cloud collaboration and storage services - ncpancpa.us/files/docs/due diligence/cloud collaboration...

Cloud Collaboration and Storage Services National Cooperative Purchasing Alliance (NCPA)

Solicitation Number 22-16 A&T Systems; July 21, 2016

Use or disclosure of data contained on this sheet is subject to the restriction on the title page of this proposal. i

TABLE OF CONTENTS Acronym List ................................................................................................................................................................. v Introduction ................................................................................................................................................................... 1 Compliance Matrix for Evaluation Criteria and Required Elements ............................................................................. 1 1 Tab 1 – Signature Form .......................................................................................................................................... 3 2 Tab 2 – NCPA Administration Agreement ............................................................................................................ 4 3 Tab 3 – Vendor Questionnaire ................................................................................................................................ 7 4 Tab 4 – Vendor Profile ......................................................................................................................................... 10

4.1 Company’s official registered name: ....................................................................................................... 10 4.2 Brief History of Your Company, Including the Year It Was Established: ............................................... 10 4.3 Company’s Dun & Bradstreet (D&B) Number ........................................................................................ 11 4.4 Company’s Organizational Chart of Individuals that Would Be Involved in the Contract ...................... 12 4.5 Corporate Office Location ....................................................................................................................... 14

4.5.1 List Number of Sales and Services Offices for States Being Bid in Solicitation ........................ 14 4.5.2 List Names of Key Contacts at Each with Title, Address, Phone and E-Mail Address ............... 14

4.6 Define Your Standard Terms of Payment ................................................................................................ 15 4.7 Who Is Your Competition in the Marketplace? ....................................................................................... 15 4.8 Provide Annual Sales for Last 3 Years Broken out into the Following Categories ................................. 15

4.8.1 Cities /Counties ........................................................................................................................... 15 4.8.2 K-12 ............................................................................................................................................. 15 4.8.3 Higher Education ......................................................................................................................... 15 4.8.4 Other Government Agencies or Nonprofit Organizations ........................................................... 15

4.9 What Differentiates Your Company from Competitors? ......................................................................... 15 4.9.1 A&T Differentiators .................................................................................................................... 15 4.9.2 AWS Differentiators .................................................................................................................... 17

4.9.2.1 Business Benefits of AWS Cloud Services ............................................................... 17 4.9.2.2 Technical Benefits of AWS Cloud Services .............................................................. 18 4.9.2.3 AWS’s Differences from Microsoft Azure ................................................................ 18

4.10 Describe How Your Company Will Market This Contract if Awarded ................................................... 43 4.10.1 Strategy and Processes for Marketing the NCPA Vehicle........................................................... 43 4.10.2 A&T Plan to Contact New and Existing Clients ......................................................................... 43 4.10.3 Leverage Vendor Resources ........................................................................................................ 44 4.10.4 Plan For Achieving These Objectives ......................................................................................... 44

4.11 Describe How You Intend to Introduce NCPA to Your Company .......................................................... 45 4.12 Describe Your Firm’s Capabilities and Functionality of Your On-Line Catalog / Ordering Website ..... 46

4.12.1 Evaluation Criterion Technology for Supporting the Program .................................................... 46 4.12.1.1 Electronic On-Line Catalog, Order Entry Use by And Suitability for the Entity’s

Needs ......................................................................................................................... 46 4.12.2 Quality of Vendor’s On-Line Resources for NCPA Members .................................................... 49

4.12.2.1 Specifications and Features Offered by Respondent’s Products and/or Services ...... 50 4.13 Describe Your Customer Service Department (hrs of operation, no. of service centers, etc.): ................ 51 4.14 Green Initiatives: ...................................................................................................................................... 52

4.14.1 Options for Customers Seeking to Run 100% Carbon-Neutral Infrastructure ............................ 52 4.14.2 The Greenest Power is That Which is Not Consumed ................................................................ 52



Use or disclosure of data contained on this sheet is subject to the restriction on the title page of this proposal. ii

4.15 Vendor Certifications (if applicable) ....................................................................................................... 53 4.15.1 AWS Letter of Supply as Government Reseller .......................................................................... 54 4.15.2 AWS Government Competency Partner ...................................................................................... 56 4.15.3 AWS Solution Architect Certifications ....................................................................................... 57

4.15.3.1 Deepak Dewangan ..................................................................................................... 57 4.15.3.2 Tom Lynch ................................................................................................................ 59 4.15.3.3 Arit Udo ..................................................................................................................... 60

5 Tab 5 – Products and Services / Scope ................................................................................................................. 61 5.1 Product and Services Evaluation Criteria ................................................................................................ 61

5.1.1 Ability to Provide and Perform the Required Services for the Contract ..................................... 61 5.1.1.1 Product Delivery within Participating Entities Specified Parameters ........................ 61 5.1.1.2 Number of Line Items Delivered Complete in Normal Delivery Time as % of Items

Ordered ...................................................................................................................... 61 5.1.1.3 Vendor’s Ability to Perform towards above Requirements and Desired Specifications61 5.1.1.4 Quantity of Line Items Available that Are Commonly Purchased by the Entity ....... 61 5.1.1.5 Quality of Line Items Available Compared to Normal Participating Entity Standards61

5.2 Products and Services Detail .................................................................................................................... 62 5.2.1 Cloud Storage .............................................................................................................................. 62 5.2.2 Remote Storage ........................................................................................................................... 62 5.2.3 Storage Virtualization .................................................................................................................. 64 5.2.4 File Storage.................................................................................................................................. 64 5.2.5 File Version History .................................................................................................................... 64 5.2.6 File Collaboration ........................................................................................................................ 65 5.2.7 Data Backup and Archiving ........................................................................................................ 65 5.2.8 Data Audits .................................................................................................................................. 66 5.2.9 External File Sending .................................................................................................................. 67 5.2.10 File Previews ............................................................................................................................... 68 5.2.11 Video Streaming .......................................................................................................................... 68 5.2.12 Off-line File Access ..................................................................................................................... 69 5.2.13 Mobile File Access ...................................................................................................................... 69

5.3 A&T Systems as a Viable, Robust NCPA Cloud Prime Contractor ........................................................ 70 5.4 AWS as a Robust CSP ............................................................................................................................. 70

6 Tab 6 - References ................................................................................................................................................ 73 6.1 U.S. Geological Survey Cloud Services; Golden, CO ............................................................................. 73 6.2 District of Columbia Health Benefit Exchange Authority Cloud Services Operations Division ............. 73 6.3 Veterans Affairs Financial Services Center Electronic Invoicing; Cloud Support; Austin, TX .............. 73 6.4 Lawrence Livermore National Laboratory Cloud Services; Livermore, CA ........................................... 73 6.5 Department of State—IRM Cloud Services; Washington, DC ................................................................ 73 6.6 Department of State eDiplomacy Cloud Services; Washington, DC ....................................................... 74 6.7 Navy Chief Information Officer (CHINFO) Cloud Services; Washington, DC ...................................... 74 6.8 State of Maryland DoIT Enterprise Web Services and Cloud Support; Annapolis, MD ......................... 74 6.9 Binghamton, New York Board of Education Cloud Services; Binghamton, NY .................................... 74 6.10 NIH NIDA National Institute on Drug Abuse Cloud Services; Bethesda, MD ....................................... 74 6.11 AWS Letter of Support ............................................................................................................................ 74

7 Tab 7 - Pricing ...................................................................................................................................................... 76



Use or disclosure of data contained on this sheet is subject to the restriction on the title page of this proposal. iii

7.1 Evaluation Criterion: Pricing: Electronic Price Lists— Products, Services, Warranties ......................... 76 7.1.1 Electronic Price List, Services, and Warranties ........................................................................... 76

7.1.1.1 AWS SLAs and Credits for Failure to Meet an SLA ................................................. 76 7.1.1.2 A&T SLAs for MS and Credits for Failure to Meet an SLA ..................................... 77

7.1.2 Not to Exceed Pricing .................................................................................................................. 78 8 Tab 8 – Value Added Products and Services ........................................................................................................ 79

8.1 Evaluation Criteria for Value Added Services Description, Products, and/or Services ........................... 79 8.1.1 Marketing and Training ............................................................................................................... 79 8.1.2 Customer Service ........................................................................................................................ 79

8.2 Other Value Added Products and Services .............................................................................................. 79 8.2.1 A&T Cloud 1-2-3 ........................................................................................................................ 79 8.2.2 Tools that A&T Has Experience Supporting ............................................................................... 84 8.2.3 General Cloud Tools that A&T Can Support .............................................................................. 84 8.2.4 AWS Marketplace for 3rd-Party Cloud Software ......................................................................... 86

8.2.4.1 Highlights .................................................................................................................. 86 8.2.4.2 AWS Marketplace Works With Qualified Partners ................................................... 86 8.2.4.3 Buy from Popular Software Vendors on AWS Marketplace ..................................... 86 8.2.4.4 New Pricing Dimensions Match the Way You Consume Software .......................... 86

9 Tab 9 – Required Documents ............................................................................................................................... 88 9.1 Clean Air and Water Act / Debarment Notice ......................................................................................... 88 9.2 Contractors Requirements ........................................................................................................................ 89 9.3 Antitrust Certification Statements ............................................................................................................ 90 9.4 FEMA Standard Terms and Conditions Addendum for Contracts and Grants ........................................ 91 9.5 Required Clauses for Federal Assistance by FTA ................................................................................... 93 9.6 State Notice Addendum ........................................................................................................................... 97

10 Appendix 1: Full Rendition of AWS SLA Text ................................................................................................. 102 10.1 SLA , Relationship management Agreement [RFQ Section 9.0] ........................................................... 102

10.1.1 Amazon CloudFront SLA .......................................................................................................... 102 10.1.2 Amazon EC2 SLA ..................................................................................................................... 103 10.1.3 Amazon RDS SLA .................................................................................................................... 105 10.1.4 Amazon Route 53 SLA ............................................................................................................. 107 10.1.5 Amazon S3 SLA ........................................................................................................................ 108



Use or disclosure of data contained on this sheet is subject to the restriction on the title page of this proposal. iv

TABLE OF FIGURES Figure 1. A&T Corporate HQ; Silver Spring, MD ...................................................................................................... 10 Figure 2. A&T Executives with DC HBX Project Team ............................................................................................. 11 Figure 3. A&T’s Organizational Structure .................................................................................................................. 12 Figure 4. A&T NOCC Structure .................................................................................................................................. 13 Figure 5. Roles and Responsibilities in A&T’s NCPA Organization .......................................................................... 14 Figure 6. Comparison of AWS and Microsoft Azure .................................................................................................. 19 Figure 7. Screen Shot of a Page from the A&T NCPA Price List ............................................................................... 47 Figure 8. AWS Search Tool (Left) and Search Results (Right) ................................................................................... 48 Figure 9. AWS Partial Screen for Searching Pricing Information ............................................................................... 48 Figure 10. Screen Shot of Vendor Postings in AWS Marketplace .............................................................................. 49 Figure 11. Overview on A&T’s Customer Service Approach ..................................................................................... 51 Figure 12. Major Components of our Customer Service Approach ............................................................................ 52 Figure 13. Detail on AWS Cloud Storage Products .................................................................................................... 62 Figure 14. Global Map of AWS Regions and Availability Zones ............................................................................... 63 Figure 15. Regions and Availability Zones ................................................................................................................. 63 Figure 16. Detail on-File Storage Products.................................................................................................................. 64 Figure 17. Detail on AWS File-Version History Products .......................................................................................... 64 Figure 18. Detail on AWS Cloud File-Collaboration Products ................................................................................... 65 Figure 19. Detail on Backup and Archiving Products ................................................................................................. 66 Figure 20. Detail on Data Audit Products .................................................................................................................... 66 Figure 21. Detail on External File Sending Products................................................................................................... 67 Figure 22. Detail on File Preview Products ................................................................................................................. 68 Figure 23. Detail on Video Streaming Products .......................................................................................................... 68 Figure 24. Detail on Off-Line File Access Products .................................................................................................... 69 Figure 25. Detail on 3rd-Party Mobile File Access Products ....................................................................................... 69 Figure 26. Gartner Magic Quadrant for May 2015 Shows AWS as the Dominant Cloud IaaS Player ........................ 71 Figure 27. 2000+ Government Agencies, 5000 Educational Customers, and 17,500+ Nonprofits Use AWS’ Cloud 71 Figure 28. High-Level View of the AWS Cloud Platform .......................................................................................... 72 Figure 29. AWS Core Services SLAs and Credits ...................................................................................................... 76 Figure 30. A&T’s Proposed NOCC SLAs ................................................................................................................... 77 Figure 31. Sample A&T Operations & Maintenance (O&M) SLAs and Credits ........................................................ 77 Figure 32. A&T Cloud Governance Model ................................................................................................................. 79 Figure 33. A&T’s Professional Services Model .......................................................................................................... 81 Figure 34. A&T’s Can Support All NCPA Customer Managed Services Needs ........................................................ 82 Figure 35. Technical Tools, Methods and Resources to Support Cloud Hosting Governance .................................... 84 Figure 36. 3rd-Party Cloud Tools that A&T Uses to Support PEs .............................................................................. 84 Figure 37. AWS's Extensive Partner Ecosystem ......................................................................................................... 87



Use or disclosure of data contained on this sheet is subject to the restriction on the title page of this proposal. v

ACRONYM LIST ACRONYM DEFINITION

A&T A&T Systems AD Active Directory ADEA Age Discrimination in Employment Act AES Advanced Encryption Standard AMI Amazon Machine Image API Application Programming Interface APN AWS Partner Network ATO Authorization to Operate AWS Amazon Web Services AZ Availability Zones CDSA Content Delivery and Security Association CEO Chief Executive Officer CHINFO Navy Office of Information CIO Chief Information Officer CJIS Criminal Justice Information Services CLI Command Line Interface CLIN Contract Line Item Number CO Contracting Officer COR Contracting Officer’s Representative CPU Computer Processing Unit CSA Computer Security Alliance CSP Cloud Service Provider CSR Customer Service Representative CTO Chief Technology Officer CSV Comma-Separated Value D&B Dun & Bradstreet DBE Disadvantaged Business Enterprise DCHBX District of Columbia Health Benefit Exchange DDoS Distributed Denial of Service DLP Data Leak Prevention DoL Department of Labor DoS Denial of Service DoT Department of Transportation DNS Domain Name System DoD Department of Defense DoIT Department of Information Technology DR Disaster Recovery DSS Data Security Standard EBS Elastic Block Store EC2 Elastic Compute Cloud EEOC Equal Employment Opportunity Commission EFS Elastic File System ELB Elastic Load Balancing EMM Enterprise Mobility Management EMR Elastic MapReduce FedRAMP Federal Risk and Authorization Management Program FEMA Federal Emergency Management Agency FERPA Family Educational Rights and Privacy Act FINA Federal Immigration & Nationality Act FIPS Federal Information Processing Standard FISMA Federal Information Security Management Act FTA Federal Transit Administration GB Gigabyte GSA General Services Administration GWAC Government Wide Acquisition Contract HIPAA Health Insurance Portability and Accountability Act HSM Hardware Security Module



Use or disclosure of data contained on this sheet is subject to the restriction on the title page of this proposal. vi

ACRONYM DEFINITION HTTP Hyper Text Transfer Protocol HTTPS Hyper Text Transfer Protocol Secure IaaS Infrastructure as a Service IAM Identity and Access Management IAW In Accordance With IDE Integrated Development Environment IDIQ Indefinite Delivery; Indefinite Quantity IP Internet Protocol IDS Intrusion Detection System IPS Intrusion Protection System IRAP Information Security Registered Assessors Program IRM Information Right Management ISO International Organization for Standardization IT Information Technology ITAR Interantional Traffic in Arms Regulation KMS Key Management Service MFT Managed File Transfer MQTT Message Queue Telemetry Transport MS Managed Services MSP Managed Service Provider NMDS National Mobile Devices and Services NOCC Network Operations Control Center O&M Operations and Maintenance OS Operating System PaaS Platforma as a Service PCI Payment Card Industry PjM Project Manager PMO Program Management Office POC Point of Contact PS Professional Services QA Quality Assurance QASP Quality Assurance Surveillance Plan RDS Relational Database Service RFP Request for Proposal S3 Simple Storage Service SaaS Software as a Service SAS Security Armed Solutions SDK Sofware Development Kit SimpleDB Simple Database SLA Service Level Agreement SME Subject Matter Expert SNS Simple Notification Service SOC Service Organization Controls SSL Secure Socket Layer TAM Technical Account Manager TB Terabyte TLS Transport Layer Security T.O. Task Order UPS Uninterruptible Power Supply USARC U.S. Army Reserve Command USGS U.S. Geological Survey VA Veterans Affairs VAR Value Added Reseller VPC Virtual Private Cloud VPN Virtual Private Network



Use or disclosure of data contained on this sheet is subject to the restriction on the title page of this proposal. 1

INTRODUCTION A&T Systems, Inc. (A&T) is pleased to respond to the National Cooperative Purchasing Alliance (NCPA) Cloud Collaboration and Storage Services Request for Proposal (RFP) 22-16.

