HEALTHCARE
CLOUD MIGRATION

Public HealthcareThailand

Overview

The Business

Industry

Public Healthcare

A regional healthcare provider operating under the Ministry of Public Health, Thailand

Services

Full-Spectrum Care

Inpatient, outpatient, emergency, surgery, pathology, and radiology (PACS)

Core IT Systems

HIS · ERP · PACS

Plus IoT medical devices and patient data management platforms

The organization is a public healthcare provider delivering comprehensive medical services across its region — from inpatient and outpatient care to emergency medicine, surgical services, pathology, and radiology. Its clinical operations depend on a broad set of mission-critical IT systems, including Hospital Information Systems (HIS), Enterprise Resource Planning (ERP), medical imaging, IoT-connected medical devices, and patient data management platforms.

Delivering safe, uninterrupted care to patients meant these systems needed a more resilient, secure, and scalable foundation than the aging on-premises environment could provide.

Context

Business Challenge

Infrastructure Inefficiency

Running on aging on-premises VMware that had grown organically for years. 39% of servers were zombies, 69% were used less than 20% of the time — wasting compute, storage, and licensing spend.

Cost Pressure

High projected 5-year on-premises cost, compounded by recurring VMware licensing renewals and ongoing physical host maintenance.

Inability to Scale

Rigid architecture could not scale during peak demand — seasonal outbreaks, public health emergencies, or mass casualty events — putting clinical system availability at risk.

Security & Compliance Gaps

Growing pressure to align with Thailand's PDPA, CIS benchmarks, and the government cloud-first policy — without cloud-native security controls or compliance automation. IT operations were manual: spreadsheet ticketing, ad-hoc patching, and no CI/CD.

Goals

Objectives

Business Objectives

Reduce total cost of ownership by more than 50% over 5 years through right-sizing, zombie retirement, and VMware host consolidation
Establish elastic, auto-scaling infrastructure to handle peak patient volumes on demand without over-provisioning
Ensure minimal disruption to clinical and administrative users during migration
Align with PDPA, CIS benchmarks, and the Thai government cloud-first policy
Move from manual, reactive IT to a cloud-native operating model with automated monitoring, patching, backup, and incident management

Technical Objectives

Full-estate discovery with AWS Migration Evaluator to capture utilization and right-sizing recommendations
Build an AWS Control Tower Landing Zone with a multi-account strategy for isolation, security, and governance
Establish hybrid connectivity via Site-to-Site VPN with Transit Gateway and Network Firewall
Implement a cloud-native security baseline: IAM Identity Center, GuardDuty, Security Hub, Config, KMS, CloudTrail, MFA, least privilege
Re-Host production workloads to the Thailand region (ap-southeast-7) using AWS MGN, with Well-Architected Reviews and IT staff enablement

Synnex × AWS

The Solution

The AWS Partner migrated the hospital's systems to AWS end-to-end under the AWS Migration Acceleration Program (MAP), using AWS-native services throughout, with the AWS Asia Pacific (Thailand) Region (ap-southeast-7) as the target.

The engagement started by assessing the existing environment with AWS Migration Evaluator, which captured utilization data across all 269 instances, identified zombie/idle machines, and produced right-sizing recommendations. The AWS Pricing Calculator was then used to estimate the projected AWS cost and build a 5-year business case against the current on-premises spend.

A foundation was built on AWS using AWS Control Tower as a multi-account Landing Zone (11 accounts, e.g. management, security, network, production, backup), with accounts and policies managed through AWS Organizations. Connectivity between the hospital and AWS was established via AWS Site-to-Site VPN, with AWS Transit Gateway as the central routing hub and AWS Network Firewall for traffic inspection. Security was handled with AWS IAM Identity Center (centralized login + MFA), Amazon GuardDuty, AWS Security Hub, and AWS Config for threat detection and security monitoring, with AWS KMS for encryption and AWS CloudTrail for activity logging.

Finally, production workloads were re-hosted to ap-southeast-7 using AWS Application Migration Service (AWS MGN) — a lift-and-shift of 37 Windows and Linux VMs — running on right-sized Amazon EC2 and Amazon EBS, with Amazon CloudWatch for monitoring and AWS Backup for backup and recovery.

At a Glance

Engagement Scope

Migration Model

Re-Host

Via AWS Application Migration Service (MGN)

Framework

MAP

Assess · Mobilize · Migrate lifecycle

Target Region

ap-southeast-7 (Thailand)

Results

Outcome & Impact

Major zombie retirement, dramatically cutting operational overhead, licensing costs, and energy consumption.

Elastic, auto-scaling infrastructure that keeps clinical systems available during peak patient volumes and critical healthcare events.

Comprehensive security posture with cloud-native threat detection, centralized compliance, and encryption — aligned with PDPA, CIS, and cloud-first policy.

Cloud operating model established with documented runbooks, CloudWatch monitoring, Systems Manager patching, and AWS Backup for sustainable operations.

Foundation for future phases via a multi-account Landing Zone and proven cloud operations, plus full knowledge transfer to the in-house IT team.