1
Sales Order Management Product Manuals 2
Agility Assurance (Security) Efficiency Experience (Apps) Business Growth 3
Catalog Existing application Define criteria for moving to or starting applications in the cloud Architect core infrastructure components for cloud integration Networking Identity Security Acquire cloud development skills Retool for adoption and change management Take a systematic and disciplined approach to Security, Governance, Compliance https://azure.microsoft.com/mediahandler/files/resourcefiles/d8e7430c-8f62-4bbb-9ca2- f2bc877b48bd/azure%20onboarding%20guide%20for%20it%20organizations.pdf https://docs.microsoft.com/en-us/dotnet/standard/modernize-with-azure-and-containers/ https://azure.microsoft.com/en-us/resources/videos/connect-2017-applicationmodernization-with-microsoft-azure/ https://gartnerinfo.com/futureofit2011/mex38l_a2%20mex38l_a2.pdf https://www.gartner.com/doc/3249517/use-cloud-modernize-legacy-systems RBAC / Identity & Access Management Microsoft Azure Active Directory Standards Bases Integration: OAuth2 & OpenID Connect SAML Windows Server Active Directory Encrypted Synchronization On-premises Azure AD WS-Federation REST based Graph API SCIM FIDO Consumer identity providers Azure Public cloud Public Cloud, Your Apps, 2500+ popular SaaS apps Identity Driven Security ACTIONS Conditions Allow access Location (IP range) User Multi Factor Authentication Device state User group Risk Enforce MFA per user/per app Block access NOTIFICATIONS, ANALYSIS, REMEDIATION, RISK-BASED POLICIES CLOUD APP DISCOVERY PRIVILEGED IDENTITY MANAGEMENT 4
Subscription Management USER / GROUP ATTRIBUTES User identity, Group memberships, Auth Strength DEVICES Roles - Global Admin - User Admin - Etc. Graph API Subscription trusts one directory Is Domain Joined, Is Compliant, Platform type (IOS, Android, Windows) APPLICATION Per application policy, Client type, (Native apps, web apps) User Apps Groups Devices Active Directory Identity management & Authentications Microsoft Azure AD Allow Enforce MFA Block OTHER Location (IP Range), Risk Profile (future) ARM API Platform Team Network & Security Team Owner Virtual Network Contributor and Virtual Machine Contributor Production Subscriptions Partitions, Subscriptions, resource groups or resources. Permissions Inherited downstream Storage & Backup Team Storage Account Contributor Test Subscription Database Management Team SQL Server Contributor and SQL Security Manager Development Team Virtual Machine Contributor and Website Contributor Dev Subscription App Support Team Virtual Machine Contributor and Website Contributor The Big (Network) Picture Users Internet Azure Virtual Network Virtual Network Bring your own network Segment with subnets and security groups Control traffic flow with user defined routes Front-End Access Dynamic/Reserved public IP addresses Direct VM access, ACLs for security Load balancing DNS services: hosting, traffic management Traffic Manager DDoS protection Backend connectivity ExpressRoute and VPN Backend connectivity Point-to-site for dev/test VPN Gateways for secure siteto-site connectivity ExpressRoute for private enterprise grade connectivity 5
Task automation and configuration management framework Command-line shell and associated scripting language built on the.net Framework Full access to COM and WMI, enabling administrators via WS-Management and CIM enabling management of remote Linux systems and network devices Deploy- Automate initial deployments and upgrades using templates Manage - Access control, policies, auditing and tagging support management postdeployment Monitor - Monitor related resources as a group Automation as a Service An orchestration service in Azure to automate repetitive or long-running processes Script Authoring Environment Uses PowerShell Workflows Combination of PowerShell 4.0 and WF Uses Integration Modules, very similar to PowerShell Modules Scheduling and Monitoring Execute scripts on a schedule Review execution status on a dashboard + + DevOps CI/CD deployment pipeline 6