A&T has been in business for 32 years in the fields of Information Technology (IT) and telecommunications. In the past four years, A&T has established itself as a go-to partner with Amazon Web Services (AWS). A&T holds numerous certifications with AWS, including:

Advanced Consulting Partner Government Partner able to provision/manage deployments in the GovCloud region Authorized Government Reseller Partner/Value Added Reseller Government Competency Partner Holder of an AWS Letter of Supply for all 35,000 AWS Government Contract Line Item Numbers

(CLINs) Our partnership with Amazon and extensive experience providing Cloud Solutions to Public Sector, Federal, State, and local governments position A&T to assist clients who need to select, acquire, establish, implement, and maintain secure, robust, scalable capabilities in the cloud with platforms for Development, Test, Staging, Production, or Training.

A&T is a responsive, capable small business that is currently providing numerous Federal and State agencies with a full lifecycle range of Dev/Ops cloud services—from initial assessment and discovery all the way through long-term Managed Services (MS) and Technology Refresh activities.

Note about headings and inclusion of RFP instructions: to assist the evaluator, A&T has organized its proposal to follow the RFP instructions and has literally copied RFP instructions about the nine tab factors as green headings. Additionally, when the RFP included instructions, we have copied the instructions and highlighted them in a text box with light blue background color.

COMPLIANCE MATRIX FOR EVALUATION CRITERIA AND REQUIRED ELEMENTS RFP Section Name RFP Pg # Prop Section #

Evaluation Criteria 12 Pricing: Electronic Price Lists— Products, Services, Warranties (40 points) 12 7.1 Ability to Provide and Perform the Required Services for the Contract (25 points) 12 5.1.1

Product Delivery within participating entities specified parameters 12 5.1.1.1 Number of line items delivered complete within normal delivery time as a % of line items ordered. 12 5.1.1.2 Vendor’s ability to perform towards above requirements and desired specifications. 12 5.1.1.3 Quantity of line items available that are commonly purchased by the entity. 12 5.1.1.4 Quality of line items available compared to normal participating entity standards. 12 5.1.1.5

References (15 points) 12 6 Technology for Supporting the Program (10 points) 12 4.12

Electronic on-line catalog, order entry use by and suitability for the entity’s needs 12 4.12.1 Quality of vendor’s on-line resources for NCPA members. 12 4.12.2 Specifications and features offered by respondent’s products and/or services 12 4.12.3

Value Added Services Description, Products and/or Services (10 points) 12 8.1 Marketing and Training 12 8.1.1 Customer Service 12 8.1.2

Required Content Tab 1: Signature Form 13 1 Tab 2: NCPA Administration Agreement 14 2 Tab 3: Vendor Questionnaire 17 3 Tab 4: Vendor Profile 20 4

Company’s official registered name. 20 4.1 Brief history of your company, including the year it was established. 20 4.2 Company’s Dun & Bradstreet (D&B) number. 20 4.3 Company’s organizational chart of those individuals that would be involved in the contract. 20 4.4 Corporate office location. 20 4.5




RFP Section Name RFP Pg # Prop Section # List the number of sales and services offices for states being bid in solicitation. 20 4.5.1 List the names of key contacts at each with title, address, phone and e-mail address. 20 4.5.2 Define your standard terms of payment. 20 4.6 Who is your competition in the marketplace? 20 4.7 Provide Annual Sales for last 3 years broken out into these categories: Cities/Counties; K-12; Higher Education; Other government agencies or nonprofits

20 4.8

What differentiates your company from competitors? 20 4.9 Describe how your company will market this contract if awarded. 20 4.10 Describe how you intend to introduce NCPA to your company. 20 4.11 Describe your firm’s capabilities and functionality of your on-line catalog / ordering website. 20 4.12 Describe your company’s Customer Service Department (hrs of operation, number of service centers) 20 4.13 Green Initiatives 20 4.14 Vendor Certifications 21 4.15

Tab 5: Products and Services 22 5.2 Cloud Storage 22 5.2.1 Remote Storage 22 5.2.2 Storage Virtualization 22 5.2.3 File Storage 22 5.2.4 File Version History 22 5.2.5 File Collaboration 22 5.2.6 Data Backup 22 5.2.6 Data Archiving 22 5.2.7 Data Audits 22 5.2.8 External File Sending 22 5.2.9 File Previews 22 5.2.10 Video Streaming 22 5.2.11 Off-line File Access 22 5.2.12 Mobile File Access 22 5.2.13

Tab 6: References 23 6 Tab 7: Pricing 24 7 Tab 8: Value Added Products and Services 25 8 Tab 9: Required Documents 26 9

Clean Air and Water Act / Debarment Notice 26 9.1 Contractors Requirements 26 9.2 Antitrust Certification Statements 26 9.3 FEMA Standard Terms and Conditions Addendum for Contracts and Grants 26 9.4 Required Clauses for Federal Assistance by FTA 26 9.5 State Notice Addendum 26 9.6




1 TAB 1 – SIGNATURE FORM Signature Form

The undersigned hereby proposes and agrees to furnish goods and/or services in strict compliance with the terms, specifications and conditions at the prices proposed within response unless noted in writing. The undersigned further certifies that he/she is an officer of the company and has authority to negotiate and bind the company named below and has not prepared this bid in collusion with any other Respondent and that the contents of this proposal as to prices, terms or conditions of said bid have not been communicated by the undersigned nor by any employee or agent to any person engaged in this type of business prior to the official opening of this proposal.

Prices are guaranteed: 120 days

Company name: A&T Systems, Inc.

Address: 12200 Tech Road, Suite 200

City/State/Zip: Silver Spring, MD 20904

Telephone No.: 301-675-5555

Fax No.: 301-384-1405

Email address: [email protected]

Printed name: Fred S. Sanders

Position with company: Vice President

Authorized signature:




2 TAB 2 – NCPA ADMINISTRATION AGREEMENT This Administration Agreement is made as of , by and between National Cooperative Purchasing Alliance (“NCPA”) and A&T Systems, Inc. (“Vendor”).

Recitals

WHEREAS, Region 14 ESC has entered into a certain Master Agreement dated , referenced as Contract Number , by and between Region 14 ESC and Vendor, as may be amended from time to time in accordance with the terms thereof (the “Master Agreement”), for the purchase of Cloud Collaboration and Storage Services;

WHEREAS, said Master Agreement provides that any state, city, special district, local government, school district, private K-12 school, technical or vocational school, higher education institution, other government agency or nonprofit organization (hereinafter referred to as “public agency” or collectively, “public agencies”) may purchase products and services at the prices indicated in the Master Agreement;

WHEREAS, NCPA has the administrative and legal capacity to administer purchases under the Master Agreement to public agencies;

WHEREAS, NCPA serves as the administrative agent for Region 14 ESC in connection with other master agreements offered by NCPA

WHEREAS, Region 14 ESC desires NCPA to proceed with administration of the Master Agreement; WHEREAS, NCPA and Vendor desire to enter into this Agreement to make available the Master Agreement to public agencies on a national basis;

NOW, THEREFORE, in consideration of the payments to be made hereunder and the mutual covenants contained in this Agreement, NCPA and Vendor hereby agree as follows:

♦General Terms and Conditions

➢The Master Agreement, attached hereto as Tab 1 and incorporated herein by reference as though fully set forth herein, and the terms and conditions contained therein shall apply to this Agreement except as expressly changed or modified by this Agreement.

➢ NCPA shall be afforded all of the rights, privileges and indemnifications afforded to Region 14 ESC under the Master Agreement, and such rights, privileges and indemnifications shall accrue and apply with equal effect to NCPA under this Agreement including, but not limited to, the Vendor’s obligation to provide appropriate insurance and certain indemnifications to Region 14 ESC.

➢ Vendor shall perform all duties, responsibilities and obligations required under the Master Agreement in the time and manner specified by the Master Agreement.

➢ NCPA shall perform all of its duties, responsibilities, and obligations as administrator of purchases under the Master Agreement as set forth herein, and Vendor acknowledges that NCPA shall act in the capacity of administrator of purchases under the Master Agreement.

➢ With respect to any purchases made by Region 14 ESC or any Public Agency pursuant to the Master Agreement, NCPA (a) shall not be construed as a dealer, re-marketer, representative, partner, or agent of any type of Vendor, Region 14 ESC, or such Public Agency, (b) shall not be obligated, liable or responsible (i) for any orders made by Region 14 ESC, any Public Agency or any employee of Region 14 ESC or Public Agency under the Master Agreement, or (ii) for any payments required to be made with respect to such order, and (c) shall not be obligated, liable or responsible for any failure by the Public Agency to (i) comply with procedures or requirements

August 1, 2016

August 1, 201601-61




of applicable law, or (ii) obtain the due authorization and approval necessary to purchase under the Master Agreement. NCPA makes no representations or guaranties with respect to any minimum purchases required to be made by Region 14 ESC, any Public Agency, or any employee of Region 14 ESC or Public Agency under this Agreement or the Master Agreement.

➢ The Public Agency participating in the NCPA contract and Vendor may enter into a separate supplemental agreement to further define the level of service requirements over and above the minimum defined in this contract i.e. invoice requirements, ordering requirements, specialized delivery, etc. Any supplemental agreement developed as a result of this contract is exclusively between the Public Agency and Vendor. NCPA, its agents, members and employees shall not be made party to any claim for breach of such agreement.

♦Term of Agreement

➢ This Agreement shall be in effect so long as the Master Agreement remains in effect, provided, however, that the obligation to pay all amounts owed by Vendor to NCPA through the termination of this Agreement and all indemnifications afforded by Vendor to NCPA shall survive the term of this Agreement.

♦Fees and Reporting

➢ The awarded vendor shall electronically provide NCPA with a detailed monthly or quarterly report showing the dollar volume of all sales under the contract for the previous month or quarter. Reports shall be sent via e-mail to NCPA offices at [email protected]. Reports are due on the fifteenth (15th) day after the close of the previous month or quarter. It is the responsibility of the awarded vendor to collect and compile all sales under the contract from participating members and submit one (1) report. The report shall include at least the following information as listed in the example below:

Entity Name Zip Code State PO or JOB # Sale Amount

Total:

➢ Each quarter NCPA will invoice the vendor based on the total of sale amount(s) reported. From the invoice the vendor shall pay to NCPA an administrative fee based upon the tiered fee schedule below. Vendor’s annual sales shall be measured on a calendar year basis.

Deadline for term of payment will be included in the invoice NCPA provides.

Annual Sales Through Contract Administrative Fee

➢ Supplier shall maintain an accounting of all purchases made by Public Agencies under the Master Agreement. NCPA and Region 14 ESC reserve the right to audit the accounting for a period of four (4) years from the date NCPA receives the accounting. In the event of such an audit, the requested materials shall be provided at the location designated by Region 14 ESC or NCPA. In the event such audit reveals an underreporting of Contract Sales and a resulting underpayment of administrative fees, Vendor shall promptly pay NCPA the amount of such




underpayment, together with interest on such amount and shall be obligated to reimburse NCPA’s costs and expenses for such audit.

♦General Provisions

➢ This Agreement supersedes any and all other agreements, either oral or in writing, between the parties hereto with respect to the subject matter hereof, and no other agreement, statement, or promise relating to the subject matter of this Agreement which is not contained herein shall be valid or binding.

➢ Awarded vendor agrees to allow NCPA to use their name and logo within website, marketing materials and advertisement. Any use of NCPA name and logo or any form of publicity regarding this contract by awarded vendor must have prior approval from NCPA.

➢ If any action at law or in equity is brought to enforce or interpret the provisions of this Agreement or to recover any administrative fee and accrued interest, the prevailing party shall be entitled to reasonable attorney’s fees and costs in addition to any other relief to which such party may be entitled.

➢ Neither this Agreement nor any rights or obligations hereunder shall be assignable by Vendor without prior written consent of NCPA. Any assignment without such consent will be void.

➢ This Agreement and NCPA’s rights and obligations hereunder may be assigned at NCPA’s sole discretion, to an existing or newly established legal entity that has the authority and capacity to perform NCPA’s obligations hereunder

➢ All written communications given hereunder shall be delivered to the addresses as set forth below.

National Cooperative Purchasing Alliance: Vendor: A&T Systems, Inc.

Name: Name: Fred S. Sanders

Title: Title: Vice President

Address: Address: 12200 Tech Rd, Suite 200, Silver Spring, MD 20904

Signature: Signature:

Date: Date: July 21, 2016

Matthew Mackel

Director, Business Development

PO Box 701273

Houston, TX. 77270

August 1, 2016




3 TAB 3 – VENDOR QUESTIONNAIRE




4 TAB 4 – VENDOR PROFILE Please provide the following information about your company:

4.1 COMPANY’S OFFICIAL REGISTERED NAME: A&T Systems, Inc. 4.2 BRIEF HISTORY OF YOUR COMPANY, INCLUDING THE YEAR IT WAS ESTABLISHED: In business since 1984, A&T has provided telecom and IT support to government agencies as a prime contractor. In the past 6 years, A&T has served 15+ Federal agencies. The company has won numerous industry and Government commendations, including General Services Administration (GSA) Region 6—No. 1 Small Business Contractor (revenue and performance).

A&T has a staff of 70 highly qualified professionals and maintains a 10,000 square foot secure facility at its headquarters in Silver Spring, MD (Figure 1). The company graduated from the Federal Government’s 8(a) program 15 years ago and has since maintained consistent financial stability, making it part of the elite group of 8(a) companies thriving more than 17 years after graduation.

