Cloud services and migration
Plan, migrate and manage cloud workloads so your data is secure, accessible from anywhere and hosted where it should be.
Software & Cloud Development
AWS deployment and cloud engineering
AWS gives you enormous flexibility and just as many ways to overspend or leave something exposed. We design, build and run AWS environments in the regions that fit your data and your users, with security, recoverability and cost controls built in, defined as code so every environment can be reviewed and rebuilt.
Who this service is for
A good fit if
- You are deploying a new application or moving existing workloads to AWS and want it done properly from the start.
- You need to decide where workloads should run, such as the AWS Africa (Cape Town) region or a European region, in line with your data protection obligations.
- Your AWS accounts grew without a plan and now have unclear permissions, untagged resources or rising bills.
- Your developers need repeatable environments and deployment pipelines instead of manual console changes.
- You need backups, disaster recovery and monitoring you can demonstrate to auditors, regulators or your board.
Another approach may suit you better if
- Your organisation is standardised on Microsoft Azure or Google Cloud. Our cloud services and migration team covers those platforms.
- You need only simple website hosting. A managed hosting plan may be more economical.
What this service is
AWS deployment and cloud engineering is the design, build and operation of environments on Amazon Web Services: the accounts, networks, identities, security controls, pipelines and infrastructure that your applications run on. We build new environments, migrate existing workloads, and bring accounts that grew without a plan back under control.
A well-built cloud platform improves performance, lowers IT costs where the design is right, and gives secure and reliable access to your applications and data from any device, wherever your people work. Those benefits are not automatic, and they depend on the engineering decisions made early.
AWS and data location for Nigerian organisations
There is no AWS region in Nigeria. Workloads usually run in the Africa (Cape Town) region or in a European region, and we compare the options for latency from where your users are, service availability and cost. Placing data abroad is a transfer of personal data outside Nigeria, so the Nigeria Data Protection Act 2023 (NDPA) and the NDPC's implementation directive shape the decision, as do sector rules such as Central Bank of Nigeria (CBN) guidelines for banks and payment service providers, or NITDA guidance for public institutions. Region choice is only part of the picture. Backups, logs, support access, global services such as content delivery, and third-party tools can all move data elsewhere, so we map where each type of data is stored and processed. Where some data must stay in the country, a hybrid design with a local data centre may suit. This is general information, not legal advice.
Deploying and migrating workloads
New applications are deployed through pipelines from the start, on containers with Amazon ECS or EKS, serverless functions with AWS Lambda, or virtual machines with Amazon EC2, backed by managed databases such as Amazon RDS. Existing workloads are migrated in planned waves, with testing, rollback paths and a cut-over window agreed with you. Where applications need to change to run well in the cloud, our software development team can make those changes.
Security and shared responsibility
AWS secures the underlying cloud; you are responsible for everything you configure in it. We build that responsibility in from the start: a multi-account structure that separates production from development, single sign-on through Microsoft Entra ID or another identity provider, least-privilege roles, encryption with AWS KMS, central logging, and continuous checks with GuardDuty and Security Hub. A written responsibility matrix makes clear what AWS, Promatics and your team each look after. Our cybersecurity services can extend this to the rest of your environment.
Cost controls from day one
Cloud costs grow quietly, and because AWS bills in US dollars, exchange-rate movements can change your naira cost from month to month. We tag every resource with an owner and cost centre, set budgets and anomaly alerts, rightsize instances and databases, switch off idle non-production environments, apply storage lifecycle rules, and recommend Savings Plans once usage is predictable. Costs become predictable and visible to the people who control them. For more ideas, read how growing companies cut cloud costs and questions to ask before an AWS deployment.
Beyond AWS
AWS is not always the right platform. We also work with Microsoft Azure, Google Cloud, Oracle Cloud, IBM Cloud, DigitalOcean and Linode (Akamai), as well as local data centres, and help organisations choose between them through our cloud services and migration work. Naming a platform does not imply a partnership or reseller status with its vendor. Managed-service clients get round-the-clock monitoring of their cloud infrastructure and 24/7 support, with response targets set in the service agreement, alongside our managed IT services.
What is included
The exact list is agreed in writing for each project. These are the usual deliverables and the usual boundaries.
Typical deliverables
- A readiness or well-architected review with prioritised findings across security, reliability, performance, cost and operations.
- A multi-account landing zone built with AWS Control Tower, with guardrails and central logging.
- Identity and access design using IAM Identity Center, connected to Microsoft Entra ID or another identity provider.
- Network design with VPCs, private subnets and controlled connectivity to your offices or data centre.
- Infrastructure as code using Terraform, AWS CloudFormation or the AWS CDK.
- CI/CD pipelines for application and infrastructure changes.
