Running Microsoft workloads on AWS is easy and can save you money. This session will cover how to bring your own Microsoft licenses to AWS, and then demonstrate using PowerShell to import your Windows Server image from Vmware or Hyper-V, configure Windows KMS with your license key, and launch an EC2 Dedicated Host. We will discuss ways you can use AWS Config rules to manage license compliance.

1. © 2016, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Scott Zimmerman, Solutions Architect
November 29, 2016
Bring Microsoft Applications to AWS to Save
Money and Stay License Compliant Using
PowerShell, Windows KMS, and Dedicated Hosts
WIN301

2. What to Expect from the Session
• BYOL Terminology
• Dedicated Hosts
• Cut SQL Server costs in half
• AWS Config
• AWS VMImport with PowerShell

3. What isn’t covered here
• Service Provider License Agreement
• Microsoft Office
• Amazon WorkSpaces
• Please email: microsoft@amazon.com

4. AWS Resources for Microsoft Workloads
Documentation
http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide
Quick Starts
https://aws.amazon.com/quickstart
Whitepapers
Windows https://aws.amazon.com/windows/resources/whitepapers
All AWS https://aws.amazon.com/whitepapers
Tools
.NET SDK https://aws.amazon.com/net
Visual Studio Plugin https://aws.amazon.com/visualstudio
PowerShell Tools https://aws.amazon.com/powershell
AWS Developer Tools https://aws.amazon.com/tools
DevOps https://aws.amazon.com/devops/windows
Training & Certification
Qwiklabs https://aws.amazon.com/windows/resources/training
Training https://aws.amazon.com/training
Certification https://aws.amazon.com/certification
Getting Started
https://aws.amazon.com/windows/getting-started
Pricing & Calculators
https://aws.amazon.com/ec2/pricing
https://aws.amazon.com/pricing
Partners
https://aws.amazon.com/partners/competencies/microsoft
http://www.aws-partner-directory.com
Videos
https://aws.amazon.com/windows/resources/#videos
https://aws.amazon.com/windows/events
https://www.youtube.com/AmazonWebServices
https://www.youtube.com/AWSwebinars
Discussion Forums
EC2 https://forums.aws.amazon.com/forum.jspa?forumID=30
.NET https://forums.aws.amazon.com/forum.jspa?forumID=61
More
Windows on AWS Homepage https://aws.amazon.com/windows
FAQs https://aws.amazon.com/windows/faq
MS Licensing https://aws.amazon.com/windows/resources/licensing
SQL Server https://aws.amazon.com/windows/products/sql
SharePoint https://aws.amazon.com/windows/products/sharepoint
Exchange https://aws.amazon.com/windows/products/exchange
System Center https://aws.amazon.com/windows/products/system-center
Contact Us https://aws.amazon.com/windows/contact-us
Windows Resources https://aws.amazon.com/windows/resources
Support https://aws.amazon.com/premiumsupport
Software Marketplace https://aws.amazon.com/marketplace

5. Quick Start: SharePoint Server

6. Licensing Terminology

7. Buy License-Included Instances from AWS
Microsoft Licensing Options on AWS
Bring Your Own Licenses to AWS
Windows Server with
SQL Server
Dedicated options if
you don’t have
Software Assurance
Default tenancy for
licenses eligible for
License Mobility
Windows Server

8. Microsoft licensing options in Amazon EC2
Buy licenses from
AWS
Use
License Mobility
Bring your own
licenses (BYOL)
• Leverage existing
software investments
• You manage compliance
with Microsoft
• Software Assurance not
required
• Leverage existing
software investments
• AWS manages Windows
Server licensing
• Software Assurance
required
• AWS manages licensing
• Pay as you go pricing
• Default tenancy or
Dedicated Instances
• Software Assurance not
required
• Unlimited CALs
Licensing flexibility helps you optimize your costs.

9. License Included (AMIs from AWS)
• Fully managed licensing
• All versions of Windows Server, even 2003
• Supported versions of SQL Server (optional)
• Hourly instance cost includes license
• No need to buy Software Assurance
• No need to buy Client Access Licenses (CALs)
• Includes 2 Remote Desktop CALs

10. License Mobility
License Mobility is a benefit of
Microsoft Software Assurance allowing
customers to move existing licenses
from on-premises to the cloud

11. You Live
Here
Dedicated
Instance
Dedicated
Host
Default-
Tenancy
Until you
reboot

12. Dedicated Hosts
• Primarily used for processor and core-based products
• Software Assurance is not required
• AWS assigns the physical host to the customer
• Meets Microsoft’s 90 day reassignment rule
• Best choice for customers that want to carry in many
Microsoft licenses
• Windows Server cannot be bought from AWS (must use
ImportImage)