In business for 32 years, A&T has successfully managed 6000 government Task Orders (T.O.s) worth $600M and served more than a dozen Federal Departments, scores of Federal agencies, numerous entities for the State of Maryland and District of Columbia, and many of Local governments. We completed the 8(a) program in 1999 and later successfully transitioned to supporting cloud clients by building on our program management strengths. A&T holds numerous certifications with AWS, including: Advanced Consulting Partner Government Partner able to provision/manage deployments in the GovCloud region Authorized Government Reseller Partner/Value Added Reseller Government Competency Partner Holder of an AWS Letter of Supply for all 35,000 AWS Government CLINs Our partnership with Amazon and extensive experience providing Cloud Solutions to Public Sector, Federal, State, and local governments position A&T to assist clients who need to select, acquire, establish, implement, and maintain secure, robust, scalable capabilities in the cloud with platforms for Development, Test, Staging, Production, or Training.

A&T is a responsive, capable small business that is currently providing numerous Federal and State agencies with a full lifecycle range of Dev/Ops cloud services—from initial assessment and discovery all the way through long-term MS and Technology Refresh activities.

Federal clients include Robins AFB; GSA; Department of Veterans Affairs; U.S. Army Reserve Command (USARC), U.S. Army sites such as West Point, Tooele Army Depot, and Umatilla; U.S. Postal Service, Air National Guard; and many others who have relied on A&T’s expertise in solving business issues and maintaining their critical communications infrastructure.

In handling Federal contracts, A&T has fulfilled sales and provided service in all 50 U.S. States.

A&T also holds State contracts with the Maryland Department of Information Technology (DoIT), the Maryland Department of the Environment and the District of Columbia.

Figure 1. A&T Corporate HQ; Silver Spring, MD Top-Secret Facility Clearance; 10,000 square feet




We hold a municipal, education contract with the City of Binghamton, New York Board of Education.

We have held contracts with educational institutions including the University of Maryland and the National Defense University

• IT and Cloud Services: Design, Procurement, Deployment, Professional Consulting Services, and MS—with U.S. Geological Survey, U.S. State Department, Lawrence Livermore National Laboratory, Navy Chief Information, District of Columbia Health Benefit Exchange, and the State of Maryland

• Managed Wireless and Wireline Telecom Services: Telecom expense management, mobile device management, Help Desk, invoicing and dispute resolution, Voice over Internet Protocol, video teleconferencing, PBX, and cabling—for Department of Veterans Affairs, USARC, NIH, and many other U.S. departments/agencies. We have been involved managing the national carriers (AT&T, Sprint, T-Mobile, and Verizon) as subcontractors.

We have designed/implemented cutting-edge solutions and then managed operations. On these contracts, we have recruited/managed large staffing operations (80+ employees) at 950+ sites with 100+ subcontractors in all 50 states on contracts worth $160M+, particularly for GSA Connections.

A&T offers the depth of experience needed to provide leadership so we can successfully perform the services outlined in the PWS.

A&T and its subcontractors exceed the security-related requirements set forth in the RFP. As an ISO-compliant company with a Top Secret Facility Clearance with Sensitive Compartmented Information capability, we take pride in our history of providing quality, timely, and cost-effective telecom services to our customers. A&T has received the GSA Industry Partner Excellence Award for 3 consecutive years, the Maryland Governor’s Salute to Excellence Award, and the Malcolm Baldridge Award (jointly with IBM) for Partner in Pursuit of Quality.

Award-Winning Support for the District of Columbia Health Benefit Exchange Cloud Services Contract (DCHBX) At its 2016 Public Sector Summit, AWS awarded a City on a Cloud “Best Practices” citation to the District of Columbia Health Benefit Exchange Authority for innovations on its Cloud Services project. As a prime contractor on this project, A&T provided AWS Infrastructure as a Service (IaaS), PaaS, security Authorization to Operate (ATO), and customer service that contributed to the project’s success so DC HBX officials invited A&T to join them as they received the AWS award (Figure 2). DCHBX officials note that when they implemented their healthcare website that involves customer service using AWS products, the launch was flawless. They were ecstatic with the product and A&T’s service.

4.3 COMPANY’S DUN & BRADSTREET (D&B) NUMBER 15-387-0530

Figure 2. A&T Executives with DC HBX Project Team A&T CEO Ashok Thareja, far left; CTO Mureed Nazir, 2nd

from right; VP Fred Sanders, far right

A&T is currently the only AWS authorized partner qualified as a small business under GSA Schedule 70—SIN 132-40.




4.4 COMPANY’S ORGANIZATIONAL CHART OF INDIVIDUALS THAT WOULD BE INVOLVED IN THE CONTRACT Figure 3. A&T’s Organizational Structure

This organizational chart indicates that the A&T program will include three spheres of influence (left to right): NCPA (light orange background color), A&T support (light blue), and AWS resources and support (light green).

The figure depicts circumstances when an NCPA customer selects A&T as a T.O. award winner and begins negotiating an agreement. As the dotted lines between the orange NCPA sphere and the blue A&T sphere indicate, the interaction focuses on the Contract Managers and a Project Manager.

During the marketing phase, A&T will have interacted with the AWS Sales and Marketing team resources for service detail and knowledge of the NCPA customer’s needs and requirements.

Depending on individual T.O. details, either the Contract Manager or a Project Manager (PjM) will have worked with each NCPA customer to win a T.O. award and in the process determine what services a NCPA customer needs.

The Contract Manager for legal will then negotiate the customer agreement with input from AWS as needed. The agreement will determine whether the NCPA customer wants just AWS products and core services or whether it wishes to procure added-value services described in detail in Proposal Section 8, where we discuss what A&T offers in terms of governance, Professional Services (PS), and MS.




The organizational chart in Figure 3 shows an NCPA client procuring optional PS and MS from A&T. Should an NCPA customer the T.O. level wish to have direct contact with AWS for technical support, we will conduct a discovery session to determine division of responsibilities and produce an organizational chart that reflects that adjustment.

After the customer agreement is complete, A&T’s Manager of Technical Services arranges to begin delivering the services that the agreement stipulates. If it is strictly AWS infrastructure products, the relationship then focuses on A&T’s interaction with AWS to initiate those services.

If the NCPA customer has elected to receive PS or MS, the respective A&T and AWS Subject Matter Experts (SMEs) begin a discovery process with the NCPA customer to ascertain what precise service inventory the NCPA customer needs. As the figure indicates, A&T will work directly with AWS (based on the needs that the PE specifies). Figure 4 below provides detail about the A&T Network Operations Control Center (NOCC) and specifies whom the NCPA customer will contact with MS needs. Figure 5 also indicates division of responsibility between the Contract Managers and the PjMs for interaction with NCPA Contracting Officers (COs) and Contracting Officer’s Representatives (CORs).

Figure 3 indicates that A&T has a relatively flat organization that provides direct Single Point of Contact access for NCPA customers with key A&T individuals so we can provide quick, response support when NCPA indicates a need or an issue. Account Managers and A&T’s Certified Technical Professionals are at the NCPA customer’s disposal to learn what NCPA customers need and to receive feedback on how A&T will deliver the solution. The chart also illustrates that A&T has established and will maintain key relationships with AWS on three levels: executive, marketing/sales, and technical. We have a strong relationship with the AWS team from the top to the most detailed technical resources.

Senior Executive Level: Our Chief Executive Officer (CEO), Dr. Ashok Thareja, meets annually in a private session with the AWS VP for the World Wide Public Sector (Teresa Carlson) to discuss strategy

Sales/Marketing: Contract Manager Fred Sanders and key PjMs such as Alex Nalyvayko interact multiple times each week with the AWS Principal Sales Executive, Rebecca Wetherly, and her team of sales/marketing representatives about all types of public-sector opportunities.

We have also worked closely with Jane Lacy in her role as head of the AWS State and Local team, particularly with respect to the NCPA cloud opportunity.

PS/MS: Our Contract Manager, PjMs, and Manager of Technical Services interact multiple times per week with AWS PS and Business Support SMEs to ensure that we are delivering the latest AWS offerings and know how to render them in the most efficient manner possible.

Finally, A&T corporate figures and the Quality Assurance (QA) Manager ensure that from the outset we learn what each customer needs, set up effective QA measures, and continuously improve processes.

Figure 4. A&T NOCC Structure




Figure 5 summarizes duties for A&T and AWS roles cited above in our NCPA organization. Figure 5. Roles and Responsibilities in A&T’s NCPA Organization

Role Responsibilities Contract Manager—Program • Handles strategic and program-level relationships with NCPA master contract CO and NCPA customer COs that

includes developing marketing leads for PjMs to pursue • Maintains relationship with AWS Government-Sector Executives (e.g., Rebecca Wetherly and AWS State/Local

Sales Executive Jane Lacy) to learn about NCPA opportunities and maintain outstanding AWS support (Detail in Section 7.1.3 below)

Co-Contract Manager—Legal • Negotiates and maintains master agreement and NCPA customer agreements • Advises on legal matters in execution of T.O.s

AWS Marketing Support Team Supports A&T via: • Its Amazon Partner Network • Library of white papers and technical advisories • Access to AWS partner SMEs • Availability of its Business Development and Sales Team that feeds A&T leads on NCPA opportunities • Support for its AWS pilot Marketplace Incentive Program

PjMs • Pursue marketing leads fed to them by the A&T Co-Manager NCPA Program—with NCPA customers • Coordinate with NCPA CORs on shaping and delivering products/services for new and existing agreements:

includes technical delivery and program support for invoicing and reporting • Provide Usage Reports to NCPA and NCPA customer s • Prepare and implement Project Management Plan, Quality Management Plan, and Quality Assurance

Surveillance Plan (QASP) • Prepare Service Level Management, Service Continuity, Information Security, and Service Operation Plans • Monitor/ control overall contract performance, including schedule and budget • Negotiate/submit proposed purchase order cost estimates and schedules to Contract Manager • Implement Quality Audit with NCPA, A&T Contract Manager, and A&T QA Manager/Administrator • Implement performance improvements to management and quality systems and processes • Manage customer support operations • Engage in escalated customer support/ issues when appropriate

Manager of Technical Services • Advises PjMs on strategic technical issues, particularly architecture, tool capabilities, security, and MS • Approves architecture solutions

PS SMEs Provide PS that precede MS: assess tool migration-readiness; develop solution architecture; plan migration; assist with migration and deployment of the solution

NOCC Staff Provide MS: e.g., IT support, monitoring, and management of security, logs, users, and applications AWS PS SMEs Assist A&T PS SMEs with advanced PS issues AWS Business Support Assist A&T NOCC staff with advanced MS issues CEO Maintain strategic relationship with AWS Government-Sector Executives such as VP Teresa Carlson AWS Executive Management Ensure that A&T has the strongest possible support for its AWS cloud solutions Quality Manager • Set A&T NCPA QA policies and conduct both scheduled and unscheduled inspections

• Reports directly to the A&T CEO to maintain independence

4.5 CORPORATE OFFICE LOCATION A&T’s corporate office is located at 12200 Tech Road, Suite 200, Silver Spring, MD 20904.

4.5.1 LIST NUMBER OF SALES AND SERVICES OFFICES FOR STATES BEING BID IN SOLICITATION A&T is bidding one office: 12200 Tech Road, Suite 200, Silver Spring, MD 20904

4.5.2 LIST NAMES OF KEY CONTACTS AT EACH WITH TITLE, ADDRESS, PHONE AND E-MAIL ADDRESS The key contract at the Silver Spring office is Fred S. Sanders, Vice President; same address as in 4.5.2; 301-675-5555; [email protected]




4.6 DEFINE YOUR STANDARD TERMS OF PAYMENT Standard terms: Net 15 in accordance with (IAWS) the Small Business FAR that states: Under the Prompt Payment Act and OMB Memorandums M-11-32 and M-13-15 the Government shall provide "Accelerating Payments to Small Businesses for Goods and Services”.

Memorandum M-11-32 requires agencies to make their payments to small business prime contractors as soon as practicable to the full extent permitted by law, with the goal of making payments within 15 days of receipt of proper invoices. No other prompt payment discounts apply.

4.7 WHO IS YOUR COMPETITION IN THE MARKETPLACE? Aquilent, DLT, Day1 Solutions, InfoReliance, JHC Technology, and Rean Cloud

4.9 WHAT DIFFERENTIATES YOUR COMPANY FROM COMPETITORS? 4.9.1 A&T DIFFERENTIATORS Here are 14 ways in which A&T is different from its competitors. 1. Consulting on compliance issues: Examples include establishing federated services for Active

Directory (AD); selling consolidated approach to cloud, and defining Federal Information Security Management Act (FISMA) compliance requirements

2. Right resources/structure: Help identify, recruit, and train the right NCPA cloud staff so they become independent; consult on team structure for reporting and optimal use of resources with other duties; create descriptions of skill/role needs for cloud functions

3. Analyze existing tools and qualify them for use in cloud: After analyzing and qualifying existing tools, we then integrate the existing tools where feasible to minimize change and cost increments. We also leverage existing assets as much as possible.

4. Governance: Help create customized policies/procedures (at U.S. Geological Survey, USGS, & State Dept.); establish governance structures and foster connectivity among groups (technical & organizational); make the team independent; and minimize change in existing processes while addressing new issues that the cloud raises

5. Cloud NOCC: Offer our own 24/7/365 secure NOCC operation at HQ in Silver Spring, MD 6. Security credentials: Offer outstanding security experience, resources, and credentials.

Handled high profile/impact security for federal agencies and the State of Maryland, where we have secured Maryland.gov site for 9 years without a single security breach

Hold an existing ATO for FISMA Moderate Working on FISMA High in cooperation with the U.S. Department of Veterans Affairs (VA) Have numerous staff who are cleared at secret and top-secret levels




7. Managed services: As noted in Proposal Section 8.1, Cloud-3, we offer a wide array of consulting options

8. Billing services assistance: Use CloudCheckr and individual follow up on complex AWS bills to simplify invoice analysis to identify issues that require attention and to analyze trends

9. Outstanding relationship with AWS: Have kept pace with AWS as its government-sector cloud operation has expanded rapidly and established an outstanding relationship with senior AWS officials. As an example, when AWS recently decided to formalize operational reviews about how they support partners responding to solicitations such as NCPA’s, they contacted A&T before any other government-sector partners to seek feedback and characterized the exchange as extremely beneficial because of A&T’s responsive and insightful commentary.

10. Consolidated billing: A&T will provide consolidated invoices for the AWS and other services NCPA will procure. As an authorized AWS Government Reseller and AWS Advanced Consulting Partner, A&T currently manages multiple customers using a central consolidated account, “Payer Account” that receives AWS costs incurred by all “Linked Accounts”. A&T will use the same methodology for NCPA and will create a dedicated “Payer Account” and set up a payment method.

11. Reporting: Using AWS detailed billing, detailed reporting, trusted advisor and CloudWatch tools and services, we will present NCPA with blended, unblended or discount and list pricing, from billing statements that we will create for daily, weekly, or monthly report that will be customized to NCPA requirements. As part of the monthly billing we will also provide analysis of usage trends, identify growth patterns, options to optimize costs as well as opportunities to consolidate AWS Services and possibilities of benefiting from reserved instance pricings. The Single Month Summary report will provide a monthly overview of AWS costs that will allow NCPA to get a feel for how costs fluctuate during the month. A&T will also submit an electronic report that NCPA can use to filter the report to generate custom comparative analysis and build usage trends over historic spending. Optionally A&T can provide Cost management using CloudCheckr tool at additional discounted cost

12. Technical assistance: As an AWS Advanced Consulting Partner, we work very closely with AWS support teams and have a breath of AWS engineers in house. In addition to the AWS Business/Enterprise support that NCPA will purchase, A&T will provide additional Technical escalation services to NCPA for any AWS related issues at no additional cost to NCPA. Some of the services that NCPA can benefit from are for AWS feature adds requests, guidance on using AWS Marketplace; review of architecture against AWS best practices, AWS Services or AWS Marketplace tool recommendations, guidance and recommendations on security compliance, scalability and elasticity recommendations and design review services and Disaster Recovery (DR) services implementation recommendations and design reviews at no additional cost to NCPA.

