Cloud Infrastructure Management

Cloud Infrastructure · AWS and Azure

We build the whole environment, then we run it.

Landing zone, networking, security, DevOps and operations on AWS and Azure. Not a lift and shift and a handshake. A complete infrastructure with somebody accountable for it afterwards.

Five layers

A cloud environment is not a server with a different bill

Most of the trouble we are called in to fix comes from skipping the first layer and improvising the rest.

1. Landing zone and networking

Accounts, subscriptions, VPCs and virtual networks, subnets, peering, VPN and ExpressRoute or Direct Connect. Built once, properly, so everything after it inherits a sane design.

2. Compute and platform

Virtual machines, containers, Kubernetes and managed services. Right sized against measured load and reviewed as the load changes.

3. Security layer

Identity and access, network security groups, WAF, secrets management, encryption, logging and alerting. Configured to a standard, not to a default.

4. DevOps and delivery

Infrastructure as code, pipelines, environments and release process. Changes that are reviewed, repeatable and reversible.

5. Operations

Monitoring, patching, backup, disaster recovery and cost control, run as a service with a monthly report you can hand to a board.

Where we are usually called

Three conversations that start the same way

  • “Our bill keeps growing and nobody can explain it.” Usually oversized instances, forgotten storage and no tagging.
  • “We moved to cloud and it is slower.” Usually the network design, not the compute.
  • “Our auditor asked for evidence and we have none.” Usually logging that was never turned on.

We will also tell you when a workload should not be in cloud at all. Some should not.

Common questions

Before you ask

AWS or Azure?

Azure usually wins where the estate is already Microsoft and identity matters most. AWS usually wins on breadth of managed services. We run both and have no incentive to push either.

Can you take over an environment somebody else built?

Yes. It starts with an assessment, a written list of what is wrong and what it costs to correct, and you decide how much of it to do.

Do you handle the migration too?

Yes, with a rollback position at each wave. We do not move the crown jewels first.

Start with an assessment

Give us read access for a week. You get a written picture of the environment, the risks and the wasted spend.

02 3537 5791