1. Scope of AWS professional services:

1.1   Procure a dedicate AWS Cloud Engineer services on a professional services basis

1.2   Not a resident engineer

1.3   Services delivered primarily with minimum required 20 hours at CTPIS Customer Office, and remotely as required, standby off business hours is needed.

2. Validity of this professional services:

1-year CONTRACT

3. Statement of works of AWS professional services:

3.1   Design, implement, and support AWS cloud infrastructure

3.2   Configure AWS services (EC2, VPC, IAM, S3, RDS, etc.) Ensure security best practices and compliance

3.3   Provide troubleshooting and operational support

3.4   Optimize performance and cloud costs

3.5   Support cloud migration and enhancement activities

4. Statement of works (AWS professional services)

4.1 Scope of Services

4.2 AWS Architecture & Design

4.3 Design and review AWS cloud architectures aligned with AWS Well-Architected Framework

4.4 Define landing zone architectures including:

4.5 VPC design

4.6 Subnetting and routing

4.7 Security boundaries

4.8 Review existing AWS environments and provide improvement recommendations

4.9 AWS Implementation & Configuration

4.10 Deploy and configure AWS services, including but not limited to: EC2, EBS, Auto Scaling

VPC, Transit Gateway, VPN, Direct Connect (if applicable)

S3, EFS, FSx RDS, DynamoDB, Aurora

4.11 IAM roles, policies, and permission boundaries

4.11 Infrastructure as Code (IaC) using CloudFormation and/or Terraform

4.12 Implement high availability and disaster recovery architectures

4.13 Security & Compliance

4.14 Implement AWS security best practices:

4.15 IAM least privilege access

4.16 Network security controls

4.17 Encryption at rest and in transit

4.18 Configure security services such as:

4.19 AWS CloudTrail

4.20 AWS Config

4.21 GuardDuty

4.21 Security Hub

4.22 Support compliance requirements and security assessments

4.23 Assist in remediation of security findings

4.24  Operations & Support

4.25 Provide operational support for AWS workloads, including:

4.26 Incident troubleshooting

4.27 Root cause analysis

4.28 Performance tuning

4.29 Support monitoring and logging solutions:

4.30 CloudWatch

4.31 Centralized logging

4.32 Assist with backup, restore, and disaster recovery testing

4.33 Support environment upgrades and migrations

4.34 Cost Optimization

4.35 Analyze AWS cost and usage reports

4.36 Recommend and implement cost optimization measures:

4.37 Rightsizing resources

4.38 Savings Plans / Reserved Instances

4.39 Storage lifecycle policies

4.40 Assist in establishing cost governance and budget controls

4.41 Knowledge Transfer & Documentation

4.43 Conduct technical workshops and walkthrough sessions

4.44 Provide documentation including:

4.45 Architecture diagrams

4.46 Configuration details

4.47 Standard operating procedures (SOPs)

4.48 Support knowledge transfer to customer technical teams