13. Dedicated Instances
• Can BYOL without Software Assurance, or for products
ineligible for License Mobility
• Supports products licensed by user (e.g. Skype for
Business, Exchange, and Remote Desktop Services)
• Windows Server must be bought from AWS (unless you
have MSDN and the workload is not “production”)

14. Microsoft Licensing on Amazon EC2
License Type
Dedicated
Hosts
Dedicated
Instances
Default-Tenancy
Windows Server
Only with
ImportImage
Must Buy
License Included
Must Buy
License Included
SQL Server
License Mobility
or License Included
Other Microsoft
Products
User-based
License Required
License Mobility
Required
MSDN

15. Dedicated Hosts vs. Dedicated Instances
Characteristic
Dedicated
Instances
Dedicated
Hosts
Enables use of dedicated physical servers
First instance per region $2 per hour
Per host billing
Visibility of sockets, cores
Affinity between host and instance
Targeted instance placement
Automatic instance placement
Add capacity with allocation request

16. Questions so far?

17. Dedicated Hosts

18. When to use Dedicated Hosts?
• To leverage your existing Windows Server investments
• To BYOL if you don’t have Software Assurance, or product isn’t
eligible for License Mobility (e.g., Windows or Microsoft Office)
• For compliance or accounting reasons
• To reduce costs at scale (e.g., fill the host)

19. Bringing your licenses to Dedicated Hosts
Allocate
dedicated
hosts3
Launch
Instances onto
Dedicated
Hosts4Activate AWS
Config
2
Import VM
images with VM
Import/Export1

20. Host Lifecycle
1. Allocate an “On-Demand” Host
2. (optional) Purchase a Host Reservation and Assign it to
the Host
3. Launch Instances on the Host
• Must be an imported and licensed Windows Server image
4. Terminate the Instances
5. Release On-Demand Host. (When reservation expires,
it reverts to on-demand.)

21. Dedicated Host Allocation
DH instance
type sets its
max capacity:
For example, a c4 DH can hold:
• 16 * c4.large (2 vCPUs), or
• 2 * c4.4xlarge (16 vCPUs), or
• 1 * c4.8xlarge (32 vCPUs)
Technically there are 40 vCPUs in a c4 DH, but AWS
reserves some for the host OS.

22. Dedicated Host Configurations
Example: c3.xlarge host has capacity for 8 c3.xlarge instances
Dedicated Host Attributes Instance Capacity Per Host by Instance Size
Instance
Type
Sockets
Physical
Cores
medium large xlarge 2xlarge 4xlarge 8xlarge 10xlarge 16xlarge 32xlarge
c3 2 20 - 16 8 4 2 1 - - -
c4 2 20 - 16 8 4 2 1 - - -
p2 2 36 - - 16 - - 2 - 1 -
g2 2 20 - - - 4 - 1 - - -
m3 2 20 32 16 8 4 - - - - -
d2 2 24 - - 8 4 2 1 - - -
r3 2 20 - 16 8 4 2 1 - - -
m4 2 24 - 22 11 5 2 - 1 - -
i2 2 20 - - 8 4 2 1 - - -
x1 4 72 - - - - - - - 2 1

23. How many licenses does a Dedicated Host
require?
• Microsoft:
Windows Server 2012 R2 Licensing Datasheet
• AWS:
Amazon EC2 Dedicated Hosts

24. Two payment options for your hosts
On-Demand
• Per-hour host billing
• Allocation initiates billing
• Scale up and down
• Access to hosts on-demand
worldwide in seconds
Reservations
• Save up to 70% over On-
Demand
• 1-year and 3- year terms
• Upfront payment options
• Reservations are assigned
to specific Dedicated Hosts

25. Should you BYOL or buy LI?
• Create a simple spreadsheet
• Grab some numbers from AWS Simple Monthly Calculator:
• Dedicated Host?
• Reservation?
• With SQL Server?
• With AWS Business Support?
• Do you have a sunk cost on your licenses, or considering new licenses?
• Do you plan to buy Software Assurance, and for how long?
• Multiply your Enterprise Agreement Level per-proc cost by number of vCPUs.

26. Dedicated Hosts
• Avoid buying extra licenses
• Instances automatically fill
available hosts
• Can reserve your own
excess capacity for DR
• Can run Windows Server
Standard Edition, but pay
attention to the OSE terms
in your agreement!
• Best Practice: Ensure your
workload is placed across
two Availability Zones for HA.

