---
title: Cloud Migration for Regulated Workloads
description: Learn about best practices and insights for migrating regulated workloads to AWS, focusing on the critical aspects of compliance and security for GxP environments.
image: https://blog.ippon.tech/hubfs/Blockchain%20(2)-2.png
---
[Skip to main content](https://blog.ippon.tech/cloud-migration-for-regulated-workloads#main)
[   ](https://ipponusa.com/)
- [Home](https://ipponusa.com)
- [Show submenu for About About](https://ipponusa.com/about-us)
- [Who We Are](https://ipponusa.com/who-we-are)
- [Careers](https://ipponusa.com/careers)
- [Show submenu for Our Partners Our Partners](https://ipponusa.com/our-partners/)
- [AWS](https://ipponusa.com/our-partners/aws/)
- [Snowflake](https://ipponusa.com/our-partners/snowflake/)
- [Databricks](https://ipponusa.com/our-partners/databricks/)
- [Microsoft](https://ipponusa.com/our-partners/microsoft/)
- [Show submenu for Services Services](https://ipponusa.com/services)
- [Snowflake](https://ipponusa.com/service/snowflake-concierge/)
- [Artificial Intelligence](https://ipponusa.com/service/artificial-intelligence/)
- [Data & Analytics](https://ipponusa.com/service/data-analytics/)
- [Cloud Strategy](https://ipponusa.com/service/cloud-strategy/)
- [Platform Modernization](https://ipponusa.com/service/platform-moderization/)
- [Product Innovation](https://ipponusa.com/service/product-innovation/)
- [Operating Model](https://ipponusa.com/service/operating-model/)
- [Blogs](https://blog.ippon.tech/)
- [Success Stories](https://ipponusa.com/success-stories/)
- [Show submenu for Resources Resources](https://ipponusa.com/resources/)
- [eBooks](https://ipponusa.com/ebooks/)
- [The Data Pour](https://info.ippon.tech/the-data-pour)
- [Videos & Webinars](https://info.ippon.tech/videos-and-webinars)
- [Media Center](https://ipponusa.com/media-center/)
Search
Open main navigation
Close main navigation
- [Home](https://ipponusa.com)
- Show submenu for About About
- About
- [About](https://ipponusa.com/about-us)
- [Who We Are](https://ipponusa.com/who-we-are)
- [Careers](https://ipponusa.com/careers)
- Show submenu for Our Partners Our Partners
- Our Partners
- [Our Partners](https://ipponusa.com/our-partners/)
- [AWS](https://ipponusa.com/our-partners/aws/)
- [Snowflake](https://ipponusa.com/our-partners/snowflake/)
- [Databricks](https://ipponusa.com/our-partners/databricks/)
- [Microsoft](https://ipponusa.com/our-partners/microsoft/)
- Show submenu for Services Services
- Services
- [Services](https://ipponusa.com/services)
- [Snowflake](https://ipponusa.com/service/snowflake-concierge/)
- [Artificial Intelligence](https://ipponusa.com/service/artificial-intelligence/)
- [Data & Analytics](https://ipponusa.com/service/data-analytics/)
- [Cloud Strategy](https://ipponusa.com/service/cloud-strategy/)
- [Platform Modernization](https://ipponusa.com/service/platform-moderization/)
- [Product Innovation](https://ipponusa.com/service/product-innovation/)
- [Operating Model](https://ipponusa.com/service/operating-model/)
- [Blogs](https://blog.ippon.tech/)
- [Success Stories](https://ipponusa.com/success-stories/)
- Show submenu for Resources Resources
- Resources
- [Resources](https://ipponusa.com/resources/)
- [eBooks](https://ipponusa.com/ebooks/)
- [The Data Pour](https://info.ippon.tech/the-data-pour)
- [Videos & Webinars](https://info.ippon.tech/videos-and-webinars)
- [Media Center](https://ipponusa.com/media-center/)
- Search
- [Contact Us](https://ipponusa.com/contact/)
[Contact Us](https://ipponusa.com/contact/)
# Cloud Migration for Regulated Workloads
by [Iryna Chmelyk](https://blog.ippon.tech/author/iryna-chmelyk)
December 3, 2024
-2.png?width=1900&height=1080&name=Blockchain%20(2)-2.png)
As organizations increasingly move their regulated environments to the cloud, AWS has become a go-to platform because of its security features and compliance capabilities.
