DataGnu / Cloud / AWS
AWS migration, modernization, AI, data and security.
AWS Select Tier Partner. We assess, land, modernize and then run the result.
Services
Professional and managed services
Each discipline can be a scoped project, an ongoing managed service, or a project that becomes one.
Migration
Discovery of what you actually run, through to workloads live in a landing zone.
Professional services
- Portfolio discovery and dependency mapping with AWS Application Discovery Service
- Business case and TCO modelling before commitment
- Multi-account landing zone on AWS Control Tower and Organizations
- Server and database migration using AWS MGN and AWS DMS
- 7R disposition per workload — rehost, replatform, refactor, retire
- Cutover planning, rehearsal and rollback
Managed services
- Ongoing landing zone and guardrail management
- Cost optimisation, Savings Plans and Reserved Instance strategy
- Patch, backup and disaster recovery operations
- Well-Architected reviews on a defined cadence
Modernization
Cheaper to run and faster to change, rather than the same estate on someone else's hardware.
Professional services
- Containerisation onto Amazon ECS and Amazon EKS
- Serverless re-architecture with AWS Lambda, API Gateway and EventBridge
- Database modernization to Amazon Aurora and purpose-built engines
- CI/CD with CodePipeline or GitHub Actions, and infrastructure as code
- Monolith decomposition with a strangler-fig sequencing plan
Managed services
- Platform engineering and internal developer platform operations
- Cluster lifecycle, upgrades and capacity management
- Release engineering and deployment support
- SRE practice, SLOs and incident response
Artificial intelligence
Models in production behind real workflows, with evaluation and cost control.
Professional services
- Generative AI applications on Amazon Bedrock
- Retrieval-augmented generation over your own corpus
- Agentic workflows and tool integration into existing systems
- Document processing with Amazon Textract and Comprehend
- Model training and deployment on Amazon SageMaker
- Evaluation harnesses, guardrails and human-in-the-loop design
Managed services
- Inference cost monitoring and optimisation
- Prompt, model and version lifecycle management
- Output quality monitoring and drift detection
- Ongoing retrieval index and knowledge base curation
Data & analytics
Operational data made usable, governed and trusted enough to act on.
Professional services
- Lakehouse architecture on Amazon S3 with AWS Glue and Lake Formation
- Warehousing on Amazon Redshift and query with Amazon Athena
- Streaming ingestion with Amazon Kinesis and Amazon MSK
- Governance, cataloguing and lineage
- Dashboards and self-service analytics with Amazon QuickSight
Managed services
- Pipeline monitoring, SLAs and failure remediation
- Data quality checks and reconciliation
- Warehouse performance and storage cost tuning
- Access review and governance operations
Security
A posture that stands up to an audit and to an actual incident.
Professional services
- Security assessment against the AWS Well-Architected security pillar
- Identity design with IAM Identity Center and least-privilege roles
- Preventive and detective guardrails with SCPs and AWS Config
- Threat detection with Amazon GuardDuty and AWS Security Hub
- Encryption, key management and secrets with AWS KMS and Secrets Manager
- Network segmentation, WAF and edge protection
Managed services
- Continuous compliance monitoring and reporting
- Vulnerability management and patch orchestration
- Security incident response and forensics support
- Access certification and privileged access review
On Azure and Google Cloud we lead with delivered work rather than partner tiers.
Getting started
How we start
One size fits all rarely works. We map the estate, then match each workload to a strategy.
Assess
The existing estate — workloads, dependencies, costs, risks and the constraints nobody wrote down.
Plan
A target architecture, a disposition per workload, and a sequence that delivers value before the end.
Execute
Landing zone, migration waves and modernization work, rehearsed before it is done for real.
Operate
A managed service with agreed response targets, and continuous cost and security review.
Also from DataGnu
Other services
Microsoft Azure
Enterprise-scale landing zones, AKS, Microsoft Fabric, Azure OpenAI and Defender for Cloud.
Explore
CloudGoogle Cloud
GKE and Cloud Run, BigQuery and Dataplex, Vertex AI, and Security Command Centre.
Explore
EngineeringSoftware Engineering
Systems built from the ground up — core platforms, SaaS products, ingestion pipelines and the tooling around them.
Explore