27. Advantages of License Included
• Easy to let AWS manage your license compliance
• Reduce costs if you decide to consolidate workloads later
• Reduce costs if you choose to stop the instances
• Reduce costs if you don’t need full Dedicated Host capacity
• Retain freedom to re-platform

28. SQL Server on Amazon EC2

29. Amazon RDS for SQL Server
SQL Server Options
SQL Server on Amazon EC2
BYOL
License
Included BYOL
License
Included
DH DI DT DI DT
License Mobility
Required

30. SQL Server Architecture Impacts Licensing
• Network latency between AWS Availability Zones is so low that you
can synchronous commit (therefore automatic failover) for most
applications
• Does HA == DR?
• Think about potential data corruption spread
• Some customers have distance requirements disallowing separate
Availability Zones for DR
• AWS also provides multi-region DR (RTO == a few hours)
• Deploy new farm from AWS CloudFormation
• Restore data from snapshots in Amazon S3

31. Multi-AZ AlwaysOn Availability Group
Availability Zone 1
Private Subnet
EC2
Primary
Replica
Availability Zone 2
Private Subnet
EC2
Secondary
Replica
AWS Region
Synchronous Commit
Automatic Failover

32. Multi-Region AlwaysOn Availability Group
Availability Zone 1
EC2
Primary
Replica
AWS Region A
Availability Zone 2
EC2
Secondary
Replica
Availability Zone 1
EC2
Secondary
Replica
AWS Region B
Elastic IP
VPN
Elastic IP
Synchronous Commit
Automatic Failover
Asynchronous Commit
Manual Failover

33. Architect SQL Server to Save Money
• Is your secondary SQL Server instance completely “passive,” not a
Read Replica, or even a backup source?
• With License Mobility, you can eliminate licenses for each vCPU in
the passive SQL Server instance

34. Amazon RDS for SQL Server

35. BYOL SQL Server in Amazon RDS
• Submit a License Mobility form to Microsoft for verification of your
licenses
• Microsoft will verify it to you and to AWS
• You may deploy your application up to ten days before submitting
the form
• RDS License Model: choose BYOL instead of License Included

36. SharePoint Server

37. BYOL Windows
Server?
BYOL Decision Tree: SharePoint Server
Do you have a SharePoint
Server license?
1 No AWS
Marketplace
Is it MSDN and your
workload is not PROD?2
Yes DI or
DH
Do you have License
Mobility?3
No
Yes
No
Yes
No
BYOL Windows Server?
Yes
DH
No
4
Yes
5
DT
Notes: SharePoint Server
ineligible for DI except
with MSDN. Cannot
BYOL on default-tenancy
without License Mobility.

38. AWS Config

39. AWS Config
• Microsoft requires that you track usage of your licenses
against physical resources such as sockets and cores.
• AWS Config tracks configuration changes that occur on
a Dedicated Host, including the instances and AMIs,
Host ID, and the number of sockets and physical cores.
• Also tracks instance tags (recommended).

40. AWS Config
You can accept the default for all of these:
• Which AWS resources do you want to track?
• Which Amazon S3 bucket will hold the files?
• Which Amazon SNS topic will get notifications?
• Which AWS IAM role will AWS Config use?

41. VM Import/Export Service

42. AWS VM Import/Export Demo with PowerShell

43. AWS Tools for Windows PowerShell
• More than 2,100 cmdlets and constantly growing
• Install options
• .msi with AWS SDK for .NET and AWS Visual Studio Toolkit
• PowerShell Gallery
• Pre-installed on EC2 Windows
• Initial setup
• Set credential profile(s) for local use
• Set a default region

44. Demo: VMImport with
PowerShell

45. Customer: Deltek
• Saving hundreds of thousands on licensing costs with
Dedicated Hosts
• Running production workloads on AWS for more than
20,000 organizations in 80+ countries
• Being on AWS has helped Deltek with scalability and
rapid growth via acquisitions
• Compliance is key with many public sector customers
(e.g., FedRAMP, ITAR)

46. Customer: Infor
• Running production workloads on dedicated hosts with BYOL to take
advantage of ELA pricing
• Delivering cloud solutions on AWS to ~5,000 companies around the
globe
• Running a very large multi-OS environment that includes 1,000
Windows instances
• Achieving the high availability essential for their business customers, as
well as the agility to respond faster to growing customer requirements
• “Friends don’t let friends build datacenters.”
– CEO Charles Phillips at AWS Summit in 2014

47. Grow your Business with APN Partners
Partner Solutions Finder (just
launched) – Find the best AWS
Competency and Service Delivery
partners to meet your business needs
Visit our kiosks in Sands Lower Lobby,
Executive Summit, or the AWS Booth
http://aws.amazon.com/partners/find

48. Questions?
Please come to the mic.
Visit the Windows Solutions kiosk in the main AWS booth.
Or email: microsoft@amazon.com

49. Thank you!

50. Remember to complete
your evaluations!