One of my favorite sessions from “Day 1” of the re:Invent 2024 was on "Migrating regulated workloads onto AWS at scale." My favorite quote of the talk was, "It's better for the companies to strive for the culture of quality, and compliance will follow naturally.". It makes all the sense because, otherwise, compliance becomes the factor that slows the workflows and system down instead of being the driving factor for a quality environment. It should not be built around the system, but rather the system should be built with compliance at its core.
I'm excited to share key insights from the talk going over the best practices for successfully navigating the complex process of "compliant" migration to the cloud.
## Regulatory Standards
So, what are the regulated workloads? They are workloads that must comply with specific industry standards or government regulations. These compliance standards can influence both the architecture of individual workloads and the overall AWS account structure. The table below shows the most common standards per domain.
| Domain | Acronym | Standard | Purpose | Things to Consider |
| --- | --- | --- | --- | --- |
| Healthcare data | HIPAA GxP | Health Insurance Portability and Accountability Act Good x Practices (where x depends on the industry) | Guidelines for the protection of PHI data Ensuring quality throughout the IT lifecycle of pharmaceuticals, biotechnology, medical devices, etc | - Data Encryption - Audit Trails - Dedicated Environments - Data Deletion - Account Structure |
| Financial information | PCI DSS, SOX | Payment Card Industry Data Security Standard | Secure payment card transactions | - Network Isolation - Access Controls - Real-Time Monitoring - Account Structure |
| Personal data | GDPR, CCPA | - General Data Protection Regulation \- California Consumer Privacy Act | Protect the personal data of EU citizens. The right to know about the personal information a business collects | - Data Residency - Data Deletion (to support the "right to be forgotten") - Encryption - Account Structure |
| Government systems | FedRAMP | Federal Risk and Authorization Management Program | Ensure secure cloud usage for U.S. federal agencies | - Authorized Services - Enhanced Security - Incident Response - Account Structure |
| Energy and utilities | CEII | Critical Energy/Electric Infrastructure Information | Protect information on critical infrastructure assets | - Data Residency - Encryption - Private Connectivity - Monitoring and Logging - Network Isolation - Account Structure |
## GxP
This specific re:Invent talk concentrated on GxP. For those new to this topic, GxP was established by the Food and Drug Administration (FDA) to ensure the minimum standards that pharmaceutical and food product manufacturers must adhere to so that their products are of high quality and safe for consumers and the public. This term refers to a wide spectrum of compliance activities, including Good Laboratory Practices (GLP), Good Clinical Practices (GCP), and Good Manufacturing Practices (GMP), among others. Each GxP standard carries specific requirements tailored to the type of product being produced and the country where it is marketed. When life sciences organizations utilize computerized systems for GxP-related activities, they must ensure these systems are properly developed, validated, and operated in alignment with their intended purpose.
MAP for the Regulated Workloads
The Migration Acceleration Program (MAP) is the program offered by AWS and their partners, like Ippon, that uses a proven methodology and AWS funding for qualified small and large-scale cloud migrations. MAP for GxP workloads is a little different from the other use cases, especially when it comes to the mobilize phase of the MAP. It is so because during this phase the landing zone is being prepared to host the workloads. It is either reviewed, validated, and extended or created from scratch. With regulated applications, this part of the migration journey is more complex as the organizations need to ensure the new environment would be compliant with all of the necessary standards, or as the speaker phrased it, "Compliance boundaries are set in Mobilize." Below is the slide of the MAP program showing where the regulated workloads' migration differs from the ordinary one.
Landing Zone Accelerator (LZA) for Healthcare
The difference between a regular vs. regulated migration has many implications, and cost is one of them for sure. It takes more time to assess, develop, and validate a compliance environment. In order to speed up this process, AWS has developed the LZA, which is the set of configuration files designed to address the specific requirements of healthcare-related organizations. It utilizes AWS best practices along with migration experience from regulated industries in mind. Here is what can be quickly created using this accelerator:
Activities for GxP migration
There are commonly a lot of things to do during the migration planning and the move, but the regulated workloads take these actions to the next level. The migration waves here depend not only on the interdependencies and communication between the applications but also on the "compliance boundaries." A little overwhelming, but a very informative slide below shows how the activities per workstream look like for the GxP use cases:
## Conclusion
By discovering the regulated workload and understanding which best practices and standards apply to it, organizations will be able to tailor their unique approach to migration. For the GxP applications, using Landing Zone Accelerator (LZA) for Healthcare could speed up the migration process by months and ensure that the transition of the regulated workloads to AWS at scale is successful. This approach leverages the full power of AWS services to enhance security, scalability, and operational efficiency. This will produce a validated and verifiable environment of great quality.
