Microsoft Active Directory su AWS per supportare i tuoi Windows Workloads

Windows on AWS
Microsoft Active Directory su AWS per supportare i tuoi Windows Workloads
Simone Cheli
Microsoft Specialist

© 2020, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential and Trademark.
AGENDA:
• Why Windows on AWS
• Active Directory
• OLA Program

Why
Windows
on AWS?

B R E A DT H &
D E P T H
R E L I A B L E &
S E C U R E
B E S T
P E R F O R M A N C E
I N N O VAT I O N &
E X P E R I E N C E
Why Windows on AWS?
LOWER
TCO

https://zkresearch.com/blog/2018/11/comparing-sql-server-deployments-on-microsoft-azure-and-amazon-web-services
MOST CAPABILITIES
AWS has the more capabilities than any other cloud provider, including 48
services where comparable options are simply not available on the next
largest cloud provider.
ECO SYSTEM SUPPORT
AWS supports a full range of business-critical services for Microsoft
Workloads like Visual Studio, Active Directory, Windows Server, SQL Server,
AWS SDK for .NET, AWS Elastic Beanstalk, and AWS Database Migration
Service.
AWS also offers the first and only fully managed native-Windows file service,
Amazon FSx for Windows File Server, which is built on Windows and
integrates with Active Directory.
AWS services where
the next largest cloud
provider does not have
comparable options
48
Breadth & Depth
43% 57% 28% 113%
M O R E C O M P U T E
S E R V I C E S
M O R E D A T A B A S E
S E R V I C E S
M O R E N E T W O R K I N G
S E R V I C E S
M O R E M A N A G E M E N T
S E R V I C E S
T H A N T H E N E X T L A R G E S T C L O U D P R O V I D E R

12 YEARS OF INNOVATING FOR OUR CUSTOMERS
Years of migration
experience
12+
Innovation & Experience
.NET Core & PowerShell on AL2/Ubuntu
Windows Deep Learning AMI
.NET Core on Linux AMIs
Lambda Support for PowerShell Core
Amazon ECS for Windows Containers
Amazon EKS for Windows
Mono support on AL2
App Modernization
AWS Tools for Windows PowerShell
.NET SDK
DynamoDB Accelerator SDK for .NET
.NET on Lambda & AWS CodeBuild
.NET Core 2.1 Support with Lambda & X-Ray
X-Ray .NET SDK
.NET Developer Hub
AWS X-Ray .NET Core Support
CloudWatch AppInsights for .NET and SQL
.NET Developer Hub
Joined .NET Foundation
.NET
SQL 2017 AMI AL2/Ubuntu
SQL Server 2008 R2 Amazon RDS adds SQL Server
SQL Server 2017
SQL Server 2012
SQL Server 2008 R2
SQL Server 2016
SQL Server 2008 Upgrade
AWS Launch Wizard for SQL Server SQL Server 2019 on EC2
SQL Server
AWS Directory Service
Visual Studio Toolkit
Microsoft SCOM plug-in release.
Microsoft SharePoint 2016 (Marketplace)
Microsoft SCVMM Plug-in
SAP instance on AWS 2012
Trusted Advisor checks for Windows
Hyper-V support in SMS
Windows for Lightsail
Application-consistent Snapshots through VSS
Sessions Manager
Dedicated Host Enhancement Tag-On
EC2 Dedicated Hosts (BYOL)
EC2 Run Command
EC2 Systems Manager
EC2 Dedicated
Instances (BYOL)
EC2 Windows on Bare Metal/Hyper-V AMI
WS 2008 & SQL Server 2008
Windows Server 2008 R2
Windows Server 2012
Windows Server 2016
Windows Server 1803
Windows Server 2003
Application migration using AWS SMS
Active Directory Cross VPC Support AWS License Manager
Amazon FSx for Windows File Server
Azure to AWS Migration Support
Windows Server & EC2
2008 2010 2012 2014 2016 2018 Today

F E A T U R E S R E L E A S E D

https://reprints.forrester.com/#/assets/2/374/RES144415/reports
Containers on AWS

