SAP S/4HANA Systems in Hyperscaler Clouds: Deploying SAP S/4HANA in AWS, Google Cloud, and Azure

Table of Contents
About the Authors
Foreword
Appreciations
Introduction
Chapter 1: Introduction to Public Cloud and Hyperscalers
	Important Features of Public Cloud
	Public, Private, and Hybrid Cloud
	Overview of the Clouds of the Major Market Players
		Amazon Web Services
			History
			Current Market Position
			Collaboration with SAP
		Microsoft Azure
			History
			Current Market Position
			Collaboration with SAP
		Google Cloud
			History
			Current Market Position
			Collaboration with SAP
		Other Market Participants
			Alibaba Cloud
			Oracle Cloud
			IBM Cloud
			Private Clouds
	SAP’s Cloud Strategy
		SAP RISE Program
			History and Features
			Most Important Core Processes
			Current Situation
		SAP HANA Enterprise Cloud
			History
			Features of the SAP HANA Enterprise Cloud
			Current Situation
		Additional SAP Services from the Cloud
			SAP Business Technology Platform
			SAP Cloud Services for Business Processes
			SAP Learning Cloud Services
	Summary
Chapter 2: SAP S/4HANA Systems on Public Cloud
	Development of SAP S/4HANA
	SAP S/4HANA in the Cloud
	SAP S/4HANA Architecture
		Overview
		Data Layer
		Application Layer
		Presentation Layer
		Communication Layer
		Additional Components
	Use Cases of SAP S/4HANA on Public Clouds
		Sizing
			Importance of Right Sizing
			Sizing Process
			HANA Sizing
			SAPS – SAP Application Performance Standard
			I/O Sizing
		Costs
			Example Calculation SAP S/4HANA System in Azure
		High Availability
			Overview High Availability
			Availability Classes
			High Availability of SAP S/4HANA Architecture
		Disaster Recovery
			Disaster Overall
			Important Parameters in a Disaster Case
			Possible Implementations
		Backup and Restore
			Important Components for Backup and Restore
			Backup Classes
			Retention
			Backup Technologies
			Backup Solutions Out of the Cloud
		Integration and Network
			Access via Internet
			Azure ExpressRoutes/AWS Direct Connect/Google Cloud Interconnect
			Hybrid Cloud via Cloud Connect Using the Example of Equinix Fabric
			Comparison of Connection Types
		Automation
			Automation Goals
			Automation with Hyperscalers
			Third-Party Vendors
			SAP’s Own Automation
			SAP Intelligent Robotic Process Automation
			Implementation Effort
		Horizontal and Vertical Scalability
			Horizontal Scalability
			Vertical Scalability
			Consider Availabilities
	Summary
Chapter 3: SAP S/4HANA Deployment and Migration
	Contractual Basis and Support
		Important Points to Be Considered
		Direct Use or Use via a Partner
		Needed Support
		DSVGO
		Support for Projects
	GxP Framework and Important Certificates
		GxP in General
		Split of Responsibilities
		Additional Certifications
			SOC 1 and 2
			HIPAA/HITECH/HITRUST
			ISO Certificates
	Management of an SAP S/4HANA Landscape
		Important Features of SAP Solution Manager
		Application Operation Using SAP Solution Manager
		Using SAP Cloud ALM
	Choosing a Hyperscaler
		Quantitative Factors
		Qualitative Factors
	Deployment and Migration
		Transformation Is a Must
		New Approaches Using the Cloud
		Greenfield Deployment
		Brownfield Deployment
			Homogeneous Migrations
			Heterogeneous Migrations
			Sequence of Migration
		Migration Scenarios for SAP S/4HANA Transformations
	SAP S/4HANA As SaaS Services
		Overview
		Differences Between the Editions
			Infrastructure Level
			Implementation Level
			Process Level
			Configuration and Enhancement Level
			Security Level
			Overall Comparison
		Advantages and Disadvantages
		Use Cases
	Summary
Chapter 4: SAP S/4HANA on AWS Elastic Compute Cloud – Concepts and Architecture
	History of Amazon AWS
		New Infrastructure and Innovations
			Fast and Easily Scalable Solutions
			Three Reasons Why AWS Is Dominating the Cloud Marketplace
		Reasons for AWS
			Easy to Use
			Flexible
			Economical
			Reliable
			Scalable and Extremely Powerful
			Secure
		AWS Business Growth in the Last Six Years
	Offered Cloud Services
		Compute
		Storage
			Amazon Elastic Block Store (Amazon EBS)
			Amazon Elastic File System (Amazon EFS)
			Amazon FSx
			Amazon Simple Storage Service (Amazon S3)
		Networking
			Amazon Virtual Private Cloud (Amazon VPC)
			AWS Site-to-Site VPN
			AWS Direct Connect
			Amazon Route 53
			Amazon Time Sync