13. Cost allocation services: A&T will work with NCPA to create cost allocation filters and groupings using AWS cost allocation tags to categorize and track AWS costs. We will help NCPA to apply tags to all AWS resources (such as Amazon Elastic Compute Cloud (EC2) instances or Amazon Simple Storage Service, S3, buckets), to generate a cost allocation report that will be included in our monthly invoicing as a comma-separated value (CSV file). This report will have all NCPA usage and costs aggregated by pre-defined tags. You can apply tags that represent business categories (such as cost centers, application names, or owners) to organize your costs across multiple services. The cost allocation report includes all of your AWS costs for each billing period. The report includes both tagged and untagged resources, so you can clearly organize the charges for resources. For example, if you tag resources with an application name, you can track the total cost of a single application that runs on those resources.

14. Architecture design review: A&T solution architects will offer NCPA architectural review and Governance guidance on the proposed applications and infrastructure to support the workload




4.9.2 AWS DIFFERENTIATORS AWS readily distinguishes itself from other vendors in the traditional cloud landscape because it is:

Flexible: AWS enables organizations to use the programming models, operating systems, databases, and architectures with which they are already familiar. In addition, this flexibility helps organizations mix and match architectures in order to serve their diverse business needs.

Cost effective: With AWS, organizations pay only for what they use, without up-front costs or long-term commitments.

Scalable and elastic: Organizations can quickly add and subtract AWS resources to and from their applications in order to meet customer demand and manage costs.

Innovative: AWS launched 722 new services and features in 2015, and as of June 1, we have released 368 new features and services in 2016. Our pace of innovation is funded and sustained through our economies of scale and commitment to delivering the products and services that matter most to our customers. Our continual innovation ensures that customers maintain state-of-the-art IT infrastructure without having to make recapitalization investments.

Secure: In order to provide end-to-end security and end-to-end privacy, AWS builds services IAW security best practices, provides the appropriate security features in those services, and documents how to use those features.

Experienced: When using AWS, organizations can leverage AWS’s many years of experience delivering large-scale, global infrastructure in a reliable, secure fashion.

4.9.2.1 BUSINESS BENEFITS OF AWS CLOUD SERVICES There are additional business benefits that AWS Cloud services can help customers realize. A few of these are listed here:

Almost Zero Upfront Infrastructure Investment: If a customer wants to build a large-scale system, it may cost a fortune to invest in real estate, physical security, hardware (racks, servers, routers, backup power supplies), hardware management (power management, cooling), and operations personnel. Because of the high upfront costs, the project would typically require several rounds of management approvals before the project could even get started. With AWS’s utility-style cloud computing, there is no fixed cost or startup cost.

Just-In-Time Infrastructure: In the past, if an application became popular and a business’ systems or infrastructure did not scale, it became a victim of its own success. Conversely, if a developer invested heavily and did not get popular, it became a victim of failure. By deploying applications in the AWS Cloud with just-in-time self-provisioning, customers do not have to worry about pre-procuring capacity for large-scale systems. AWS’s cloud increases agility, lowers risk, and lowers operational cost, because customers can scale cloud resources as they grow and only pay for what they use.

More Efficient Resource Utilization: System administrators usually worry about procuring hardware (when they run out of capacity) and higher infrastructure utilization (when they have excess and idle capacity). With AWS, they can manage resources more effectively and efficiently by having the applications request and relinquish resources on-demand.

Usage-Based Costing: With utility-style pricing, AWS customers are billed only for the infrastructure that you use. AWS customers do not pay for allocated but unused infrastructure. This adds a new dimension to cost savings, allowing customers to see immediate cost savings when they deploy an optimization patch to update their cloud app. For example, if a caching layer can reduce data requests by 70%, the savings begin to accrue immediately. Moreover, if customers build platforms on the cloud, they can pass on the same flexible, variable usage-based cost structure to their own customers.

Reduced Time to Market: Parallelization is the one of the great ways to speed up processing. If one compute-intensive or data-intensive job that can be run in parallel takes 500 hours to process on one




machine, with cloud architectures, it would be possible to spawn and launch 500 instances and process the same job in 1 hour. Having available an elastic infrastructure provides the application with the ability to exploit parallelization in a cost-effective manner reducing time to market.

4.9.2.2 TECHNICAL BENEFITS OF AWS CLOUD SERVICES Some of the key technical benefits of the AWS Cloud are: Automation – “Scriptable Infrastructure”: AWS customers can create repeatable build and deployment

systems by leveraging programmable (Application Programming Interface [API]-driven) infrastructure. Auto Scaling: AWS customers can scale their applications up and down to match unexpected demand

without any human intervention. Auto Scaling encourages automation and drives more efficiency. Proactive Scaling: Customers can scale applications up and down to meet anticipated demand with

proper planning of traffic patterns so that costs remain low while scaling. More Efficient Development Lifecycle: Production systems may be easily cloned for use as development

and test environments. Staging environments may be easily promoted to production. Improved Testability: Never run out of hardware for testing. Inject and automate testing at every stage

during the development process. AWS customers can spin up an “instant test lab” with pre-configured environments only for the duration of the testing phase.

DR and Business Continuity: The cloud provides a lower cost option for maintaining a fleet of disaster recovery servers and data storage. With the cloud, customers can take advantage of geo-distribution and replicate the environment in other locations within minutes.

Overflow Traffic to the Cloud: With a few clicks and effective load balancing tactics, customers can create a complete overflow-proof application by routing excess traffic to the cloud.

4.9.2.3 AWS’S DIFFERENCES FROM MICROSOFT AZURE Figure 6 provides a detailed comparison of AWS versus Microsoft Azure. See proposal pages 24-27 for specifications on storage.




Figure 6. Comparison of AWS and Microsoft Azure

AWS Competitive Intelligence Matrix April 06, 2016

New AWS Microsoft Azure

*

Global Infrastructure

North America (number of Availability Zones for AWS) 11 6

Dedicated Availability Zones for US Government 2 2

Europe/Middle East/Africa (number of Availability Zones for AWS) 5 2

Asia Pacific (number of Availability Zones for AWS) 12 11

South America (number of Availability Zones for AWS) 3 1

Number of edge locations for content delivery web service 54 31

Compute

Virtual Servers in the Cloud - Instances Virtual Servers in the cloud ✓EC2 ✓Virtual Machines

General Purpose Instances ✓M3, M4, up to 40 vCPU ✓up to 16 cores

General Purpose - Burstable Performance Instances ✓T2 instances X

Compute Optimized Instances ✓C3, C4 up to 36 vCPU ✓up to 16 cores

Memory Optimized Instances ✓R3, up to 244 GiB ✓up to 448 GB

Storage Optimized - High I/O Instances ✓I2 instances ✓

Storage Optimized Instances - Dense-storage ✓D2 instances X

GPU Instances ✓G2 instances X Announced, NA

High Memory instances (>1 TB of memory) X, X1, announced, NA X

Instance for < $5 per month ✓t2.nano X

Dedicated Instances (run on single-tenant hardware dedicated to a single

✓ X

Bare Metal servers X X

Custom Machine type (custom settings for vCPU and RAM) X X

Virtual Servers in the Cloud - capabilities Local Disk/Instance Store ✓ ✓

Provision multiple concurrent instances ✓ ✓ Scale Sets

*

Instance affinity - logical grouping of instances within a single data center ✓Placement Groups ✓

Instance anti-affinity - logical grouping of instances in different data centers In a

✓Availability Zone X

Auto Scaling support ✓ ✓ Scale Sets

Protect instances from termination by auto scaling ✓ X

Marketplace offering ✓>2300 products ✓<900 products

Bring your own image/Instance Import ✓ ✓VHD only

Export Instance Image ✓prev. imported inst. ✓VHD only

Instance maintenance mitigation ✓Live update ✓Memory preserving

Instance failure recovery ✓EC2 Auto Recovery ✓

Instance restart flexibility ✓Scheduled Events X

OS Support - Linux - RHEL ✓ ✓

OS Support - Linux - Ubuntu ✓ ✓

OS Support - Linux - Fedora ✓ X

OS Support - Linux - SUSE ✓ ✓

OS Support - Linux - CentOS ✓ ✓




AWS Competitive Intelligence Matrix

April 06, 2016


*

OS Support - Linux - CoreOS ✓ ✓

OS Support - Linux - openSUSE ✓ ✓

OS Support - Linux - Oracle Linux ✓ ✓

OS Support - Linux - Debian ✓ ✓

Provider offered Linux distribution ✓Amazon Linux AMI X

Sub-minute provisioning time (Linux instances) ✓<1 minute X > 1 minute

OS Support - Windows ✓ ✓

License Portability and Support - Microsoft Apps (SharePoint, SQL) ✓ ✓

License Portability and Support - Microsoft Apps (Windows Server) ✓EC2 Dedicated Hosts ✓

License Portability and Support - Oracle (DB 11g, Oracle Apps, Fusion) ✓ ✓

Support for Self-managed Oracle RAC on Amazon EC2 ✓ X

License Portability and Support - SAP (SAP Business Suite, HANA, Business Objects) ✓ ✓except HANA Ent.

License Portability and Support - IBM (DB2, Websphere) ✓ ✓

Pay as you go pricing (hourly) ✓ ✓

Reserve capacity for 1 year, in exchange for a significantly discounted hr. rate ✓Reserved instances ✓

Reserve capacity for 3 years, in exchange for a significantly discounted hr. rate ✓Reserved instances X

Spot market pricing (bid on unused capacity for even lower hourly rates) ✓Spot instances X

Ability to reserve capacity on a recurring basis with a daily, weekly, or monthly schedule ✓Scheduled RI X

Launch and manage an entire fleet of Spot Instances with one request ✓Spot Fleet X

Pay as you go pricing (sub-hourly) X ✓No min charge

Usage based discount for compute X X

Volume discounts ✓ ✓

Run and Manage Docker Containers

Highly scalable, high performance container management service ✓EC2 Container Service X Azure Container Service

* Support for Docker Containers ✓ ✓

* Scheduling across multiple zones ✓ X

* High Availability clustering ✓ X

* Support for multiple schedulers ✓ ✓Swarm, Compose * Integration with Docker services - Compose ✓ ✓

* Integration with Docker services - Swarm X ✓

* Deployment in multiple regions ✓NA, Europe, Asia ✓All regions * Support for CLI ✓ ✓

* Support for fully managed Registry ✓ X DTR

* Multi-Environment (Hosted, On-Prem, Local-Machine) X ✓

* Support for Autoscaling ✓ X

* Service discovery X ✓Mesos

* Support for Load balancing ✓ X

* IP per task/Pod X X

* Identity and access management ✓ X

* Secret Management X X

* Stateful Applications X X





April 06, 2016


* Time-triggered services X ✓ Mesos

* Batch job support ✓ ✓Chronos

* Long running apps with failure recovery ✓ ✓Marathon or Mesos

* Multi-dimensional deployments (e.g. canary, blue-green, partitioned) X ✓Marathon

* Rolling updates ✓ ✓Marathon

* Graphical view of cluster state X X

* Metrics - Instance and container level metrics ✓ X

* Health Checks ✓ELB ✓Marathon

* Logging ✓CloudWatch X

* Events X ✓Marathon

*

Run and Manage Web Apps

Run and Manage Web Apps ✓Elastic Beanstalk ✓Cloud Services, Web App

Supported Platform - Java ✓ ✓

Supported Platform - Python ✓ ✓

Supported Platform - PHP ✓ ✓

Supported Platform - Google Go ✓ ✓

Supported Platform - .NET ✓ ✓

Supported Platform - Ruby ✓ ✓

Supported Platform - Node.js ✓ ✓

Deployment Mechanism - Git, Visual Studio, Zip ✓ ✓

Supported OS - Windows ✓ ✓

Supported OS - Linux ✓ X

Supported OS - any OS supported in Docker ✓ X

Maximum number of instances >200 50

Maximum disk size 16 TB 2 TB

SSL connections ✓ ✓

Application source versioning ✓Built-in ✓External

Database options ✓RDS ✓SQL Server, ClearDB

Traffic Routing ✓Rt53 weights ✓Traffic Manager

Auto scaling ✓ ✓

Independently scale web and worker roles ✓ ✓

Security ✓IAM, ACLs ✓Azure AD

Automatic OS updates X Rolling updates ✓

Ability to swap virtual IP between staging and production environments ✓ ✓

Integration with caching solution ✓ElastiCache ✓In-role cache

Enhanced application health monitoring ✓ ✓Application Insights

Run Code in Response to Events

Event-driven computing that runs code in response to events ✓AWS Lambda ✓Azure Functions * Languages supported - Node.js ✓ ✓

* Languages supported - Java ✓ X





April 06, 2016


* Languages supported - C# X ✓

* Languages supported - F# X ✓

* Languages supported - Python ✓ ✓

* Languages supported - PHP X ✓

* Languages supported - Bash X ✓

* Languages supported - Batch X ✓

* Languages supported - Swift X X

* Languages supported - PowerShell X ✓

* Max function limit Unlimited Not disclosed

* Max execution time 5 minutes Not disclosed

* Authoring tools ✓multiple ✓multiple * Code dependency management ✓ZIP (w/ dependencies) ✓ZIP (w/ dependencies) * Deployment tools ✓console, S3, CodeP ✓GitHub

* Debugging tools ✓CloudWatch ✓

* Scaling ✓Automatic ✓Automatic * Scale limits ✓no theoretical limits 4 concurrent requests

* Pricing model Per request + per GB-s Per request + per GB-s * Function size 128MB-1536GB 128MB-1536GB * HTTP Invoke support ✓API Gateway ✓

* Event integration ✓ ✓

High Performance computing

High performance computing in the cloud ✓ ✓

Compute Optimized Instances ✓C3, C4 up to 36 vCPU ✓up to 16 vCPU

GPU Instances ✓G2 instances X N-Series, announced, NA

Instance affinity - logical grouping of instances within a single data center ✓Placement Groups ✓

Spot market pricing (bid on unused capacity for even lower hourly rates) ✓Spot instances X

Enhanced networking support ✓SR-IOV ✓2 instances, A8, A9 only

low latency, full bisection, 10 Gbps bandwidth between instances ✓ ✓

Infiniband or RDMA support X ✓

Cloud-scale job scheduling and compute management service X ✓Azure Batch

Extensive partner ecosystem ✓ ✓

Managed service for developers to build and operate microservice-based applications ✓ ✓Azure Service Fabric

Managed service to quickly create Dev/Test environments using reusable templates X ✓Azure Dev/Test Labs