- Workload deployment on containers (Amazon ECS or EKS), serverless (AWS Lambda) or virtual machines (Amazon EC2), with managed databases.
- Security services such as GuardDuty, Security Hub and AWS KMS, plus backups with AWS Backup and a tested recovery plan.
- Cost controls with tagging, AWS Budgets, cost anomaly alerts and a rightsizing review.
- Architecture documentation, runbooks and a shared-responsibility matrix.
Not included unless agreed separately
- AWS usage charges, support plans and Marketplace subscriptions, billed by AWS to your account (usually in US dollars).
- Application code changes beyond what the deployment requires, unless scoped separately.
- Formal compliance certification or audit opinions. We help you prepare evidence; auditors issue opinions.
- Ongoing operations after handover, unless covered by a managed-service agreement.
What we will need from you
Most delays in this kind of work come from access and decisions, not from the technical build. Knowing these early keeps the project predictable.
- An AWS account or organisation in your name, or approval to create one, with billing set up.
- A technical contact who can approve architecture decisions and access requests.
- Information on the workloads to deploy, their data sensitivity and their availability needs.
- Your data protection and compliance requirements, including any rules on where data may be stored or transferred.
Delivery
How the work is delivered
Each stage ends with something you can review before the next one starts.
Review and plan
Review workloads, existing accounts, security, data location needs and budget, then agree the target architecture.
Output: Review findings and target architecture.
Build the foundation
Set up the landing zone, identity, networking, logging, guardrails and cost controls, all defined as code.
Output: Secure multi-account foundation.
Deploy or migrate workloads
Deploy new applications or migrate existing ones in planned waves, with pipelines and rollback paths.
Output: Workloads running in AWS.
Test resilience and security
Test backups, restores and failover, review security findings and confirm monitoring and alerts work.
Output: Resilience and security test evidence.
Operate and optimise
Hand over runbooks or continue under a managed-service agreement, with regular cost and security reviews.
Output: Runbooks and optimisation plan.
Testing and handover
- Every environment can be recreated from infrastructure code, and manual console changes are detected.
- Backups are restored in a test, and recovery time is measured and documented.
- Root accounts are locked down with multi-factor authentication, and day-to-day access uses single sign-on with least privilege.
- Security Hub and GuardDuty findings are reviewed, with each one fixed or accepted with a reason.
- Budgets and anomaly alerts go to named people, and every resource carries owner and cost-centre tags.
- A shared-responsibility matrix records what AWS, Promatics and your team each look after.
What affects the cost
We do not publish package prices. Each estimate is based on an agreed scope, in naira, with taxes shown separately. These are the things that move the number most:
- The number and complexity of workloads to deploy or migrate.
- Availability requirements, such as multi-zone or cross-region recovery.
- Security, logging and compliance requirements.
- The state of existing AWS accounts that must be remediated.
- Whether ongoing operations are included after the build.
Questions buyers usually ask
Can we host our AWS workloads in Nigeria?
There is no AWS region in Nigeria. The nearest options are the Africa (Cape Town) region and European regions such as Ireland, Frankfurt and London. Hosting there means transferring personal data outside Nigeria, which the Nigeria Data Protection Act 2023 allows only under its transfer conditions, and some sector or public-sector rules may require certain data to stay in a local data centre. We document where each type of data lives. This is general information, not legal advice.
What is the shared responsibility model?
AWS is responsible for the security of the cloud, meaning its data centres, hardware and core services. You are responsible for security in the cloud, meaning your configurations, identities, data and applications. We help you carry your share and write down who does what.
How do you keep AWS costs under control?
Tagging so every cost has an owner, budgets and anomaly alerts, rightsizing, scheduling non-production environments to switch off, storage lifecycle rules, and Savings Plans or reserved capacity once usage is stable. Because AWS bills in US dollars, we review costs with you regularly rather than once a year, so exchange-rate movements do not catch you out.
Should we use more than one AWS region?
For many workloads one region with several availability zones is enough. A second region supports disaster recovery, at extra cost and complexity, and both locations must fit your data transfer position. We help you match the design to your recovery objectives.
Can you support us after the build?
Yes. Managed-service clients get 24/7 monitoring and support for their AWS environments, with response targets set in the service agreement. Alternatively, we hand over runbooks and documentation for your team.
Related
Questions to ask before deploying on AWS
The questions to settle before deploying a workload on AWS, covering data, region choice, availability, identity, budget, backups and ongoing ownership.
How to cut cloud costs
How to reduce cloud costs through visibility, waste removal, rightsizing, commitment discounts and better-prepared negotiations with cloud providers.
Deploying to AWS or tidying up an existing account?
Tell us what you run, where it runs today and what worries you most about AWS. We will reply to arrange a review conversation before anything is priced.