What is FSx for Windows File Server?
Amazon FSx for Windows File Server provides fully managed Microsoft Windows file servers, backed by a fully native Windows file system. FSx for Windows File Server has the features, performance, and compatibility to easily lift and shift enterprise applications to the AWS Cloud.
Amazon FSx supports a broad set of enterprise Windows workloads with fully managed file storage built on Microsoft Windows Server. Amazon FSx has native support for Windows file system features and for the industry-standard Server Message Block (SMB) protocol to access file storage over a network. Amazon FSx is optimized for enterprise applications in the AWS Cloud, with native Windows compatibility, enterprise performance and features, and consistent sub-millisecond latencies.
With file storage on Amazon FSx, the code, applications, and tools that Windows developers and administrators use today can continue to work unchanged. Windows applications and workloads ideal for Amazon FSx include business applications, home directories, web serving, content management, data analytics, software build setups, and media processing workloads.
As a fully managed service, FSx for Windows File Server eliminates the administrative overhead of setting up and provisioning file servers and storage volumes. Additionally, Amazon FSx keeps Windows software up to date, detects and addresses hardware failures, and performs backups. It also provides rich integration with other AWS services like AWS IAM, AWS Directory Service for Microsoft Active Directory, Amazon WorkSpaces, AWS Key Management Service, and AWS CloudTrail.
FSx for Windows File Server resources: file systems, backups, and file shares
The primary resources in Amazon FSx are file systems and backups. A file system is where you store and access your files and folders. A file system is made up of one or more Windows file servers and storage volumes. When you create a file system, you specify an amount of storage capacity (in GiB), SSD IOPS, and throughput capacity (in MB/s). You can modify these properties as your needs change after you create the file system. For more information, see Managing storage capacity, Managing SSD IOPS, and Managing throughput capacity on FSx for Windows File Server file systems.
FSx for Windows File Server backups are file-system-consistent, highly durable, and incremental. To ensure file system consistency, Amazon FSx uses the Volume Shadow Copy Service (VSS) in Microsoft Windows. Automatic daily backups are turned on by default when you create a file system, and you can also take additional manual backups at any time. For more information, see Protecting your data with backups.
A Windows file share is a specific folder (and its subfolders) within your file system
that you make accessible to your compute instances with SMB. Your file system already
comes with a default Windows file share called \share
. You can
create and manage as many other Windows file shares as you want by using the Shared
Folders graphical user interface (GUI) tool on Windows. For more information, see Accessing data using file shares.
File shares are accessed using either the file system's DNS name or DNS aliases that you associate with the file system. For more information, see Managing DNS aliases.
Accessing file shares
Amazon FSx is accessible from compute instances with the SMB protocol (supporting versions 2.0 to 3.1.1). You can access your shares from all Windows versions starting from Windows Server 2008 and Windows 7, and also from current versions of Linux. You can map your Amazon FSx file shares on Amazon Elastic Compute Cloud (Amazon EC2) instances, and on WorkSpaces instances, Amazon AppStream 2.0 instances, and VMware Cloud on AWS VMs.
You can access your file shares from on-premises compute instances using AWS Direct Connect or AWS VPN. In addition to accessing file shares that are in the same VPC, AWS account, and AWS Region as the file system, you can also access your shares from compute instances that are in a different Amazon VPC, account, or AWS Region. You do so using VPC peering or transit gateways. For more information, see Accessing data from within the AWS Cloud.
Security and data protection
Amazon FSx provides multiple levels of security and compliance to help ensure that your data is protected. It automatically encrypts data at rest (for both file systems and backups) using keys that you manage in AWS Key Management Service (AWS KMS). Data in transit is also automatically encrypted using SMB Kerberos session keys. It has been assessed to comply with ISO, PCI-DSS, and SOC certifications, and is HIPAA eligible.
Amazon FSx provides access control at the file and folder level with Windows access control lists (ACLs). It provides access control at the file system level using Amazon Virtual Private Cloud (Amazon VPC) security groups. In addition, it provides access control at the API level using AWS Identity and Access Management (IAM) access policies. Users accessing file systems are authenticated with Microsoft Active Directory. Amazon FSx integrates with AWS CloudTrail to monitor and log your API calls letting you see actions taken by users on your Amazon FSx resources.