Reliable & Secure
Number of regions with
multiple Availability Zones
2x
Security, compliance,
and governance key features
210
Stockholm
Bahrain
Cape
Town
Hong Kong
Milan
Announced Regions
THE NEXT LARGEST CLOUD PROVIDER HAD 7X MORE
DOWNTIME HOURS THAN AWS IN 2018
24 Launched
Regions
3 Announced
Regions
76 Availability
Zones
1 Local Zone
2x More
Regions with
multiple AZ’s
245 Countries
and Territories
Served
97 Direct
Connect
Locations
216 Points of
Presence

On April, 28th AWS expanded its global footprint with the opening of the AWS Infrastructure Region in Italy. The new
Region AWS Europe (Milano) brings advanced cloud technologies that enable opportunities for innovation,
entrepreneurship, and digital transformation. For additional information about services and characteristics of an AWS
Region, you can check the website: aws.amazon.com/local/italy/milan/
AWS Europe (Milan) Region

"Non c'è un solo carico di lavoro Windows che non siamo
stati in grado di eseguire su AWS e di farlo meglio,
compreso Windows Server, con tempi di inattività pari a
zero."
B i l l R o t h e , Vi c e p r e s i d e n t e p e r i s i s t e m i d ' i m p r e s a ,
H e s s C o r p o ra t i o n

0
500
1000
1500
3 5 8 13 21 34 55 89 144 233
AWS Azure
$0
$200
$400
$600
Small Medium Large
AWS Azure
BETTER PRICE/ PERFORMANCE THAN AZURE
Performance
advantage
2–3x
Best Performance
Costs per 1 Billion Transactions Per Month AWS versus Azure Large* Configuration (TPM)

"Le istanze z1d di Amazon EC2 sono molto più veloci
delle soluzioni Azure equivalenti con un costo
pressappoco uguale. Utilizzando le istanze z1d di Amazon
EC2, forniamo ai clienti un'esperienza migliore
elaborando le notifiche di prezzo più rapidamente e
adeguando i prezzi più spesso."
D a m i a n E l d e r, I n g e g n e r e D e v O p s , R e p r i c e r E x p r e s s ,
u n ' a z i e n d a L u c i d I n t e ra c t i v e

SAVE ON INFRASTRUCTURE
Research firm, International Data Corp. (IDC), estimates that customers will
realize an average return on investment of 442% over five years, when they
bring their Windows workloads to AWS.
OPTIMIZE LICENSING FOOTPRINT
The Optimization and Licensing Assessment (OLA) is intended to accelerate
Windows migration opportunities by providing a business justification based
on resource consumption, optimized licensing and provisioning.
5-year return on
investment
442%
Lower TCO

SSP risparmia oltre 2 milioni l'anno utilizzando AWS. Parte di
questi risparmi deriva dalla riduzione del 40% dei costi di
licenzaWindows grazie all'utilizzo di Amazon Relational
Database Service (RDS) eWindows Server su Amazon Elastic
Compute Cloud (Amazon EC2). SSP utilizza i soldi così
risparmiati per creare nuove offerte innovative.

Active
Directory
on
AWS

Why do customers deploy Active Directory on AWS?
Support Windows
workloads running on
AWS
Integrate with
AWS
applications and services
Provide low latency to
applications

© 2020, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
What challenges are customers facing?
Deploying a self-managed highly
available AD to support workloads
Required to integrate AD and
cloud native AWS services
Must design and build automation,
deployments, monitoring,
recovery and availability
Undifferentiated
heavy lifting
CustomizationLow-business value
operations

Active Directory (AD) is an enterprise standard
Active Directory is the most widely used
enterprise repository for digital identities1
of Fortune 1000 use Active Directory2
(on-premises)
95%
Sources:
1The State Of Microsoft Active Directory 2018, Forrester
2 Success with Enterprise Mobility: Identity, 2014, Microsoft
This is on-premises specific