Networking

Isolated Cloud Resources Virtual network in the cloud ✓VPC ✓Virtual Network

Multiple IP addresses/instance ✓ X Announced, NA

Ability to move network interfaces and IPs between instances ✓ENIs in VPC X

Enhanced networking support ✓SR-IOV ✓2 instances, A8, A9 only





April 06, 2016


Network traffic logging - Log traffic flows at network interfaces ✓VPC Flow Logs X

Virtual Network Peering ✓ X

Managed NAT Gateway ✓ X

Subnet level filtering (Network ACLs) ✓ ✓

Auto-assigned public (ephemeral) IP addresses ✓ ✓

IP Protocol support ✓all ✓TCP, UDP

Multiple network interface/instance ✓ ✓

Use any network CIDR, including RFC 1918 ✓ ✓

IPv6 support X ELB supports IPV6 X

Static public IP addresses ✓Elastic IP ✓

Auto-created default virtual private network ✓ ✓

Subnets within private network ✓ ✓

Ingress filtering ✓ ✓

Egress filtering ✓ ✓

Disable source/destination checks on interfaces ✓ X

Configure proxy server (NAT instance) at network level ✓ X

Global network spanning multiple regions X ✓

Site-to-site managed VPN service ✓ ✓

Allows users to run VPN server at the application layer ✓ X

Multiple VPN Connections per Virtual Network ✓ ✓

Support for AES256 encryption option for VPN connectivity ✓ ✓

BGP for high availability and reliable failover ✓ X

Private connection to customer data centers ✓Direct Connect ✓ExpressRoute

Associating firewalls to instances by tag name X X

Point-to-site managed VPN service X ✓

Promote ephemeral IPs to static IPs X X

Max Network Size /16 /8

Elastic Load Balancing

Managed Layer 4 load balancer for apps that rely on TCP protocol ✓Elastic Load Balancing ✓Azure Load Balancer

Managed Layer 7 load balancer for apps that rely on HTTP/HTTPS ✓ ✓App Gateway

DNS based global load balancing ✓Route 53 ✓Traffic Manager

Front-end Load Balancer ✓ ✓

Back-end Load Balancer ✓ ✓

Support for SSL offloading ✓ ✓

Support for UDP protocol X ✓

Support for IPv6 ✓ X

Sticky sessions ✓Cookies ✓2-tuple, 3-tuple

Operational Monitoring ✓CloudWatch ✓

Content based routing X X

Logging ✓Access Logs X





April 06, 2016


Scalable DNS and Domain Name Registration Highly available and scalable cloud DNS web service ✓Route 53 ✓Azure DNS, preview

Latency based Routing - route end users to the region with lowest possible latency ✓ ✓Azure Traffic Mgr.

Geo DNS - route end users to a particular endpoint based on geographic location ✓ X DNS Failover - automatically route website visitors to an alternate location to avoid outage ✓ ✓ Azure Traffic Mgr. Visual editor for traffic management ✓Traffic Flow X

Management Console access ✓ X PowerShell only

Domain Registration ✓ X

Health checks - monitor the health and performance of application ✓ ✓Azure Traffic Mgr. Integration with Load Balancer ✓ X

Zone Apex support for load balancer and CDN ✓ X

Storage and Content Delivery

Elastic Block Storage Persistent block level storage volumes for compute instances in the cloud ✓EBS ✓Page Blobs & Disks

Provisioned I/O support ✓EBS PIOPS X

Encryption (using provider managed keys) - data stored at rest, disk I/O, & snapshots ✓ ✓

Support for boot volume encryption ✓ ✓

Encryption (using customer managed keys) - data stored at rest, disk I/O, & snapshots X ✓BYOK

SSD backed storage media ✓ ✓Azure Premium

Durable snapshots ✓ ✓

Ability to easily share snapshots globally ✓ ✓

Attach more than one compute instance to a single volume in a RW mode ✓EFS, preview ✓Azure Files

Availability in multiple regions ✓all ✓6 reg. for Azure Premium

Max volume size 16 TB 1 TB

Max number of volumes attached to one instance 42+ 16

Max storage attached to one instance 672 TiB 16 TB

Designed to durability AFR 0.1% – 0.5% Azure LRS

Max IOPS/volume 20,000 5,000

Max Burst IOPS/volume 3,000 (volume < 1 TiB) Not disclosed

Max IOPS/instance 48,000 80,000

Max Throughput/volume 320 Mbps 200 Mbps

Max throughput/instance 800 Mbps 1600 Mbps

IOPS Consistency 99% (GP2), 99.9% (PIOPS) Not disclosed

Scalable Storage in the Cloud

Secure, durable, highly-scalable object storage ✓S3 ✓Block Blobs

Storage for infrequently accessed data ✓S3 Standard-IA X

Storage for infrequently accessed data without limiting retrieval throughput ✓S3 Standard-IA X

Server-side Encryption ✓SSE-S3 ✓

Server-side Encryption with Customer-Provided Keys ✓SSE-C X

Server-side Encryption with a Key Management Service ✓SSE-KMS X





April 06, 2016


Client-side Encryption integrated with a key management service hosted by the provider ✓KMS ✓Key Vault

Client-side Encryption with a Client-side Master Key ✓ ✓Client-side Encryption

Object lifecycle management ✓ X

Data Locality ✓ ✓

Object change notification ✓ X

Cross-region replication ✓ ✓

High-scale static web site hosting ✓ ✓

Object Versioning ✓ ✓snapshot only

Flexible access-control mechanisms ✓ X

Time-limited access to objects ✓ X

Audit logs ✓ ✓

Multi-factor delete ✓ X

Define policies to delete old data ✓ X

Define policies to move archival storage ✓ X

Support for bucket/container policies ✓ ✓

Lower Durability offering ✓ ✓

Reduced availability offering X X

Parallel, multipart upload ✓ ✓

CDN option for users ✓ ✓

Strong Consistency ✓(ex. overwrite PUTS/DELETES)

✓

Storage gateway appliance for automated enterprise backups ✓ ✓

Accept large data loads through shipped physical media ✓ ✓

Deliver large data exports through shipped physical media ✓ ✓

Archive Storage in the Cloud

Low cost archival storage with policy support ✓Glacier X

Durability 11 9s X

Fault Tolerance Data stored in 3 AZs X

Immutability ✓ X

Storage class transition ✓S3 Life cycle X

API ✓REST/Python/Java/.NET X

Backup Software support ✓CommVault, NetBackup X

Audit logs ✓CloudTrail X

Encryption ✓ X

Large Scale Data Transport

Petabyte-scale data transport solution to transfer large amounts of data ✓Import/Exp Snowball ✓Azure Import/Export Fast data transfer ✓ ✓

Support for encryption ✓ ✓

Tamper Resistant ✓ ✓

Support for end-to-end tracking ✓ ✓





April 06, 2016


Secure erasing ✓ X

Fully Managed File System

Managed file storage service ✓EFS, preview ✓Azure Files

SSD backed storage media ✓ X

Grow file systems to petabyte scale ✓ X limited to 5 TB shares

Sharable across thousands of instances ✓ X

Fully elastic capacity (no need to provision) ✓ ✓

Max Throughput, (MB/s)/TB 100 (burst) / 50 MBps 60 Mbps

Data spread across multiple AZs ✓ X

Highly durable ✓ ✓(GRS option available)

Highly available ✓ ✓

Supports NFSv4 protocol ✓ X

Supports SMB protocol X ✓SMB 3.0

Read-after-write consistency ✓ ✓

Simple Pricing (based on the GB-month) ✓ ✓

Global Content Delivery Network

Content delivery web service ✓CloudFront ✓Azure CDN

Number of edge locations for content delivery web service 54 31

Access content from external origin ✓ ✓

Performance optimization for the edge location ✓ X Announced, but NA

Custom SSL - bring your own certificate ✓ X

Token Authentication / Private URLs ✓Signed URL, HTTP Cookie X Announced, but NA

Comprehensive Geo Restriction ✓ X Announced, but NA

Private Backbone Network X ✓

Global Load Balancing & Failover across Multiple CDN's ✓Route 53 ✓Traffic Manager

Latency and Weighted Round Robin routing ✓Route 53 ✓Traffic Manager

Remove copies of a file from all edge locations cache before it expires ✓ X Announced, but NA

Invalidate multiple objects using the * wildcard character ✓ X

High-Def. & Std-Def Encoding Formats ✓AET or EC2 ✓Azure Media Services

Adobe Flash Media (RTMP, RTMPe) ✓AET or EC2 ✓

Microsoft Windows Media ✓AET or EC2 ✓

Multi-Bitrate Encoding (Smooth HLS, HDS, MPEG-DASH) ✓AET or EC2 ✓Media Services Encoding

Media Player X ✓Media Player

Encoding Source across Multiple CDN's ✓S3, EC2, partners X

Automated Hourly Log Retrieval & Filtering Application ✓ ✓

Basic Portal Reporting ✓ ✓

Detailed Analytics ✓ X

Portal Geographic Traffic Reporting ✓ X

Integrate On-Premises IT Environments with Cloud Storage





April 06, 2016


Managed service to connect on-premises IT environment with cloud storage ✓AWS Storage Gateway ✓StorSimple

Capacity scale GW-Cached: 1 PB > 500 TB

iSCSI access ✓ ✓

Tape access ✓ X

Local snapshots X ✓

Cloud snapshots ✓ ✓

Increment Snapshots with storage optimization ✓ ✓

WAN optimized Restore X ✓

Primary Storage Deduplication X ✓

Encryption ✓ ✓

Support for Multipath IO (MPIO) X ✓

Support for VAAI X ✓

Databases

Managed relational database service Managed relational database service ✓RDS ✓SQL DB

Support for MySQL ✓ X

Support for Amazon Aurora for RDS ✓Aurora X

Support for Oracle ✓ X

Support for Microsoft SQL Server ✓ ✓

Support for PostgreSQL ✓ X

Support for MariaDB ✓ X

Low latency, synchronous replication across multiple data centers in a region ✓Multi-AZ X

Read Replica support ✓ X

Maximum vCPU cores per database instance 244 GB Not disclosed

Maximum RAM per database instance 40 Not disclosed

Maximum storage per database instance 64 TB (4TB SQL Server) 1 TB

Manual Failover ✓ X

Provisioned IO support ✓ X

Bring your own SQL, Oracle licenses ✓ X

Cross region Snapshots ✓ X

Cross region Read Replica ✓except SQL Server ✓

High Availability ✓ ✓

Point in time restore ✓ ✓

User snapshots and restore ✓up to 35 days ✓up to 35 days

Modifiable DB parameters ✓ ✓

Monitoring ✓ ✓

Auto scaling storage X X

Data Migration tool to import data from various databases ✓Database Migration ✓

Data Migration tool to import data - heterogeneous migrations ✓Schema Conversion X

Encryption at rest ✓ ✓TDE

Encryption at rest, in flight and while in use X X Announced, NA





April 06, 2016


Authentication with Windows Active Directory X ✓Azure AD Auth

Row Level Security X ✓

Detect anomalous database activities like SQL injection attacks X ✓Threat Detection

Predictable and Scalable NoSQL Data Store

Managed scalable, fast and flexible NoSQL database service ✓DynamoDB ✓DocumentDB

Startup costs $0/month $25/mo (S1 collection min)

Performance/ Latency Single-digit ms (TP99) Not disclosed

Replication replicated across 3 AZs 3 replicas in same reg.

Key-value Data Model support ✓ X Table Storage

Document Data Model with JSON support ✓ ✓

Tunable scaling by the hour by the hour

Secondary Indexes ✓5 Local and 5 Global ✓Automatic indexing

Streams ✓ X

Cross region replication ✓ X

Database triggers ✓ X

Strong consistency, Atomic counters ✓ ✓

Integrated Monitoring ✓CloudWatch ✓

Integration with data warehouse ✓Redshift integration X

Hadoop Integration ✓EMR integration ✓

Titan Graph database integration ✓ X

Free Text Search ✓Elasticsearch ✓Azure Search SQL support X ✓

Encryption - Data in transit ✓ X

Encryption - Data at rest X X

Data Migration tool to import data from various sources X ✓

Query, Filter, Scan ✓ ✓

GET, PUT ✓ ✓

Max item size 400 KB 512 KB Max row size 400 KB Not disclosed

Managed Petabyte-scale Data Warehouse Service

Petabyte-scale managed data warehouse service ✓Redshift ✓SQL DW, preview

Optimized for data warehousing ✓high perf. Unknown

Fault Tolerant ✓global DR, backup to S3 ✓

Automated backups ✓snapshots to S3 ✓every 4 hrs.

Support for 3rd party business intelligence software package and ETL tools ✓ ✓

Encryption ✓CloudHSM, KMS ✓TDE preview

Network Isolation ✓ ✓

Audit and compliance ✓ ✓

Pause/Resume data warehouse X ✓

SQL support ✓ ✓





April 06, 2016


In-Memory Cache

Managed in-memory cache (memcached support) ✓ X

Managed in-memory cache (Redis support) ✓ ✓

In-zone replication ✓ ✓

Multi-zone replication ✓ X

Auto-failover ✓ ✓

Reserved Instances ✓ X

Developer Tools

Store Code in Private Git Repositories Managed source control service ✓CodeCommit ✓Visual Studio Team Services

Repository Type ✓Git ✓Git, TFVC

Code Browsing ✓ ✓

Code Editing X ✓

Code Search X ✓

Code Review X ✓pull requests

Encryption at rest ✓ X

Release Software using Continuous Delivery

Continuous Delivery service for fast and reliable updates ✓CodePipeline ✓VS Team Services

Build ✓Jenkins, Partner ✓VS Team Services

Load Test ✓Partner ✓VS Team Services

UI Test ✓Partner X

API test ✓Partner X

Security Testing X X

Automate Code Deployments

Managed Service to deploy code to instances ✓CodeDeploy ✓

Rolling Update - deploy to instances ✓CodeDeploy X

Rolling Update - deploy to containers ✓ECS X

Rolling Update - deploy to App Platform ✓Beanstalk X

Deployment Health Tracking ✓CodeDeploy X

Other Tools IDE X ✓VS, VS Team Services

IDE Plugins ✓Eclipse, Visual Studio ✓Eclipse, IntelliJ

Monitoring and Alerts ✓CloudWatch ✓Application Insights

Logging ✓CloudTrail ✓Audit Log

In-Process Call Tracing X ✓IntelliTrace

Remote Procedure Calls details, including latency for requests that make RPC calls X X

Crash Reporting X ✓Application Insights





April 06, 2016

New AWS Microsoft

Security and Identity Manage User Access/ Fine-grained Access Control

Control access to your cloud resources at a granular level ✓IAM ✓RBAC

Utilize multi-factor authentication when accessing cloud resources ✓ ✓

Temporary security credentials when making requests between services ✓Roles X

Identify when an access key was last used to rotate old keys and remove inactive users ✓ X

Policy Simulator to test policies before committing to production ✓ X

Policy validation to ensure that your policies match your intentions ✓ X

Host and Manage Active Directory

Managed Microsoft Active Directory in the cloud ✓Microsoft AD X

Managed domain controller as a service ✓Microsoft AD ✓Azure AD Domain User and Group management ✓ ✓

Maximum number of users supported 50,000 6,250

Built-in monitoring and recovery ✓ ✓

Built-in high availability ✓ ✓

Built-in backup and restore ✓ ✓

Ability to domain-join to hierarchical OUs ✓ ✓ Single OU LDAP support ✓ ✓Read only

Policy configuration for targeted OUs ✓ ✓Default GPO Support for Schema Extensions ✓ X