Additionally, it protects your data by taking highly durable backups of your file system automatically on a daily basis and allows you to take additional backups at any point. For more information, see Security in Amazon FSx.
Availability and durability
FSx for Windows File Server offers file systems with two levels of availability and durability. Single-AZ files ensure high availability within a single Availability Zone (AZ) by automatically detecting and addressing component failures. In addition, Multi-AZ file systems provide high availability and failover support across multiple Availability Zones by provisioning and maintaining a standby file server in a separate Availability Zone within an AWS Region. To learn more about Single-AZ and Multi-AZ file system deployments, see Availability and durability: Single-AZ and Multi-AZ file systems.
Managing file systems
You can administer your FSx for Windows File Server file systems using custom remote management PowerShell commands, or using the Windows-native GUI in some cases. To learn more about managing Amazon FSx file systems, see Administering FSx for Windows file systems.
Price and performance flexibility
FSx for Windows File Server gives you the price and performance flexibility by offering both solid state drive (SSD) and hard disk drive (HDD) storage types. HDD storage is designed for a broad spectrum of workloads, including home directories, user and departmental shares, and content management systems. SSD storage is designed for the highest-performance and most latency-sensitive workloads, including databases, media processing workloads, and data analytics applications.
With FSx for Windows File Server, you can provision file system storage, SSD IOPS, and throughput independently to achieve the right mix of cost and performance. You can modify your file system's storage, SSD IOPS, and throughput capacities to meet changing workload needs, so that you pay only for what you need.
Pricing for Amazon FSx
With Amazon FSx, there are no upfront hardware or software costs. You pay for only the
resources used, with no minimum commitments, setup costs, or additional fees. For
information about the pricing and fees associated with the service, see Amazon FSx for Windows File Server
Pricing
Assumptions
To use Amazon FSx, you need an AWS account with an Amazon EC2 instance, WorkSpaces instance, AppStream 2.0 instance, or VM running in VMware Cloud on AWS environments of the supported type.
In this guide, we make the following assumptions:
-
If you're using Amazon EC2, we assume that you're familiar with Amazon EC2. For more information on how to use Amazon EC2, see Amazon Elastic Compute Cloud documentation.
-
If you're using WorkSpaces, we assume that you're familiar with WorkSpaces. For more information on how to use WorkSpaces, see Amazon WorkSpaces User Guide.
-
If you're using VMware Cloud on AWS, we assume that you're familiar with it. For more information, see VMware Cloud on AWS
. -
We assume that you are familiar with Microsoft Active Directory concepts.
Prerequisites
To create an Amazon FSx file system, you need the following:
-
An AWS account with the permissions necessary to create an Amazon FSx file system and an Amazon EC2 instance. For more information, see Setting up your AWS account.
-
An Amazon EC2 instance running Microsoft Windows Server in the virtual private cloud (VPC) based on the Amazon VPC service that you want to associate with your Amazon FSx file system. For information on how to create one, see Getting Started with Amazon EC2 Windows Instances in the Amazon EC2 User Guide.
-
Amazon FSx works with Microsoft Active Directory to perform user authentication and access control. You join your Amazon FSx file system to a Microsoft Active Directory while creating it. For more information, see Working with Microsoft Active Directory.
-
This guide assumes that you haven't changed the rules on the default security group for your VPC based on the Amazon VPC service. If you have, you need to ensure that you add the necessary rules to allow network traffic from your Amazon EC2 instance to your Amazon FSx file system. For more details, see Security in Amazon FSx.
-
Install and configure the AWS Command Line Interface (AWS CLI). Supported versions are 1.9.12 and newer. For more information, see Installing, updating, and uninstalling the AWS CLI in the AWS Command Line Interface User Guide.
Note
You can check the version of the AWS CLI you're using with the
aws --version
command.
Amazon FSx for Windows File Server forums
If you encounter issues while using Amazon FSx, use the forums
Are you a first-time user of Amazon FSx?
If you are a first-time user of Amazon FSx, we recommend that you read the following sections in order:
-
If you're ready to create your first Amazon FSx file system, try the Getting started with Amazon FSx for Windows File Server.
-
For information about performance, see FSx for Windows File Server performance.
-
For Amazon FSx security details, see Security in Amazon FSx.
-
For information about the Amazon FSx API, see Amazon FSx API Reference.