		Identity Management
		Security and Compliance
		Management Tools
			AWS Management Console
			AWS Command Line Interface (AWS CLI)
			AWS CloudFormation
			Amazon CloudWatch
			Amazon CloudTrail
			AWS Config
	Regions and Availability Zones/Sets
		AWS Region
		Availability Zones
		AWS Placement Groups
			AWS CloudFormation
			Partition Placement Group
			Spread Placement Group
			Planning S/4HANA Implementation: Selection of Region
			Planning S/4HANA Implementation: Selection of Availability Zone
			Selection of Availability Zone – Non-production SAP S/4HANA System
			Selection of Availability Zone – Production SAP S/4HANA System
	The AWS Console
		Supported Browsers
		User for Management
			AWS Root User
			AWS Identity and Access Management (IAM) User
		IAM Role and IAM User Group
		Getting Started with the AWS Console
		Changing the Region
		Navigating to Services
		Search AWS Service
		Billing and Cost Management Service
	Integration into Core Services
		Internal Access Architecture
		Internal and Limited External Access
			Architecture Setup with VPN Connections
			Architecture Setup with Elastic Load Balancing (Ingress)/NAT Gateway (Egress)
			Access to an SFTP Server in a Private Subnet
			HTTPS-Based Web Service Interfaces to/from SAP PI/PO
			Internal and Full External Access
			Example Landscape Setup
		Active Directory
			AWS Managed Microsoft Active Directory Service
			Self-Managed ADDS Deployment in the AWS Cloud
			Extend the Existing On-Premises ADDS to AWS
			AWS Managed Microsoft Active Directory Service
			Implementation Considerations for AWS Managed Microsoft Active Directory As Central ADDS
			Implementation Considerations for AWS Managed AD with SAP S/4HANA DR Consideration
			How to Create an AWS Managed Microsoft Active Directory
			DNS Name Resolution with Route 53 Resolver
			Set up an Integrated DNS View for Amazon VPCs and On-Premise Networks
			Working Solution for Scenario: Query from On-Premise to AWS Route 53
			Working Solution for Scenario: Query from AWS Resource for On-Premise DNS
			Monitoring AWS Managed ADDS
		Dynamic Host Configuration Protocol (DHCP)
			Working with DHCP Options Sets
			Create DHCP Options Set
			Edit DHCP Options Set
	Summary
Chapter 5: SAP S/4HANA on AWS Elastic Compute Cloud – Deployment
	Exemplary Architecture
	Deployment Scenarios
		Single-AZ and Single-Node Architecture
		Single-AZ and Multinode Architecture
		Multi-AZ, Single-Node SAP S/4 High Availability Architecture
		Option A: Overlay IP Using AWS Transit Gateway
		Option B: Overlay IP Routing with Network Load Balancer
	SAP HA Cluster Setup
		SAP NetWeaver/HANA High Availability Setup on RHEL and SUSE
			SAP NetWeaver Availability Setup on Windows Platform
		Windows Server Failover Clustering (WSFC) Using Amazon FSx File Share Solution
		Windows Server Failover Clustering (WSFC) Using SIOS Protection Suite on AWS
	Compute
		Available EC2 Instance Family
		EC2 Instance Licenses
		SAP S/4 Certified EC2 Instance Types
		EC2 Provisioning
			Manual Deployment with AWS Console
			Create VPC, Subnet, NAT Gateway (Create Elastic IP Address Before You Create VPC)
			Automated Deployment with Scripts
				Terraform
				Ansible
	Storage
		Amazon EBS
		Amazon EC2 Instance Store
		Amazon EFS
		Amazon S3 (Simple Storage Service)
		Storage Layout for S/4HANA System
			Standard System Deployment
			Distributed System Deployment
			High Availability System Deployment
				Indicative File System Setup for Non-high Availability Setup
				Indicative File System Setup for High Availability Setup
	PAYG vs. Commitment – Calculator
		On-Demand Instances
		Reserved Instance
		Payment Option
		AWS Calculator
			On-Demand Instance Cost
			Reserved Instance Cost
	Security on AWS
		Tools
			Tools for Access and Identity Provisioning and Protection
			Tools for Data Protection
			Monitoring and Logging Tools
			Security Event Response Mechanism
		Amazon Virtual Private Cloud Security (VPC)
		Subnet and Routing Tables
		Network Access Control List
		Security Groups (SGs)
		Virtual Private Gateway
		Internet Gateway
	Backup and Restore in AWS
		SAP HANA DB Backup/Recovery via AWS Backint Agent
			EC2 Instance and EBS Volume Backup to S3
			Snapshot Backup from AWS Console
			EC2 Image Backup
			AWS Backup
			Backup Configuration Steps from AWS Console