If you need help figuring out the regulated workload migration, [contact us](https://ipponusa.com/contact/?__hstc=223023812.9c23f9bfcea3bc7829bb6531f57d36a9.1727834835844.1732534021706.1732539477437.7&__hssc=223023812.1.1732539477437&__hsfp=3338420905) and we will be happy to assist.
## Related Articles
##### [ AWS • April 21, 2026 Scaling Resilience with AWS Resilience Hub: A Multi-Account Reality Check 5 min read](https://blog.ippon.tech/scaling-resilience-with-aws-resilience-hub-a-multi-account-reality-check)
##### [ AWS • April 14, 2026 The Missing Layer in Enterprise AI: AWS Bedrock Guardrails 9 min read](https://blog.ippon.tech/the-missing-layer-in-enterprise-ai-aws-bedrock-guardrails)
##### [ AWS • April 8, 2026 Building a Cost Optimization Agent with AWS Bedrock and Cost Explorer 7 min read](https://blog.ippon.tech/building-a-cost-optimization-agent-with-aws-bedrock-and-cost-explorer)
### Comments
### Subscribe to Our Blog!
Stay informed with the latest insights and updates by signing up for our weekly blog newsletter – delivered straight to your inbox!
[Back to blog homepage »](https://blog.ippon.tech/)
Ippon is a consulting and expertise firm, who is convinced that technology is a source of progress for society. We help our clients leverage their digital assets to design an appropriate strategy and deploy their transformation roadmap at scale.
#### Navigation
- [Home](https://ipponusa.com/)
- [About](https://ipponusa.com/about-us/)
- [Services](https://ipponusa.com/services/)
- [Blogs](https://blog.ippon.tech/?__hstc=223043268.1036d82247623b329dfefe4e92697801.1714729179243.1714729179243.1714729179243.1&__hssc=223043268.2.1714729179244&__hsfp=803678701)
- [eBooks](https://ipponusa.com/ebooks/)
- [The Data Pour](https://info.ippon.tech/the-data-pour?__hstc=223043268.1036d82247623b329dfefe4e92697801.1714729179243.1714729179243.1714729179243.1&__hssc=223043268.2.1714729179244&__hsfp=803678701)
[Contact Us](https://ipponusa.com/contact/)
[Join Us](https://ipponusa.com/careers/)
#### Services
- [Data & Analytics](https://ipponusa.com/service/data-analytics/)
- [Cloud Strategy](https://ipponusa.com/service/cloud-strategy/)
- [Artificial Intelligence](https://ipponusa.com/service/artificial-intelligence/)
- [Operating Model](https://ipponusa.com/service/operating-model/)
- [Platform Modernization](https://ipponusa.com/service/platform-moderization/)
- [Product Innovation](https://ipponusa.com/service/product-innovation/)
#### Ippon International
- [France](https://fr.ippon.tech/?__hstc=223043268.1036d82247623b329dfefe4e92697801.1714729179243.1714729179243.1714729179243.1&__hssc=223043268.2.1714729179244&__hsfp=803678701)
- [Australia](https://au.ippon.tech/?__hstc=223043268.1036d82247623b329dfefe4e92697801.1714729179243.1714729179243.1714729179243.1&__hssc=223043268.2.1714729179244&__hsfp=803678701)
- #### Contact
- Ippon Technologies
[3431 West Leigh Street Richmond, VA 23230, USA](https://maps.app.goo.gl/RySm6SAwZnsxeiLz9)
- [(844) 477- 6687](tel:8444776687)
- [Sales@ipponusa.com](mailto:Sales@ipponusa.com)
©Copyright 2024 Ippon USA. All Rights Reserved. | [Terms and Conditions](https://ipponusa.com/privacy-policy/) | [Privacy Policy](https://ipponusa.com/privacy-policy/) | [Website by Skol Marketing](https://skolmarketing.com/)
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Iryna Chmelyk",
"url" : "https://blog.ippon.tech/author/iryna-chmelyk"
},
"dateModified" : "2024-12-03T17:38:25.364Z",
"datePublished" : "2024-12-03T17:38:25.000Z",
"headline" : "Cloud Migration for Regulated Workloads",
"image" : [ "https://blog.ippon.tech/hubfs/Blockchain%20(2)-2.png" ],
"mainEntityOfPage" : {
"@id" : "https://blog.ippon.tech/cloud-migration-for-regulated-workloads",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.ippon.tech/hubfs/logo_SVG.svg"
},
"name" : "Ippon Technologies"
}
}
```