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Scan the QR code on your badge and complete the online
survey to redeem an AWS passport pouch at the registration
desk after 3pm.
YOUR FEEDBACK IS IMPORTANT TO US!

35. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Thank you!