		Restore Snapshot from AWS Console
	Disaster Recovery via AWS
		Passive DR Architecture – RPO Is More Than Zero and RTO Is Higher
			Steps to Configure the Passive DR
			Steps to Invoke Passive DR
		Semi-active DR Solution [RPO Is Near to Zero and RTO Is Medium]
			Steps to Configure the Semi-active DR
			Steps to Invoke DR
		Active-Active DR Solution [RPO Near to Zero and RTO Is Very Less]
			Steps to Configure the Active DR
			Steps to Invoke DR
			SAP HANA HSR Setup Guide
	Summary
		Cloud Foundation Design and Implementation
		SAP S/4 Architecture Design and Implementation
Chapter 6: SAP S/4HANA on Microsoft Azure – Concepts and Architecture
	Historical Overview of Microsoft Azure
	Azure Control and Subscriptions
		Azure Organizational Structure
		Subscription Models
		Subscription Management
			Authorization Management
			Limits, Budgets, and Restrictions
			Policies
	Azure Resource Management
		Resource Provisioning Using Resource Manager
			Classic vs. ARM Resource Management
			Migration of Classic Provisioned Resources to ARM
			Provisioning with Azure Resource Manager
		General Deployment Options
			Regions and Availability zones
			Azure Blueprints
			Availability Sets
			Proximity Placement Group
			Scale Sets
		Computing
			Deployment Models
				Azure VMs
				Azure Large Instances for SAP HANA
				SAP Cloud Appliance Library (CAL)
			Virtual Computers
				Relationships Between Resources
				PAYG vs. Reserved Instances
				VM Instance Types
				VM Generations
				VM States
				Spot Instances
				vCPU Quotas
			Dedicated Azure Hosts
			Requirements for SAP and Microsoft Azure Support (VM)
		Storage
			Performance Characteristics of Storage Technology
			Managed vs. Unmanaged Volumes
			Data Carrier Roles
			Redundancy Options
			Disk Types
		Network and Services
			Hub-Spoke Topology and Network Peering
			ExpressRoute vs. S2S VPN
			Network Security Groups and the Azure Firewall
			Network Interfaces
			Network Performance
			Load Balancing
		Support and Licensing
	Azure Disaster Recovery Services
		Azure Backup
		Backup Vault
		Recovery Services Vault
			Azure VM Backup
			HANA DB Backup
			Azure Site Recovery
	S/4 on Azure Architecture
		Basic Reference Architecture
		Virtual Private Network Reference Architecture
	Summary
Chapter 7: SAP S/4 on Microsoft Azure – Deployment
	Azure S/4HANA Reference Architecture
	Deploying a Basic Network Configuration via Azure Cloud Portal
		Azure Cloud Portal
		Naming Conventions and the Resource Concept
		Creating Resource Groups
		Network Configuration
		Creating Network Security Groups
	Deployment of a HANA HA Cluster
		HANA Cluster Architecture
		Provisioning HANA Cluster Resources
			Azure Quick Start Templates
			Customizing the DB Quick Start Template
			Customized Template Deployment
			Manual Provision of the iSCSI Target Servers
				Creating the Virtual Machine
				iSCSI Target Server Configuration
		Configuration of the Pacemaker Cluster
			Mounting the iSCSI Disk
			Using the iSCSI Disk As an SBD Device
			Initialization of the Pacemaker Cluster
			Excursus on Azure Fencing Agent
		Setting Up the HANA HA Cluster
			Installation of HANA Database
			Setting Up the System Replication
			Defining HANA Cluster Resources in Pacemaker
	Deploying an S/4HANA HA Cluster
		SAP S/4HANA Cluster Architecture
		Provisioning SAP S/4HANA Cluster Resources
			Creating a Virtual Machine
			Creation and Configuration of the Load Balancer
				ASCS/ERS Load Balancer
				Load Balancer for the Application Server Pool
		Highly Available NFS Storage in Azure
			Alternative 1: NFS Server Cluster
				Create Azure Resources
				Configuration of the NFS Cluster
			Alternative 2: Azure NetApp Files
				Registering for ANF
				Creating a Capacity Pool
				Creating and Mounting ANF Volumes
		Installation of ASCS and ERS
			Preparing the File System and Mounting NFS
			Installation of the ASCS Cluster
			Installation of the ERS (ENSA2) Cluster
			Final Configuration
		Installation of PAS and AAS
	Excursus: Automated SAP Provisioning
		Ansible and Terraform in Azure
		SAP Cloud Appliance Library
	Summary
Chapter 8: SAP S/4HANA on Google Cloud – Concepts and Architecture
	History of Google Cloud
		Development of the Partnership Between SAP and Google
		Reasons for Choosing SAP on Google Cloud
			Innovation
			Risk and Downtime Minimization
