Kubernetes and Container Migration to AWS by Firemind

Overview: Containers promise portability, and the images usually are portable. The clusters around them are not: identity, storage, ingress, operators and add-ons are tied to the platform they run on, and stateful workloads need a plan of their own. Built on Firemind's IT Operations Engine, this service runs the migration as governed code in your AWS account, and the same Engine runs each workload once it lands.

Four stages, contracted together or separately

• Assess. Discovery of every cluster, workload, chart and add-on, with a portability rating for each and the stateful workloads that need their own plan. Aligned to the Assess phase of the AWS Migration Acceleration Program (MAP): a readiness assessment based on the AWS Cloud Adoption Framework, a migration path for every workload, a business case with an AWS Pricing Calculator estimate, and a wave plan.
• Mobilize. Landing zone readiness, detailed discovery and planning for the first waves, a pilot migration, and MAP tagging set up so migrated workloads are tracked from day one.
• Migrate. Workloads moved to Amazon EKS or Amazon ECS on AWS Fargate, images to Amazon ECR, identity to EKS Pod Identity, and persistent data moved and validated, with clusters defined as infrastructure as code and deployments carried through your existing GitOps or CI/CD pipelines.
• Operate. The Engine runs the migrated workloads: monitoring, incident remediation, patching and decay management such as end-of-life runtimes, with high-risk changes held for a named approver. Each wave lands in operations the day it passes acceptance.

Validated and governed

Every wave starts with acceptance tests agreed with your team: functional checks, performance baselines and data comparisons wherever data moves. They run before and after cutover, and every wave has a tested rollback. The Engine plans each change, raises it as code and runs it under your change rules. Low-risk, reversible steps run automatically. Cutovers and other high-risk changes wait for a named approver. Every action is recorded in an immutable audit trail and in your own AWS CloudTrail.

What is in scope

• Cluster design and build on Amazon EKS, as infrastructure as code
• Manifest and Helm chart changes for AWS storage, ingress and identity, raised as pull requests
• Stateful workload migration, with data validated before cutover
• Image migration to Amazon ECR, with vulnerable or end-of-life base images flagged
• Progressive cutover with traffic shifting and rollback

What stays out of scope

Re-architecting applications into new services stays out of scope unless agreed in the private offer. Commercial Kubernetes platform subscriptions and their exits stay with you.

AWS programmes: Firemind holds the AWS Migration and Modernization Competency. Eligible migrations may qualify for MAP funding, and Firemind prepares the MAP documentation with your AWS account team. Eligibility and funding are confirmed by AWS.

How it starts: After the private offer is accepted, you grant read-only access to your clusters and deploy an IAM role in your AWS account using AWS CloudFormation. A full description of the role and its policy statements is provided before deployment. The Engine uses temporary credentials, and every action is recorded in your own AWS CloudTrail. Scope, acceptance tests and named approvers are agreed at the start of each stage.

Deployment: Pilot scopes run from Firemind's AWS environment. In production the Engine runs inside your own AWS accounts. Running the Engine, and the migrated workloads, may incur AWS infrastructure charges, for example Amazon Bedrock, compute and storage. These are billed separately from this AWS Marketplace transaction and are your responsibility.

Pricing: Delivered through an AWS Marketplace private offer, scoped to your estate. The four stages can be contracted together or separately. Contact hello@firemind.com  to scope.

About Firemind: AWS Premier Tier Services Partner with the AWS Migration and Modernization Competency. 200+ clients since 2018, ISO 27001 certified, in partnership with AWS, NVIDIA and Anthropic. Core markets: UK and Ireland, Finland, Germany and the Netherlands.