The cloud is an opportunity to modernizeAD
“Organizations must prepare Windows Active Directory for the new era of
hybrid, cloud, and multi-cloud IT.”1
“AWS’s long-term engagement with at-scale customers has enabled it to
develop advanced tooling in many IAM areas, including managed/virtual
AD and authorization capabilities.” 2
“AWS is the only vendor to run Active Directory as a managed service in a
multitenant environment — AWS Managed Microsoft AD (typically
shorted to Managed AD). As a result, it provides the broadest set of
capabilities for workloads that require Active Directory.” 2
- Gartner
Accelerate adoption
of single sign-on (SSO)
services
Reduce TCO and
admin costs of
running AD
Sources:
1 Active Directory:TheTime to Modernize is Now, 2018, Gartner
2 Solution Comparison of the IAM CapabilitiesWithin AWS, Azure and GCP, August 2019, Gartner analysis

Options for running AD on AWS
Self-managed,
Amazon EC2
AWS Managed
Microsoft AD

AWS
Managed
Microsoft
AD

AWS has the most experience delivering AD as a service
Preserves AD-aware apps SSO
experience, on-premises and
the cloud so users don’t have
to sign in separately
High
compatibility
Richest set of features and
delegation capability
The first cloud to use
actual Active Directory
and is set up in minutes
Preserves SSO
Most features of any managed
Active Directory, and the broadest
range of AD aware apps.
Ability to sub-delegate admin tasks
across the org

AD on AWS in the modern enterprise
AWS SSO
Integration
Existing Directory
Connectivity
App
Integration
With AWS Managed AD Web or AWS apps1-way / 2-way trusts
AWS Managed AD &
Self-managed AD

AWS Managed Microsoft AD
• High availability
• Increased security
• Reduce management overhead
• Deploy workloads faster
• Automate deployments using APIs
• Create managed instances in AWS using the AWS Management Console, CLI, or API
• Connect to on-prem Active Directory using trusts or utilize as a stand alone
directory
• Seamlessly domain join your EC2 instances, and use on-prem identities for AWS apps
• Pros: Managed service, better AWS integration, focus on directory vs. infrastructure
• Cons: Certain AD functions not available

Key Features of AWS Managed Microsoft AD
Actual Microsoft AD Trust support
Seamless domain join High availability and
daily snapshots
AWS-managed infrastructure
Support multiple accounts
and VPCs

AWS Managed Microsoft AD: What’s in the box?
• Actual Microsoft Active Directory (2012 R2)
• Single tenant, managed service
• Default of two domain controllers (expandable)
• Provides delegated administrative authority over directory
objects in your OU
• Supports standard AD management tools
• AWS managed infrastructure, including availability, patching,
and backups
• Seamless integration with AWS services
• AWS SSO, Amazon FSx for Windows File Server, Amazon Workspaces,
Amazon RDS for: SQL Server, Oracle, PostgreSQL

Available Editions
• Two editions: Standard Edition & Enterprise Edition
• Both -
• Can be used as your organization’s primary directory
• Can be used to create resource forests
• Support the creation of additional domain controllers
• Standard Edition: Optimized to be a primary directory for small
and midsize businesses
• Enterprise Edition: Designed to support enterprise organizations
with up to 500,000* directory objects

Recent key feature launches
• Support for multiple accounts and VPCs within a region
• Standard Edition optimized for SMBs
• LDAPS support and LDAP Signing
• PCI & HIPAA eligibility, inclusion in the SOC reports
• User password reset API
• Add additional domain controllers
• Additional application enablement
• via managed service accounts, kerberos constrained delegation.
• Sharepoint, SQL Server always on, .NET applications.
F E A T U R E S R E L E A S E D

AWS
Active
Directory
Designed

AWS applications
Amazon
WorkSpaces
Amazon
AppStream 2.0
Amazon EC2
.NET apps SharePoint
Server
SQL Server Always-
On
Amazon
QuickSight
Amazon
Connect
Amazon
Chime
AWS services commonly used with AD
Amazon RDS and Amazon FSx
Amazon RDS for
PostgreSQL
Amazon FSx for
Windows File Server
Amazon RDS for
Oracle
AWS SSO integrated applications
AWS SSO Amazon
SageMaker
Studio
AWS IoT SiteWise
(Preview)
AWS Management
Console
AWS Client VPN
Amazon EC2
Linux
Amazon
WorkDocs
Amazon
WorkMail
SAML
Amazon RDS for
SQL Server