Support for Domain Trusts ✓ X

Provision AD Directories on Demand ✓ X

REST-based directory ✓ ✓

Manage users/groups using existing AD Tools ✓ X

SAML Federation ✓ ✓

Built-in security at rest ✓ X Unknown

HTTPS security on wire ✓ ✓

Automatic domain join ✓Windows only X Manual

Integration with your existing on-premises Active Directory ✓ ✓Azure AD

Self-service password reset for cloud users ✓ ✓

Multi-Factor Authentication service for cloud users X ✓

Multi-Factor Authentication server for on-premises users ✓RADIUS based ✓AD Premium Self-service password reset with on-premises write-back X ✓AD Premium Application Proxy: Secure Remote Access and SSO to on-premises web applications X ✓

support for single sign-on to SaaS and custom Apps X ✓

Standard security reports X ✓

Advanced anomaly security reports (machine learning-based) and alerts X ✓AD Premium Service to discover all cloud apps in use within your organization X ✓Cloud App

Discover, restrict and monitor privileged identities X ✓Azure AD Privileged





April 06, 2016


Ability to dynamically define group memberships ✓ ✓

Conditional access policies based on user location and group membership ✓ ✓

Key Management & Storage

Dedicated, hardware security module (HSM) appliance ✓CloudHSM X

Managed service to create and control the encryption keys used to encrypt your data ✓KMS ✓Key Vault

Audit of all action on keys ✓through CloudTrail X

Key Durability 11 9s Not disclosed

Ability to encrypt arbitrary data to use in local applications ✓ X

Application/Service Integration ✓EBS, S3, RDS, Redshift ✓SQL Server, RMS

FIPS 140-2 validated ✓(HSM only) ✓

Ability to import keys to service and escrow in external HSMs ✓(HSM), X (KMS) ✓

Supported Cryptographic Methods Asymmetric & symmetric RSA (asymmetric)

Interfaces Console, CLI, multiple SDKs PowerShell

Authentication ✓IAM w/ granular control ✓Azure Directory Auth

Service Provider Access to physical keys ✓ X

Filter Malicious Web Traffic

Web application firewall to protect web applications from common web exploits ✓WAF X

Instant threat mitigation, based on Live traffic ✓ X

Instant rule updates ✓ X

API ✓ X

Force SSL Mode ✓CloudFront X

Enables PCI DSS 6.6 X X

CDN is PCI Complaint ✓ X

Easy Deployment ✓ X

Rules Number of Pre-configured security rules 1 X

Provision for custom rules ✓ X

Protect against malicious BOTS, crawlers X X

Rate-limiting based on whitelist/blacklists X X

Automatic updating heuristics-based blacklists X X

Whitelist/blacklist of IPs ✓ X

Whitelist/blacklist of Referrers ✓ X

SQLi ✓ X

XSS X X

Remote File Inclusion X X

Whitelist/blacklist of URLs ✓ X

Whitelist/Blacklist of User-agent ✓ X

CAPTCHA X X

Anti-DDoS Protection X X

Actions





April 06, 2016


Blocking ✓ X

Counting ✓ X

Challenge X X

Scoring X X

Visibility/Reporting Sampled Requests ✓ X

Real-time Metrics ✓ X

Full Logs ✓(Extra $) X

Analyze Application Security

Managed service to identify potential security issues with resources ✓Inspector ✓Security Center

Provision, Manage, and Deploy SSL/TLS Certificates

Managed service to provision, manage, and deploy SSL/TLS certificates ✓Certificate Manager X

Automatic/Managed renewal ✓ X

Managed renewal (clientless) ✓ X

Central management ✓ X

Configuration via console/GUI ✓ X

Wildcard certificates ✓ X

24x7x365 support ✓ X

Certificate widely accepted in browsers and applications ✓ X

Certificate installation ✓ X

Issues own certificates (i.e. is a CA) ✓ X

Can be used anywhere X X

DNS-based identity validation X X

Periodic certificate rotation X X

Compliance (Certifications and Assurance Programs)

SOC 1/ ISAE 3402 ✓ ✓

SOC 2 ✓ ✓

SOC 3 ✓ ✓

ISO 27001 ✓ ✓

ISO 27002 ✓ ✓

ISO 27017 ✓ X ISO 27018 ✓ ✓

ISO 9001 ✓ X

PCI DSS Level 1 ✓ ✓

FedRAMP (SM) ✓ ✓

DIACAP ✓ ✓

FIPS 140-2 ✓ ✓

ITAR ✓ X

DISA Level 2 X ✓





April 06, 2016


DoD CSM ✓ X

HIPAA ✓ ✓

MPAA ✓ X

IRAP (Australia) ✓ ✓

MTCS Tier 3 Certification ✓ ✓

EU Safe Harbor / EU Model clauses ✓ ✓

CSA ✓ ✓

FERPA ✓ ✓

UK G-Cloud ✓ ✓

Section 508 / VPAT ✓ X

IT-Grundschutz ✓ X

CJIS (Criminal Justice Information Service) ✓ ✓

MPLS - Multi-Level Protection Scheme (China) X ✓21 Vianet

NZ GCIO ✓ ✓

FDA 21 CFR Part 11 ✓ ✓

Content Delivery and Security Association (CDSA) X ✓

IRS - 1075 X ✓

FISC X ✓

Management Tools

Monitor Resources and Applications Monitoring service for cloud resources and applications ✓CloudWatch ✓Individual services

Customer defined monitoring metrics (publish your own metrics) ✓through API call X

Infrastructure metrics ✓ ✓

Dashboards - collection of charts ✓ ✓Operation Insights only

Historical performance monitoring ✓14 days ✓30 days

Ability to monitor at 1 minute granularity ✓1,5 min X 5 min only

Ability to get notifications from services delivered in near-real-time ✓CloudWatch Events X

Availability/external monitoring from multiple locations ✓R53 Health checks ✓web endpoint monitoring

Application monitoring X ✓Application Insights

Percentiles X X

Real-time monitoring of logs ✓ ✓Operation logs

Log search ✓ X

Email notifications ✓ ✓

Mobile notifications ✓ X

Ability to monitor multiple clouds (metrics, logs) through a single view X ✓OMS

Track User Activity and API Usage

Web service to record API calls and deliver log files ✓AWS CloudTrail ✓Operation Logs

Number of supported services 36 Services 23 services

Receive notification of API activity ✓ ✓

Durable and inexpensive log file storage ✓compressed X no compression





April 06, 2016


Choice of partner solution ✓ X no partner solution

Latency to deliver API activity history to a storage bucket <15 mins <15 mins

Aggregation across multiple accounts and multiple Regions for ease of use ✓ X

Account level logging to correlate activity from different AWS services application logs ✓ ✓

Track Resource Inventory and Changes

Managed service for resource inventory, configuration history & change notifications ✓AWS Config X

Guidelines for provisioning, configuring and continuously monitoring compliance ✓AWS Config Rules X

Automatically records a resource’s configuration when it changes ✓ X

Examine the configuration of your resources at any single point in the past ✓ X

Receive notification of a configuration change ✓ X

Choice of partner solution ✓ X

Create and Manage Resources with Templates

Service to create a collection of related resources and provision them using a template ✓CloudFormation ✓Azure Resource Group

Customized resources (extensibility) ✓ X

Visualization of templates/resources ✓Designer X

Online editor/code completion ✓Designer X

Shared / OSS resources (GitHub repos, community contributions) ✓custom resources ✓sample templates

Portal experience for provisioning ✓ ✓

Mobile enabled portal access ✓ X

Parameters / Inputs for customization ✓ ✓

Support for Authenticated user access ✓ ✓

Role based access ✓ ✓

Separate permissions for launch vs. provision ✓Service Catalog X

Support cost tracking ✓tags ✓tags

Provide cost estimate ✓budget-tags X

Event feeds of provisioning actions ✓SNS X

Audit logs ✓CloudTrail ✓Audit Logs

Community engagement (StackExchange/Forums/Twitter) ✓ ✓

Support for external tools ✓Troposphere, Sparkle X

Language features Parameters, Maps, Conditions, Outputs

Loops, Variables, Parameters, Outputs

Reliability guarantees/semantics Strong reliability Strong reliability

Automate Operations Application management service to deploy and operate applications ✓OpsWorks X

Managed service to automate tasks using PowerShell based runbooks X ✓Azure Automation

Create and Use Standardized Products

Create and manage catalog of pre-approved services for use ✓AWS Service Catalog X

Analytics





April 06, 2016


Build Smart Applications Quickly and Easily Managed service for building Machine Learning models and generating predictions ✓Amazon ML ✓Azure ML

Integrated with other cloud services for easy data access ✓S3, RDS, Redshift ✓Storage, SQL, HiveQL

Dataset maximum size 100 GB 10 GB

Model evaluation and interpretation tools ✓ ✓metrics only

Price per million predictions (approximate) $100 $500

Data visualization and exploration ✓ ✓

Support for common ML data transformations ✓ ✓

Modeling APIs for creating, reviewing, and deleting data sources, models, and evaluations ✓ ✓only model retraining

Batch prediction API (for generating predictions in a batch mode) ✓ ✓

Real-time prediction API (for generating real-time predictions) ✓ ✓

Real-time model updates with new data points X X preview real-time predictions within the console, before creating an app ✓ X Support for ML Algorithms - Multiclass and Binary classification ✓ ✓

Support for ML Algorithms - Regression ✓ ✓

Support for ML Algorithms - Clustering X ✓

Support for ML Algorithms - Scalable Boosted Decision trees X ✓

Support for ML Algorithms - Bayesian Recommendation systems X ✓

Support for ML Algorithms - Deep Neural Networks X ✓

Support for custom R scripts X ✓

Support for Python scripts X ✓

Support for a visual interface with drag and drop predictive modeling X ✓ML Studio

Support for publishing Machine Learning APIs as paid or free services in the Marketplace X ✓ML Marketplace

Deployment in multiple regions ✓IAD, DUB ✓South US, SE Asia

Gallery with published ML APIs X ✓ML Gallery

Support for ML models for image analysis X ✓Cognitive Support for ML models for audio transcribing X ✓Project Oxford

Support for ML models for translating into multiple languages X ✓Translator

Managed Hadoop Framework

Managed Hadoop service for quick and cost-effective processing of data ✓AWS EMR ✓Azure HDInsight

Commercial Hadoop distribution offered as a managed service ✓MapR ✓HDP

Ability to install multiple components on the same cluster ✓ X

Resize a running cluster ✓ ✓

Conserve work while resizing a running cluster ✓Graceful Shrink X

Resize a running cluster with different instance types ✓ X

Reconfigure a running cluster X ✓through Ambari

Support for Hadoop Key Management Service (based on Hadoop’s KeyProvider API) ✓ X

Process encrypted data stored in an Object storage system ✓Envelope encryption X

Ability to utilize different pricing model ✓OD, Spot, RI X OD only

Support for Step API (a step can contain one or more Hadoop jobs) ✓ X

Support for JSON based configuration files ✓ X





April 06, 2016


Ability to specify initialization actions on clusters ✓ ✓Windows only

Parallel clusters ✓ ✓

Flexible data stores ✓S3, DDB, RDS, Kinesis ✓Blob Storage

Web interfaces for the cluster ✓Hue, YARN, Zeppelin ✓Ambari

Supported Programming languages ✓All ✓C#, Java, .NET

Integrated monitoring ✓Ganglia 3.7.2 ✓

Integrated logging - Audit ✓CloudTrail ✓

Cluster Start time 5-6 minutes >15 minutes

Per-minute billing X ✓

Managed Hadoop clusters on Windows X ✓

Visual Studio integration for Hive X ✓

Supported Hadoop Tools/Versions HDFS ✓2.7.1 ✓2.6

MapReduce ✓2.7.1 ✓2.6

Ambari X ✓.1.0

Avro ✓1.7.4 ✓

Cascading ✓ 3.7 X

Flume ✓1.5.2 X

HBase ✓0.94 ✓0.98

Hive ✓ 1.0 ✓ 1.0

Hue ✓ 3.8 X

Impala ✓ 1.2.4 X

Mahout ✓ 0.10 ✓0.9

Oozie ✓4.2 ✓4.1

Parquet ✓1.5.0 X

Pig ✓0.14 ✓.14

Spark ✓1.6.0 ✓1.3

Sqoop ✓ 1.99 ✓1.4.5

Storm X ✓.9.3

Tez ✓0.7 ✓.5.2

YARN ✓2.6 ✓2.6 Zookeeper X ✓3.4.6 Presto ✓0.130 X

Zeppelin ✓.5.5 X

Real-time Processing of Streaming Big Data

Managed service for real-time data processing over large distributed data streams ✓Kinesis ✓Event Hubs

Large scale event ingestion ✓ ✓

Simple and highly scalable data ingestion ✓Firehose X

Event delivery to multiple consuming applications ✓ ✓

Message replay ✓ ✓

Message size 1 MB Not disclosed





April 06, 2016


Message Retention 7 days 1 day

Additional Storage (up to 7 days) ✓ ✓

Connector Ecosystem ✓ ✓

Producer Library ✓ X

Real-time stream processing in the cloud X Announced, NA ✓Stream Analytics

Run and Scale Elasticsearch Clusters

Managed service that makes it easy to deploy, operate, and scale Elasticsearch ✓ X

Orchestration for Data driven workflows

Managed service to move data between compute and storage services ✓Data Pipeline ✓Data Factory, preview

Business Intelligence

Cloud powered Business Intelligence service X Announced, NA ✓Power BI

Genomics as a service (Storage, query, GATK support) X X

Internet of Things

Managed cloud platform for connected devices to interact with cloud apps/other devices ✓AWS IoT ✓Azure IoT Hub

Read and set device state at any time ✓Device Shadow X

Ability to apply conditions/business logic on inbound messages ✓Rules Engine ✓ASA, Service Bus

Protocol support - MQTT (Message Queue Telemetry Transport) ✓ ✓

Protocol support - HTTP/S ✓ ✓

Protocol support - WebSockets ✓ ✓

Protocol support - AMQP (Advanced Message Queue Protocol) X ✓

Authentication ✓X.509, IAM, Cognito ✓SAS token Enable integration between devices and application ✓6 services ✓3 services Device Registry ✓ ✓

Custom MQTT keepalive intervals ✓ X Reference architecture/suite packaging and pricing X ✓IoT Suite