Azure subscription Cost Management, portal or ANALYTICS: Multicloud Cost Management (Azure/AWS/GCP) custom reports Azure Usage API retrieve resource usage data, along with resource tags and resource metadata. Azure Role-based Access Control Hourly or Daily Aggregations Instance metadata provided (includes resource tags) Resource metadata provided Usage for all offer types PowerBI Azure Enterprise Scaffold: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-managersubscription-governance Modern Service Management for Azure: https://azure.microsoft.com/en-us/resources/msm-for-azure/ 7
IaaS Cloud (VMs) PaaS PaaS/FaaS Web App 8
9
Create Project Download Collector Create Collector VM Create Assessment Group Collect VM Usage Collect Metadata View Assessment Report Optional: Dependencies Azure readiness, monthly cost estimates for computing, and a monthly cost estimates for storage. Summary of the number of machines suitable for Azure which is referred to as Azure Readiness. Monthly estimate of the cost for running the machines in Azure after migration. Storage monthly cost estimate 10
11
M I G R A T I O N G U I D E Azure Database Migration Service (DMS) SQL Server Migration Assistant (SSMA) Data Migration Assistant (DMA) Database Experimentation Assistant (DEA) Azure Database Migration Service (DMS) Near-zero downtime enabled by 3 rd party tools Data Migration Assistant (DMA) SQL Server Migration Assistant (SSMA) 1. Assess and identify issues 3. Migrate schema, data, and logins Legacy SQL Server Instance DMA 2. Fix issues 12
Microsoft gallery images SQL Server 2008 R2 / 2012 / 2014 / 2016 / 2017 SQL Server Web / Standard / Enterprise / Developer / Express Editions Windows Server 2008 R2 / 2012 R2 / 2016 Linux RHEL / Ubuntu SQL licensing Based on SQL Server edition and core count (VM Sizes) Pay-per-minute Bring your own license Move an existing license to Azure through BYOL images Commissioned in ~10 minutes Connect via RDP, ADO.Net, OLEDB, JDBC, PHP, and so on Manage via Azure portal, SSMS, Powershell, CLI, System Center, and so on 13
Fully managed database migration service for both operational databases, data warehouses. Supports minimal down time migrations From On-premises, Private Clouds, and Public Clouds SQL DB11 Project 1 Source Server 1 DB12 DB3 Migration task Validation task Next Projects DB14 DB15 Target Azure SQLDB managed instance Project 2 Source Server 1 DB16 DMS Service Project 3 DB21 DB22 Target Azure SQL Database Migration task Done Validation task Assign worker 14
Delivers Minimum Downtime Used to have minimal downtime during migration Configure your Azure SQL Database as a subscriber All changes to your data or schema show up in your Azure SQL Database Synchronization is complete change connection string of your application Remove Replication 15
MIGRATION EASY NO DOWNTIME HETEROGENEOUS 2012 Parallel Data Warehouse ON PREM Analytics Platform System FOR MICROSOFT MIGRATIONS SQL Database SQL Data Warehouse CLOUD Azure DB for MySQL Azure DB for PostgreSQL no-charge offer co-sponsored by Microsoft & Attunity Developed Validation Tests Setup test environment Run validation tests Run performance tests Developed validation tests - To test database migration, we used SQL queries. We created the validation queries to run against both the source and the target databases. The validation queries cover the scope we defined with the client. Set up test environment - The test environment contained a copy of the source database and a copy of the target database. We isolated the test environment. Run your validation tests - Run your validation tests against the source and the target, and then analyse the results. Run your performance tests - Run performance test against the source and the target, and then analyse and compare the results. 16
For SQL Server to SQL Server migrations, if an issue existed in the source SQL Server, migrating to a newer version of SQL Server as-is will not address this scenario. https://docs.microsoft.com/en-us/sql/relational-databases/post-migration-validation-and-optimization-guide 17