			Flexibility and Cost Optimization Through Simplified Deployment
			Sustainability
	Google Cloud Organizations and Resources
		Google Cloud Resource Hierarchy
		Properties of Google Cloud Resources
	Google Cloud Offered Services Important for SAP S/4HANA
		Google Cloud Compute Engine
			Business Continuity Features
			Service-Level Agreements (SLA) for Compute Engine
			Operating Systems on Compute Engine
		Storage Considerations
			Google Cloud Disks
			File Sharing Solutions for SAP on Google Cloud
				Google Cloud Storage
		Google Cloud VPC and Networking
			Google Cloud VPC Setup
			Cloud VPN, Partner, or Dedicated Interconnect
			Inbound (Ingress) and Outbound (Egress) Traffic
			Routing and Forwarding Rules
			Firewalls
			Cloud DNS
			Cloud NAT
			Cloud Load Balancing
		Google Cloud Security
			Security Solutions
			Identity and Access Solution
			Identity Provider and Authoritative Source
			Google Cloud Identity and Access Management (IAM)
		Google Cloud Operations
			General Features of Google Cloud Operations
			Google Cloud Monitoring and Logging Agent for SAP HANA and SAP NetWeaver
		Google Cloud Customer Care
		Further Google Cloud Services Relevant for SAP S/4HANA Deployments
	Google Cloud Front End
		Google Cloud Front-End Tools
		Typical User Roles in an SAP on Google Cloud Landscape
	SAP S/4HANA on Google Cloud Architecture
		Licenses and Sizing
		SAP S/4HANA Architecture Overview
		Setup for High Availability
			Infrastructure Layer
			Live Migration
			Host Auto-Restart
			High Availability of the SAP HANA Database Layer
			SAP HANA Scale-Out Node Host Auto-failover
			High Availability of SAP NetWeaver Application Servers
		Disaster Recovery Setup
		Primary and Secondary Storage Considerations and Recommendations
			Persistent Disk Snapshots
			Google Cloud Storage Buckets with SAP HANA Backint
			Actifio
			NetApp
			CommVault
		Excursus: SAP S/4HANA Scale-Out (SAP Innovation Award 2021)
		Excursus: SAP HANA Fast Restart and Memory Poisoning Recovery Capabilities for SAP S/4HANA
	Summary
Chapter 9: SAP S/4HANA on Google Cloud – Deployment and Setup
	Example Architecture for SAP S/4HANA on Google Cloud
	Planning and Deployment Checklists for SAP on Google Cloud
	Google Cloud Account, Network, and Security Setup
		Google Account, Cloud Billing, and Identity and Access Management Setup
		Shared VPC, Subnets, Firewall Rules, Cloud NAT, and Cloud DNS Setup
			Shared VPC and Subnet Setup
			Firewall Rule Setup
			Setup of Cloud NAT
		Setup of Cloud DNS
	Google Cloud Compute Setup
		Deployment of the SAP HANA Database
			Prerequisites for the Deployment of SAP HANA with High Availability
			Automated Deployment of SAP HANA High Availability Systems
			Manual Deployment of SAP HANA High Availability Systems
			Verification of the SAP HANA High Availability Systems Deployment
			Follow-Up Tasks After the Installation of the SAP HANA Systems
		Deployment of SAP NetWeaver Application Servers
			Prerequisites for the Deployment of SAP NetWeaver Application Servers
			Automated Deployment of SAP NetWeaver Application Servers
			Manual Deployment of SAP NetWeaver Application Servers
			Verification of the SAP NetWeaver Application Server Deployments
			Configuring the High Availability Cluster
	Pricing and Billing Concepts with Best Practices
		On-Demand vs. Committed Use Discounts
		Reservations in Google Cloud
		Google Cloud Quotas and Budgets
		Pricing Calculation for the SAP S/4HANA on Google Cloud Architecture Example
	Backup and Restore on Google Cloud
		Backups for SAP NetWeaver Application Server
		Backups for SAP HANA Database
			Setup of Snapshot-Based SAP HANA Backups
			Setup of SAP HANA Backint with Cloud Storage Backint Agent
	Scripting and Automation on Google Cloud
		Tools for Scripting and Automation on Google Cloud
		Use Case: Automated Start and Stop of Instances
		Use Case: Autoscaling for SAP NetWeaver Application Servers
		Use Case: Simplification of Operations
		SAP Landscape Management and Google Cloud
	Disaster Recovery on Google Cloud
		SAP HANA Disaster Recovery
		SAP NetWeaver Application Server Disaster Recovery
		Recommendations for Disaster Recovery Planning
	Summary
Chapter 10: Summary and Outlook
	Momentum of SAP S/4HANA
	Public Cloud Is an Established Trend
	Public Cloud As Innovation Driver
	Outlook
Index