Embedded OS for creating IoT devices X ✓Windows 10 IoT Core

IoT Device SDK support - C ✓ ✓

IoT Device SDK support - .NET X ✓

IoT Device SDK support - JavaScript ✓ ✓

IoT Device SDK support - Java X ✓

IoT Device SDK support - Arduino Yún ✓ X

IoT Service SDK support ✓All ✓Node.js only SDK for iOS ✓ X

SDK for Android ✓ X

Certified for IoT Devices - Intel Edison ✓ ✓

Certified for IoT Devices - BeagleBone ✓ ✓

Certified for IoT Devices - TI Launchpad ✓ ✓





April 06, 2016


Certified for IoT Devices - Arrow DragonBoard ✓ ✓

Certified for IoT Devices - Renasas ✓ X

Certified for IoT Devices - Microchip ✓ X

Certified for IoT Devices - seeeduino ✓ X

Certified for IoT Devices - Avnet ✓ X

Certified for IoT Devices - Marvell ✓ X

Certified for IoT Devices - MediaTek ✓ X

Certified for IoT Devices - Texas Instruments ✓ ✓

Certified for IoT Devices - Qualcomm ✓ X

Certified for IoT Devices - Broadcom ✓ X

Certified for IoT Devices - Mistral ✓ X

Certified for IoT Devices - Freescale FRDM K64 X ✓

Certified for IoT Devices - Raspberry Pi 2 X ✓

Certified for IoT Devices - Adlink Systems X ✓

Certified for IoT Devices - Arduino X ✓

Certified for IoT Devices - e-con systems X ✓

Certified for IoT Devices - Embedded Systems SIA X ✓

Certified for IoT Devices - Nexcom X ✓

Certified for IoT Devices - Samsung X ✓

Certified for IoT Devices - Toradex X ✓

Certified for IoT Devices - Minnowboard Max X ✓

Application Services

Search service ✓ ✓

Queuing service ✓ ✓

Notification service ✓ ✓

Managed workflow service ✓ ✓

Bulk email delivery service ✓ X

App Streaming service ✓ X

Scalable Media Transcoding

Media transcoding service ✓Elastic Transcoder ✓Media Services

HTTP Ingress ✓ ✓

Encryption support ✓ ✓

Simultaneous tasks/jobs ✓up to 30 output jobs ✓

Notification system ✓SNS ✓Notification Hub

Output presets and advanced settings ✓ ✓

Support for multiple video codecs ✓H.264, VP8, MPEG-2 ✓H.264, MPEG-1/2

Support for multiple audio codecs AAC, MP3, MP2, PCM, FLA ✓MP3, Dolby, WMA

Video thumbnails ✓ ✓

Visual watermarks ✓ X

Captions ✓ X





April 06, 2016


Clip generation ✓ ✓

Clip concatenation X ✓

Smooth streaming ✓ ✓

HLS streaming ✓ ✓

MPEG-DASH streaming X ✓

HDS streaming X ✓

Dynamic Packaging X ✓

Billing Simple, output minutes Complex, output storage

Build, Deploy, and Manage APIs

Create, publish, maintain, monitor, and secure APIs at any scale ✓API Gateway ✓API App, preview

Mobile Services Push Notification

Fast, flexible, managed push notification service ✓Amazon SNS ✓Notification Hubs

Messaging model Pub-Sub/Direct Addressing Pub-Sub

Message Delivery Push Push Support for HTTP/HTTPS destination types ✓ ✓

Support for Mobile Push Gateways ✓ ✓

Support for SMTP ✓ ✓

Support for SMS ✓US only X

Maximum number of topics per project Unlimited Unlimited

Maximum number of subscription per topic Unlimited Unlimited

Throughput - Publish Unlimited Unlimited Maximum message size 256KB Not disclosed

Pricing - 1 Billion push messages/month $1,000 $2,675

Pricing - 1 Billion pull messages/month NA NA

Test apps on real devices in the cloud

Test apps on real devices in the cloud ✓AWS Device Farm X

Collect, View and Export App Analytics

Service to easily collect, visualize, and understand app usage data at scale ✓Mobile Analytics ✓Mobile Engagement

User Identity and App Data Synchronization

Service to securely store and sync user app data across multiple devices and OS platforms ✓Amazon Cognito ✓Mobile App

Supported Platforms -client side (iOS) ✓ ✓

Supported Platforms -client side (Android) ✓ ✓

Supported Platforms -client side (Windows Phone, Windows Store) X ✓

Supported Platforms -client side (JavaScript) ✓ ✓

Supported Platforms -client side (Unity) ✓ X





April 06, 2016


Supported Platforms -client side (others) X ✓Xamarin

Supported Platforms -Server side (Java) ✓ X

Supported Platforms -Server side (Node.js) ✓ ✓

Supported Platforms -Server side (Ruby) ✓ X

Supported Platforms -Server side (Python) ✓ X

Supported Platforms -Server side (.NET) ✓ ✓

Supported Platforms -Server side (PHP) X X

Authentication mechanism - Amazon, Google, Facebook, others ✓ ✓

Offline local database storage ✓SQLite ✓customer choice

Database Technology ✓DynamoDB ✓Azure SQL

Query/Search data X ✓Direct access to DB

Enterprise Applications

Managed, secure enterprise storage and sharing service ✓WorkDocs ✓Office 365

In browser editing X ✓Office 365

Virtual Desktops in the cloud

Managed desktop computing service in the cloud ✓WorkSpaces ✓RemoteApp

Persistent Desktops ✓ X

Application sessions (WAM) ✓WAM ✓

Performance Bundles [CPU, Memory] Value/Std/Perf. SKUs Fixed VM size

Purchase Model No minimum commit No minimum commit

MS Office ✓Via SPLA, bundle ✓

Non-Persistent desktops (on the road X X

Windows Server OS ✓ ✓

Windows Client OS X X

Linux OS X X

Configurable Storage X X

Virtualization Stack EC2/Xen Hyper-V

GPU Capable X ✓

Offline access to docs X X

Clients iOS, Android, PC, Mac, zero client iOS, Android, PC, Mac, Win Phone

APIs ✓ X

Utilities ✓Anti-virus X

Active Directory Integration ✓ ✓

Dedicated Network ✓ ✓

Image Management ✓Custom image ✓custom images

Line of Business Applications ✓supported through WAM ✓

Enterprise App Store ✓WAM X

BYOL for Win 7 X X

Multi-Factor Auth ✓ ✓

Monitoring X ✓





April 06, 2016


Auditing ✓ ✓

Tier-1 support ✓via customer X

Tier-2 support ✓via AWS Support ✓via Microsoft support

Monitoring ✓CloudWatch X

Secure Email and Calendaring

Secure, managed business email and calendaring service ✓WorkMail ✓Office 365

Microsoft Outlook on Windows ✓ ✓

Regional data control ✓ ✓

Encryption at rest using customer managed keys ✓ X Announced, but NA

Rich Mac OS X integration ✓ ✓

Generic client support using IMAP/POP3 X ✓

Company address book ✓ ✓

Distribution groups ✓ ✓

Shared mailboxes ✓ ✓

Shared calendars ✓ ✓

Free/busy ✓ ✓

Resource booking ✓ ✓

Public folders X ✓

Feature rich web client ✓ ✓

Mobile device support ✓ ✓

Mobile device policies ✓ ✓

Mobile device access rules X ✓

Remote wipe ✓ ✓

Malware, virus, and spam scanning ✓ ✓

Custom spam filter settings X ✓

SMTP routing rules X ✓

Data Leak Prevention X ✓

Email journaling ✓ ✓

Information Right Management (IRM) X ✓

Active Directory integration ✓ ✓

Migration tool to facilitate migration from Microsoft Exchange to Amazon WorkMail ✓ ✓

Co-existence with Microsoft Exchange X ✓

Multi region support X ✓

Multi-factor authentication ✓ ✓

Admin audit logging X ✓

Management APIs X ✓

Compliance certifications (ISO 27001, 27017 and 27018) ✓ ✓

Unified Communication X ✓

Support

Service Health Dashboard ✓ ✓





April 06, 2016


365 day service health dashboard and SLA history ✓ ✓

Service to compare resource usage to best practices ✓Trusted Advisor X

Direct access to a Technical Account Manager (TAM) ✓ ✓

Support for third party applications ✓ X

Public APIs to integrate with customer support systems ✓ X

Customer service 24x7x365 ✓ ✓

Support forums ✓ ✓

Documentation, whitepapers, best-practice guides ✓ ✓

Break/Fix Tickets (Support for Health Checks) ✓ ✓

Route critical issues directly to specially trained engineers for resolution ✓ ✓

TAM to help customers tier, execute, and evaluate their infrastructure performance ✓ ✓

Onsite services ✓ProServe ✓

Response time (fastest) <15 mins (Enterprise) <15 mins (Premier)

Pricing 15,000+/mo (Ent) 24,500+/mo (Premier)

Hybrid Integration

Hybrid platform with consistent experience across IT and developers X ✓Azure Stack

Extend on-premise network configuration into the Cloud ✓ ✓

Hardware-based virtual private networking connection to cloud resources ✓ ✓

High speed, low latency, dedicated connectivity between on-premises & cloud ✓ ✓

Automated VM import functionality ✓ ✓VHD only

Automated VM export functionality ✓prev. imported inst. ✓VHD only

Integrate with your existing identity and access management systems ✓ ✓

Use any IP address range, including RFC 1918 ✓ ✓

Create multiple private and public subnets ✓ ✓

Highly durable, automatic data replication, and recovery service from on-premises X ✓Azure Site Recovery

Backup service to back up on-premises servers X ✓Azure Backup

Control access to your cloud resources at a granular level ✓ ✓RBAC

Utilize multi-factor authentication when accessing cloud resources ✓ ✓

Temporary security credentials (Roles for IAM) ✓ ✓

Single Sign-On to SaaS Apps X ✓Azure Active Directory

Support from 3rd party management and monitoring tools - Microsoft ✓ ✓

Support from 3rd party management and monitoring tools - VMware ✓ X

Support from 3rd party management and monitoring tools - CA ✓ ✓

Support from 3rd party management and monitoring tools - BMC ✓ ✓

Support from 3rd party management and monitoring tools - RightScale ✓ ✓

Support from 3rd party management and monitoring tools - Eucalyptus ✓ ✓

Support from 3rd party management and monitoring tools - Symantec ✓ ✓

App management service to deploy and operate apps in the Cloud or own data center ✓ ✓

Service to automate code deployments to cloud and on-premises ✓ ✓




4.10 DESCRIBE HOW YOUR COMPANY WILL MARKET THIS CONTRACT IF AWARDED 4.10.1 STRATEGY AND PROCESSES FOR MARKETING THE NCPA VEHICLE It is a known fact: there are dozens cloud-focused Government Wide Acquisition Contracts (GWAC) and Indefinite Deliver; Indefinite Quantity (IDIQ) vehicles all competing for similar business. How a client distinguishes among them is not so much the issue; however, the CO’s familiarity with them is.

How do we all get the word out about NCPA? A&T goes about this in the following ways:

Marketing at the RFI Level: A&T answers an average of 50 RFIs annually, promoting our Small Business contract vehicles, within the body of the Procurement Strategy section. Typically these are clients with active projects, and often a compelling reason for services and technology guidance without a fully developed acquisition strategy. This attracts the interest of Program Offices and presents an opportunity to discuss the benefits of using the NCPA vehicle, for everything cloud and storage in support of the Federal Enterprise Architecture, the Department of Defense Enterprise Architecture, and the Federal Health Architecture. These differentiators include fast speed, flexible contract types, e-GOS with built in FAR guidance, no DPA requirement, inexpensive contract access fee, and experienced COs.

Marketing at Industry Shows: A&T attends as many GWAC, IDIQ and industry shows as we can manage with attendance at key shows where the opportunities to attract new clients in the Task Areas. A&T serves as NCPA’s spokesperson. Sample events may include GovConNet, Coalition for Government Procurement (PGP), HIMSS, GEOINT, ACQUIRE, Defense Health IT and others including Technology-specific symposiums such as cloud computing events and public sector acquisition events. The discussions resulting from prospect-vendor meetings help Government buyers gain insight into the reasons they should choose NCPA.

Supporting Speakers for NCPA: A&T has been a panelist describing the simplified acquisition for cloud services at industry events and will do so for NCPA as appropriate.

Marketing to a New Client or New Prospect A&T will market its cloud solution to NCPA clients using a two-pronged approach. 1. Develop and execute an A&T effort that involves marketing to new clients and existing clients

through personal contact including referrals, discussions with peers, industry speakers, symposium attendees from government, industry, educational, social media, company blogs, and as industry speakers ourselves in forum environments

2. Leverage our account rep and marketing resources and our product partner company relationships such as AWS, CloudCheckr, Sophos, CommVault, and CheckPoint—to name a few—to provide with introductions to A&T as an Authorized and Certified Consulting Partner and Reseller to assist the client with NCPA Procurement Strategy benefits.

Occasionally NCPA T.O.s will appear that require using other vendors. If so, we will revise the marketing plan to account for requirements involving the new vendor or the accompanying T.O.

4.10.2 A&T PLAN TO CONTACT NEW AND EXISTING CLIENTS New Clients We will offer new clients solutions that address their needs and a team of experts that provide a comprehensive selection of cloud services and quality technical experts and managers representing A&T and the vendors that would best serve the Government’s needs for a given challenge.

We have hired an additional marketing resource to target new clients among NCPA COs and CORs. Using contacts that our new staff has in these locations, we are cultivating relationships that will lead to introductions with specific decision-makers and will add them to our call plan.




4.10.3 LEVERAGE VENDOR RESOURCES We will tap available vendor resources. As an example, for cloud solutions, we have access to AWS’ extensive, robust capabilities that include webinars, an extensive web library, unsolicited white papers, public safety pages; awarded partners, workshops, visiting cities, and doing workshops. AWS will support our marketing effort by sharing competencies, partners, and contact data.

A&T has joined the pilot AWS Marketplace Incentive Program and is one of a limited number of AWS partners offering this program. We will also leverage our extensive contacts with AWS marketing and sales staff, with whom we have excellent relationships. In the past six months, AWS has invited A&T to participate in two marketing brainstorming events, one of which involved their proposal staff working with us on how to present the AWS story more effectively. For the other event, AWS hosted a four-hour workshop between A&T representatives and 30+ AWS marketing experts from all over the U.S. and from several international locations to learn about each other’s capabilities and to expand our marketing network. Senior AWS representatives characterized these meetings as highly beneficial because of A&T’s quality input and highly responsive attitude.

4.10.4 PLAN FOR ACHIEVING THESE OBJECTIVES This section includes preparation/implementation of a NCPA marketing strategy and plan that defines a campaign for promoting NCPA and encourages the use of the Internet-based NCPA contract. The process provides a comprehensive approach that ranges from the traditional means of calling on potential clients to using media of all kinds to reach the potential market—including e-Commerce promotion such as site launch visibility, post-launch popularizing of the site on the Internet, and “E” branding.

Our marketing process involves this eight-step approach to achieve our objectives: 1. Identify the target market and that market’s driving needs 2. Prioritize targeted market areas for most significant impact possibilities 3. Identify competition and weaknesses 4. Use most effective advertising/marketing venues to attract targets 5. Make presentations at targeted industry trade shows, seminars, etc. 6. Host events with targeted officials to build relationships and educate them 7. Collect data and track results of our marketing efforts 8. Review results and adjust strategy during semi-annual strategy meetings with stakeholders

Strategies: The program consists of multiple strategies to provide data about who can purchase, how to purchase, what clients may purchase, and what motivates potential client users to participate: client training/awareness; web-based links to target government publications and sites; conference/trade show presence; direct mail campaign to the membership of key organizations.

Client Training and Awareness: A&T realizes how important it is to maintain relationships with decision-makers via contract performance. We take pride in a job well done, so we work closely with clients to understand their requirements and business processes that drive their needs—ensuring that we recommend optimum solutions. A&T will make the Contract Manager, executives and technical experts available as speakers/trainers for sessions with clients that will serve to promote the NCPA cloud contract visibility as well as sell its ease of use.

A&T’s Direct Sales Strategy: Our chief revenue-producing channel will continue to be the direct sales force. Based on collective input from existing clients, NCPA, AWS, and our sales team, we have already prioritized, targeted direct-call lists and schedules. Selling strategic solutions to the Government requires significant consulting to earn trust; we provide in-depth training on consultative skills to new sales staff. Our sales management uses automated sales forecasting/productivity tools, such as GovBD/Salesforce, to facilitate continuous improvement of marketing/sales processes and real-time accountability.