(Private Preview!) ISV / Enterprise developing cloud-born SaaS ISV / Enterprise developing cloud-born SaaS ISV / Enterprise starting cloud modernization ISV / Enterprise starting cloud modernization New apps, one database per app pattern New multi-tenant SaaS apps or modernized existing apps to SaaS Lift-and-shift rich SQL apps to PaaS without any code changes Lift-and-shift rich SQL apps, 3 rd party DB (Oracle, MYSQL) to IaaS, Dev & Test scenarios Migration of single/fewer apps to the cloud Bring your own license and license embedded SQL images DB-centric programming model Tenant isolation / resource guaranteed at the DB level Higher utilization efficiency with a shared resource model Resource guaranteed/sla at the pool level Rich, instance-centric programming model Nearly 100% compatibility Resource guaranteed/sla at Instance-level Azure VNet isolation 100% SQL Server compatibility Full control on the OS and - or SQL Server level VNet isolation SLA at VM level Reduced OPEX and CAPEX Dynamic scale Advanced security Intelligent database Self-tuning Full Control, Compatibility Security and High Availability License Mobility ISV / Enterprise developing cloud-born SaaS ISV / Enterprise developing cloud-born SaaS ISV / Enterprise starting cloud modernization ISV / Enterprise starting cloud modernization New apps, one database per app pattern New multi-tenant SaaS apps or modernized existing apps to SaaS Lift-and-shift rich SQL apps to PaaS without any code changes Lift-and-shift rich SQL apps, 3 rd party DB (Oracle, MYSQL) to IaaS, Dev & Test scenarios Migration of single/fewer apps to the cloud Bring your own license and license embedded SQL images DB-centric programming model Tenant isolation / resource guaranteed at the DB level Higher utilization efficiency with a shared resource model Resource guaranteed/sla at the pool level Rich, instance-centric programming model Nearly 100% compatibility Resource guaranteed/sla at Instance-level Azure VNet isolation 100% SQL Server compatibility Full control on the OS and - or SQL Server level VNet isolation SLA at VM level Reduced OPEX and CAPEX Dynamic scale Advanced security Intelligent database Self-tuning Full Control, Compatibility Security and High Availability License Mobility 18
19
Sales Order Management Product Manuals 20
Managed Instance brings PaaS closer to you! If yes, then go for Managed Instance!??? 21
What is SQL Database Managed Instance? A flavor of SQL DB that enables frictionless cloud migration for onprem SQL apps and modernization in a fully managed PaaS Managed Instance SQL Database (PaaS) Singleton Elastic Pool Easy lift and shift Fully managed PaaS Full isolation and security Fully-fledged SQL instance with nearly 100% compat with on-prem Built on the same PaaS service infrastructure All PaaS features Native VNET implementation Private IP addresses Security Integrated Auth (AAD) Encryption (TDE, AE) SQL Audit Row Level Security Dynamic Data Masking Note: features will be added in stages until General Availability of Managed Instance 22
OMS 23
Your work so far Hardware purchasing and management Protect data with backups Updates and upgrades How PaaS helps? Built-in Scales on-demand Built-in Point-In-Time-Restore Built-in HA DR Compliance with standards on your own Secure your data from malicious users and mistakes Monitor, troubleshoot and manage at scale Tune and maintain for predictable performance Built-in 99.99% SLA and auto-failover Built-in Geo-redundancy and geo-replication Built-in / easy to use features Built-in / easy to use features Built-in / easy to use features Built-in/ easy to use features 7 VNET Integrated web app (peered VNET) App subnet 2 App Service IaaS hosted app 3 Environment 4 VNET Integrated web app Peered network MI subnet Peering channel App subnet 5 IaaS hosted app SQL Instance #1 SQL Instance #2 virtual data cluster dedicated to customer Gateway subnet Express Route / VPN Gateway SQL MI Vnet 1 On-prem app Running in a VM with private IP injected in customer VNET 6 App Service Environment Peered Vnet 24
25
IaaS Cloud (VMs) PaaS PaaS/FaaS Web App CON-VNET Peering channel BonovaASE-Vnet SQL VM subnet MI subnet con-app-sqlmi 2 BACKUP TO AZURE SQL IaaS virtual data cluster dedicated to customer 0 ASE subnet AdventureWorksDemoApp 5 LOAD DATA WITH SQL AGENT BonovaASE 1 PROVSION Vnet and SQL MI 3 storage account 4 RESTORE FROM AZURE URL REPOINT APPLICATION 26
27
App Modernisation 28
We love to get feedback Please complete the session feedback forms 29
We want to empower today s innovators to unleash the power of data and reimagine possibilities that will improve our world 30