Use cases at all stages of the cloud journey
Migration Multi-region True Hybrid AD
AD Connector links new BI
platform on AWS to on-prem
AD
Certified to protect sensitive
data
Integrated Managed AD for
global enterprise
Enabling migration to RDS
Consistent global credentials
after migration, integrated with
on-prem AD
Lower cost and complexity

Resources
https://aws.amazon.com/it/directoryservice/getting-started/?nc=sn&loc=4

The
OLA
Program

A S S E S S M E N T
If you are not assessing,
You are guessing!

Optimization & Licensing Assessment
Customer challenges
• Know the baseline
• Understand costs
• Build a plan
OLA benefits
• Gather data & insights
• Create aTCO
• Plan & Accelerate migrations

D I R E C T M AT C H V S . R I G H T S I Z E D TO AW S
Understand how your
environment and Microsoft
licenses would translate to
AWS in an optimized state.
Optimization and Licensing Assessment
F E A T U R E D T O O L
36%
savings
Annual
on-prem cost
Rightsized
to AWS

Anticipate potential savings
Migration
Planning
1. Identify infrastructure optimization opportunities
• Over-provisioning for peak
• Over-specified / under-utilised resources
• Outdated hardware requiring significant licensing
investments
2. Identify Microsoft license savings
• Reduce cores requirement
• Leverage existing investments using BYOL
• Downgrade SQL Enterprise to SQL Standard

Infrastructure & License optimization - example

Understand application dependencies

Resources
https://pages.awscloud.com/windows-ola-contact-us.html

• Brainstorm use cases and test
the services with your own
data and understand how it
works
POC in a Box
• Let AWS certified partners
help you with the POC
AWS Partner Network
Define and run POCs with AWS

Define your Licensing Strategy
License Included
• AWS manages licensing compliance
• Supports current and many legacy versions
of Microsoft software
• Windows Server Client Access Licenses
(CALs) are not required
Bring your Own License
(BYOL)
• Take advantage of the efficiencies of the cloud while
using your existing perpetual licenses
• Extend the lifecycle of your software without
additional hardware costs
• Expedite your migration to the cloud by using existing
virtual machine images

"Trasferendo le nostre licenze SQL Server agli Host
dedicati e alle Istanze dedicate di Amazon EC2,
abbiamo risparmiato il 15 percento sui costi di licenza
per SQL."
C r i s C a r l i n , V P d e l l e O p e ra z i o n i c l o u d g l o b a l i ,
D e l t e k

END-OF-SUPPORT
MIGRATION PROGRAM
OPTIMIZATION AND
LICENSING
ASSESSMENT
MIGRATION
ACCELERATION
PROGRAM
Helps customers upgrade
legacy applications to run on
newer, supported versions of
Windows Server without any
code changes.
Understand how to optimize
your environment and licensing
assets when migration to the
cloud.
AWS services, best practices,
and tools to help customers
save costs and accelerate
migrations ofWindows
workloads to AWS.
How we help: Programs

AWS and Partner
Tools AWS
Partners
Migration
Methodology
AWS
Training
AWS
Professional
Services
AWS
Investment
Migration Acceleration Program - Windows
https://aws.amazon.com/windows/map-for-windows/

Microsoft Active Directory su AWS per supportare i tuoi Windows Workloads

Microsoft Active Directory su AWS per supportare i tuoi Windows Workloads

Recommandé

Recommandé

Contenu connexe

Tendances

Tendances (20)

Similaire à Microsoft Active Directory su AWS per supportare i tuoi Windows Workloads

Similaire à Microsoft Active Directory su AWS per supportare i tuoi Windows Workloads (20)

Plus de Amazon Web Services

Plus de Amazon Web Services (20)

Microsoft Active Directory su AWS per supportare i tuoi Windows Workloads