Overview
Overview: VMware Freedom, built on Firemind's IT Operations Engine, is for teams leaving VMware altogether rather than moving it. It turns an RVTools export into a plan that takes each workload to the native AWS service that fits it best: Amazon EC2 where a machine should move as it is, and managed databases, containers, serverless or managed file storage where the application can shed the server underneath it. You receive a migration plan for every workload, free and with no commitment.
What the assessment covers
- Virtual machines, hosts, clusters and resource pools
- Database, web, application and file servers, identified from the inventory
- Applications and their dependencies, from your CMDB or asset register
- Operating systems, versions and end-of-life dates
- CPU, memory and storage allocation and use
- Port groups, VLANs and network segments
- Application code, where you connect source control
Typical targets include Amazon RDS and Amazon Aurora for database servers, Amazon ECS, Amazon EKS and AWS Lambda for application tiers, Amazon FSx for file servers, Elastic Load Balancing for load balancers, and Amazon EC2, with AWS Graviton where workloads support it, for machines that should move as they are.
What you receive
- An inventory of every workload in scope, grouped into applications by dependencies and tags
- A recommended migration path for each workload, from rehost, relocate and replatform to repurchase, refactor, retain or retire, with the AWS target and the reason
- Dependencies and blockers, with the evidence behind each finding
- A modernisation path for every machine, from rehost to managed service, with the effort and blockers, and the VMware share of your estate documented in the form AWS asks for under MAP
- A draft wave plan, ordered so lower-risk workloads move first
- Right-sized AWS estimates, ready to load into the AWS Pricing Calculator, including the post-migration annual run rate that MAP eligibility is based on
- A run-readiness view: what it would take to operate each workload once it lands on AWS
- A readout with a Firemind cloud architect, and a summary you can take into a Migration Acceleration Program (MAP) Assess conversation with your AWS account team
Access: read-only, and your data stays out of scope
No agent and no inbound access to vCenter. You upload an RVTools export, and optionally your CMDB and utilisation reports, through an encrypted upload page. Optionally connect GitHub, GitLab or Bitbucket read-only so application code is assessed for modernisation too. Exports hold infrastructure inventory only, are stored encrypted, are used only for your assessment, and are deleted 30 days after your readout.
Optionally, deploy the IT Operations Engine read-only AWS role with Quick Launch so the assessment also checks the AWS landing zone your workloads would move into. It reads configuration and metadata only and makes no changes. If you already run the IT Operations Engine Free Assessment, this step is already done.
How it works
- Subscribe here. It is free, no card, no commitment.
- Run RVTools against your vCenter, upload the export through the secure upload page, and optionally connect your source control. Firemind provides a checklist for the export and any additional reports.
- Optionally, deploy the read-only AWS role using Quick Launch. It registers with Firemind automatically.
- Firemind returns your assessment and a readout with a Firemind cloud architect.
- Ask Firemind to delete your exports, or revoke the source control app, at any time. Exports are deleted automatically 30 days after your readout.
Scope: Your whole vSphere estate, with no virtual machine cap. Bring as much of your estate as you can: the more the assessment sees, the more complete your plan and business case.
Next step: VMware Freedom: VMware to Native AWS Migration by Firemind on AWS Marketplace takes the plan through a full MAP Assess, landing zone, migration and operations, delivered as a private offer.
About Firemind: AWS Premier Tier Services Partner with the AWS Migration and Modernization Competency. 200+ clients since 2018, ISO 27001 certified, in partnership with AWS, NVIDIA and Anthropic. Core markets: UK and Ireland, Finland, Germany and the Netherlands.
Highlights
- Off VMware, into native AWS: every virtual machine gets a path to the AWS service that fits it, from Amazon EC2 to managed databases, containers, serverless or managed file storage.
- Start from an RVTools export: no agent and no inbound access to vCenter. Optionally connect source control so application code is assessed for modernisation too.
- Ready for MAP: right-sized AWS estimates for the AWS Pricing Calculator, and the VMware share of your estate documented for your AWS account team.
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Quick Launch
Pricing
Vendor refund policy
This product is free. AWS Marketplace collects no fees from you and Firemind does not invoice for it, so there is nothing to refund. You can cancel your subscription at any time in the AWS Marketplace console, and you can revoke Firemind's access immediately by removing the connection you created. If you believe you have been charged for this product in error, contact Firemind at hello@firemind.com and we will respond within one business day.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Additional details
Usage instructions
Use Quick Launch above if you can. These steps are for buyers whose policy is to review and deploy CloudFormation themselves.
What gets created, and nothing else
- One IAM role, FaePlatformRole, which Firemind assumes to run the assessment
- Three IAM managed policies, all of them Deny, layered over the role's baseline
- One execution role and one Lambda function, used once to report the created role ARN back to Firemind, then never invoked again
- One custom resource that invokes that function
What the role can and cannot do
The baseline is the AWS managed SecurityAudit and ViewOnlyAccess policies. Three Deny policies sit over the top, covering object and storage data, database and stream contents, and secrets, key material and privilege escalation. An explicit Deny always wins in IAM evaluation, so this holds regardless of what the baseline would otherwise permit.
The role can list a bucket and count its objects, but cannot read one. It can describe a database, its engine and its encryption configuration, but cannot read a row. It cannot decrypt anything, read a secret or parameter value, download log contents, or open a session to a host. Remediation is disabled and the role holds no write permissions.
Steps
- Download the template from the URL shown in the Quick Launch panel and review it. Everything above is visible in the file.
- Create the stack in any region you like. The role is global, so the region only determines where the stack object lives. Assessment covers every region regardless.
- Acknowledge CAPABILITY_NAMED_IAM. The role name is fixed so that Firemind can derive the ARN without asking you for it.
- Set FaeTrustedAccountId to the Firemind account shown on the Quick Launch page, and FaeCallbackUrl to the registration endpoint shown there. Leave the remaining parameters at their defaults.
- On completion the stack reports the role back to Firemind automatically. If that call fails the stack rolls back, by design, so a silent half-configured state is not possible.
Trust
The trust policy is conditioned on an external ID equal to your own AWS account ID. Both sides derive it, so there is no secret to exchange and nothing to rotate.
Ending access
Delete the stack. That removes the role and every policy with it, and Firemind's access ends at that moment. No notice is required.
Support
Vendor support
For support, or questions about your assessment, contact Firemind at hello@firemind.com . We respond within one business day (UK business hours, Monday to Friday).
This assessment includes:
- Help setting up the read-only connection, including reviewing it with your security team before you run it
- A migration assessment and a readout with a Firemind cloud architect
- Help removing Firemind's access, and deleting any uploaded exports, when you are finished
There is no charge for this product and no paid support tier attached to it.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.