A&T’s Indirect Sales Strategy: As noted above, we use targeted media, advertising, brochures, and conferences to reach target audiences.

Sales Techniques and Tools: We use proven techniques, including 1-stop shopping; on-time, hassle-free delivery; and best values at best prices. We also add value to the ordering and implementation process for NCPA users—e.g., automated delivery order tracking system; workflow management and predictive portfolio management; QA and client satisfaction measurements; trend analysis for installed systems; action request systems to monitor service calls.

Marketing Effort Detail: Our marketing effort consists of multiple elements/media drives for NCPA solutions—described above briefly (“strategies”) and in more detail here.

The list below cites specific strategies we have exploited successfully in the past: Held briefings for agencies/departments as they prepared acquisition programs Participated in seminars/symposia Advertised on web and in trade publications Optimized search engine visibility Share success stories: present at industry briefings and in white papers

As we plan marketing activities, the A&T Marketing Lead, Fred Sanders, will collect information on each presentation and visit with prospective clients (i.e., date and place, purpose, and who to contact). Each marketing contact requires follow-up with the Program Manager to collect and manage results. The result will be consistent delivery of cloud service, an informed Program Management Office (PMO), and an informed client Contract Management Office—i.e., no surprises.

Marketing Materials: We employ a wide range of marketing materials because we understand that 1) no single material type reaches our complete audience and 2) clients have differing preferences about receiving/consuming materials. As noted in the marketing plan, we focus on the web, media drives, and collateral materials. Generally, the material we develop is of two types: 1) focused on a government organization; 2) competency-based for specific needs. This material involves a variety of presentation modes: e.g., online, media drives, and collateral materials.

Online Website Marketing/Sales: We have a robust website that we use as a foundation for informing clients about our offerings and as a Search Engine Source for NCPA COs and CORs.

4.11 DESCRIBE HOW YOU INTEND TO INTRODUCE NCPA TO YOUR COMPANY A&T’s cloud management, technical, and NOCC support staff are all located in a single headquarters office in Silver Spring, Maryland. The management staff meets weekly to coordinate operations and business development efforts and monthly for program reviews. We will initiate introduction of the NCPA vehicle in the first weekly meeting after contract award. Fred Sanders, our NCPA marketing lead, will prepare a 30-minute overview on the new vehicle. Richard Ziegfeld, our Director of Proposals who wrote A&T’s NCPA response, will post an overview on NCPA on the A&T website and the whole NCPA response in A&T's “building blocks” library of proposal materials where all staff can locate the data.

Finally, we will expand the NCPA presentation for all technical, NOCC, and back-office staff so that everyone in the organization who handles cloud services issues understands the opportunities and guidelines that the NCPA vehicle provides.




4.12 DESCRIBE YOUR FIRM’S CAPABILITIES AND FUNCTIONALITY OF YOUR ON-LINE CATALOG / ORDERING WEBSITE

4.12.1 EVALUATION CRITERION TECHNOLOGY FOR SUPPORTING THE PROGRAM 4.12.1.1 ELECTRONIC ON-LINE CATALOG, ORDER ENTRY USE BY AND SUITABILITY FOR THE ENTITY’S NEEDS

The A&T Systems AWS Catalog is available electronically on GSA Advantage; it contains over 35,000 CLINs for reference. We update this catalog monthly so it contains the latest AWS pricing available.

In addition, A&T makes the Amazon Monthly Calculator available so that NCPA members can obtain costs for any configurations they wish to employ. Once NCPA members establish the configuration of service, they can order the required resources from the AWS Management Console provided.

The AWS Management Console provides a simple web interface for AWS. You can log in using your AWS account name and password. If you have enabled AWS Multi-Factor Authentication, you will be prompted for your device’s authentication code.

Access and manage AWS through a simple and intuitive web-based user interface. You can also use the AWS Console mobile app to view resources on the go quickly.

The Console facilitates cloud management for all aspects of your AWS account, including monitoring your monthly spending by service, managing security credentials, or even setting up new Identity and Access Management (IAM) users. With the AWS Console mobile app, you can quickly and easily view your existing resources, including CloudWatch alarms, and perform operational tasks from your mobile device. Download our mobile app from Amazon Appstore, Google Play, or iTunes.

With Resource Groups, you can view collections of resources that share common tags. Streamline your use of the console by creating a resource group for each application, service, or collection of related resources that you work with regularly.

Quickly navigate to each saved resource group using the “AWS” menu. Resource Groups are specific to each identity, so each user in an account can create unique Resource Groups for frequently accessed resources and common tasks. Users can also use a URL to share Resource Group definitions with others in the same account.

Use the Tag Editor to manage tags easily for all resource types that support tags in any region. Apply tag keys and values to multiple resources at once. The Tag Editor supports global tag search and bulk editing, so it is easy to find all resources with a particular tag or make tag changes across multiple resources with just a few clicks.

A&T’s catalog lists 35,000+ CLIN items that NCPA customers may offer as Figure 7 indicates.




The following three screen shots illustrate the user experience with the AWS electronic environment that NCPA users will employ to search for items they wish to order and to determine the commercial price before A&T applies any available discounts.

Figure 8 illustrates the search process (the block on the left) when the user is searching for information on Amazon Elastic Block Store (EBS) and the search results (block on the right):

Figure 8. AWS Search Tool (Left) and Search Results (Right)

Figure 9 illustrates the screen a user will employ when searching for pricing information. The full screen includes all AWS products types, but note that at the screen bottom, we display an item for “Storage and Content Delivery Pricing”.

Figure 9. AWS Partial Screen for Searching Pricing Information

Figure 10 illustrates a selection of vendor postings in the AWS Marketplace.




Figure 10. Screen Shot of Vendor Postings in AWS Marketplace This is only a partial listing because AWS offers 2700+ items in Marketplace

4.12.2 QUALITY OF VENDOR’S ON-LINE RESOURCES FOR NCPA MEMBERS We created a JavaScript-based AWS Calculator tool that allows you to calculate your monthly cost for using AWS.

This tool incorporates the latest pricing changes including the tiered pricing model for download bandwidth.

Use this tool to estimate your monthly bill, to determine your best and worst case scenarios and identify areas of development to reduce your monthly costs and even compare it with other service providers who do not offer utility-style of billing (pay-as-you-go).

You can view the calculator here: http://calculator.s3.amazonaws.com/calc5.html

With AWS NCPA has access to a wealth of Management Tools including for example: AWS Application Discovery Service Amazon CloudWatch




AWS CloudFormation AWS CloudTrail AWS Command Line Interface AWS Config AWS Management Console AWS OpsWorks AWS Service Catalog Trusted Advisor AWS Tools for Windows PowerShell

4.12.2.1 SPECIFICATIONS AND FEATURES OFFERED BY RESPONDENT’S PRODUCTS AND/OR SERVICES Whether you are running applications that share photos to millions of mobile users or you are supporting the critical operations of your business, the cloud provides rapid access to flexible and low cost IT resources. With cloud computing, you do not need to make large upfront investments in hardware and spend a lot of time on the heavy lifting of managing that hardware. Instead, you can provision exactly the right type and size of computing resources to power your newest bright idea or operate your IT department. You can access as many resources as you need, almost instantly and only pay for what you use. Cloud Computing provides a simple way to access servers, storage, databases and a broad set of application services over the Internet. Cloud Computing providers such as AWS own and maintain the network-connected hardware required for these application services, while you provision and use what you need via a web application.

Trade capital expense for variable expense Instead of having to invest heavily in data centers and servers before you know how you’re going to use them, you can only pay when you consume computing resources, and only pay for how much you consume.

Benefit from massive economies of scale By using cloud computing, you can achieve a lower variable cost than you can get on your own. Because usage from hundreds of thousands of customers is aggregated in the cloud, providers such as AWS can achieve higher economies of scale that translates into lower pay as you go prices.

Stop guessing capacity Eliminate guessing on your infrastructure capacity needs. When you make a capacity decision prior to deploying an application, you often either end up sitting on expensive idle resources or dealing with limited capacity. With Cloud Computing, these problems go away. You can access as much or as little as you need, and scale up and down as required with only a few minutes notice.

Increase speed and agility In a cloud computing environment, new IT resources are only ever a click away, which means you reduce the time it takes to make those resources available to your developers from weeks to just minutes. This results in a dramatic increase in agility for the organization, since the cost and time it takes to experiment and develop is significantly lower.

Stop spending money on running and maintaining data centers Focus on projects that differentiate your business, not the infrastructure. Cloud computing lets you focus on your own customers, rather than on the heavy lifting of racking, stacking and powering servers.

Go global in minutes Easily deploy your application in multiple regions around the world with just a few clicks. This means you can provide a lower latency and better experience for your customers simply and at minimal cost.




4.13 DESCRIBE YOUR CUSTOMER SERVICE DEPARTMENT (HRS OF OPERATION, NO. OF SERVICE CENTERS, ETC.): A&T provides NOCC customer service 24/7/365 from a single service center at its corporate headquarters in Silver Spring, Maryland.

A&T understands that excellent customer service derives from two main sources: 1) the attitude of management and staff, involving a passionate commitment to excellence and 2) proven, repeatable processes and standards frameworks. A&T offers both and has the customer references to substantiate these assertions. When customers get to know A&T staff, they become enthusiastic and then committed to working with us.

We laid the foundation 32 years ago for providing excellent service and have maintained that tradition through careful hiring practices, thorough training in processes, but most importantly by inculcating staff with a culture that prizes doing things properly, not only in terms of delivering a quality product but in treating customers well. That means:

Responding quickly to calls or emails (often within less than 1 hour) Going out of our way to solve problems expeditiously even if we have to work late or weekends Being innovative in devising a solution even when the challenge is significant Listening carefully to customers’ needs and being flexible in devising means to achieve goals

This culture has led to these recent developments: USGS expanded a BPA that originally called for no cloud MS or PS to include 24 cloud professionals

and then invited A&T to bid on a related contract Lawrence Livermore National Lab referred a sister agency to A&T for cloud support The District of Columbia Healthcare Benefit Exchange invited us to bid on other IT work AWS has referred numerous clients to A&T for extra services and cited us as one of its go-to

government-sector partners

Our pursuit of excellence via process frameworks begins with adopting a Project Management Institute Project Management Body of Knowledge standard and then imposing a quality standard.

Figure 11 provides a narrative overview on A&T’s approach to NCPA customer service needs. Figure 11. Overview on A&T’s Customer Service Approach

NCPA Customer Need A&T Response A&T will have one lead representative for each entity that executes a NCPA customer; contact information shall be kept current

A&T will address this need immediately upon contract award. We have already identified individuals who will act as State Representative for each NCPA customer. We will keep contact information for these Points of Contract (POCs) current

Customer Service Representatives (CSRs) must be available by phone or email at a minimum, from 7-6 Monday through Sunday for the applicable time zones and remotely 24/7/365

CSRs will be available 24/7 by phone and by email to log and answer support-related inquiries in a tiered support model: Tier 1: Will answer calls/receive emails and log confirmed support cases Tier 2: Staffed by a cross-trained pool of IT engineers/SMEs who will troubleshoot and solve

support cases Tier 3: Provided by system administrators, engineers, and developers that solve deeper

technical issues that may not be accessible or widely known to Tier 2 engineers CSRs will respond to inquiries within one business day

Standard lead time during business hours (7AM Eastern Time - 6PM Hawaii Time) is less than 1 hour and usually immediate; we already exceed this requirement and will offer 24/7 phone and email support in a tiered model described above

The Cloud Service Provider (CSP) provides design services for the applicable categories

A&T provides significant numbers of experienced PjMs to act as NCPA customer liaisons coordinating cloud hosting consulting services that address the full cloud lifecycle; PEs may request these services and SMEs to perform design activities pertinent to any application-to-cloud on-boarding process

The CSP will provide Installation Services for applicable categories

Our team has on-call installation service specialists for cloud whom NCPA customers can engage through our 24/7 NOCC to perform installation tasks. Our continuous improvement technical and management cycles will continuously update AWS’ self-service provisioning products.




Figure 12 depicts the major components of our customer-service approach visually. Figure 12. Major Components of our Customer Service Approach

4.14 GREEN INITIATIVES: Green Initiatives: As our business grows, we want to make sure we minimize our impact on the Earth’s climate. We are taking every step we can to implement innovative and responsible environmental practices throughout NCPA to reduce our carbon footprint, reduce waste, energy conservation, ensure efficient computing and much more. To that effort we ask respondents to provide their companies environmental policy and/or green initiative.

AWS is committed to running our business in the most environmentally friendly way possible. In addition to the environmental benefits inherently associated with running applications in the cloud, AWS has a long-term commitment to achieve 100% renewable energy usage for our global infrastructure footprint.

We have made a lot of progress on this commitment. As of April 2015, approximately 25% of the power consumed by our global infrastructure comes from renewable energy sources1. We have a goal of increasing this to at least 40% by the end of 2016.

In June 2015, AWS announced that it has teamed with Community Energy, Inc. to support the construction and operation of an 80 megawatt MW solar farm in Accomack County, Virginia, called Amazon Solar Farm US East. This new solar farm is expected to start generating approximately 170,000 megawatt hours of solar power annually as early as October 2016.

The energy generated by Amazon Solar Farm US East and Amazon Wind Farm (Fowler Ridge) will be delivered into the electrical grids that supply current and future AWS cloud data centers.

4.14.1 OPTIONS FOR CUSTOMERS SEEKING TO RUN 100% CARBON-NEUTRAL INFRASTRUCTURE AWS introduced its first carbon-neutral region in 2011. Today, AWS offers customers three AWS Regions that are carbon-neutral:

US West (Oregon) EU (Frankfurt) AWS GovCloud (US)

4.14.2 THE GREENEST POWER IS THAT WHICH IS NOT CONSUMED Any analysis on the climate impact of a data center should take into consideration resource utilization and energy efficiency, in addition to power mix. Carbon emissions are a factor of three things: the number of servers running, the total energy required to power each server, and the carbon intensity of energy sources used to power these servers. A June 2015 blog post by Jeff Barr outlines why using fewer servers and powering them more efficiently is at least as important to reducing the carbon impact of a company’s data center as its power mix.

A typical large-scale cloud provider achieves approximately 65% server utilization rates versus 15% on-premises, which means when companies move to the cloud, they typically provision fewer than one-quarter of the servers than they would on-premises. In addition, a typical on-premises data center is 29% less efficient in their use of power compared to a typical large-scale cloud provider that uses world-class facility designs, cooling systems, and workload-optimized equipment. Adding these together (fewer




servers used plus more power efficient servers), customers only need 16% of the power as compared to on-premises infrastructure. This represents an 84% reduction in the amount of power required.

This massive improvement in energy efficiency drives a huge reduction in climate impact because less energy consumed means fewer carbon emissions. The climate impact improvements get even better when you factor in that the average corporate data center has a dirtier power mix than the typical large-scale cloud provider. Large-scale cloud providers (AWS included) use a power mix that is 28% less carbon intense than the global average.

Combining the fraction of energy required with a less carbon-intense power mix, customers can end up with a reduction in carbon emissions of 88% by moving to the cloud and AWS.

4.15 VENDOR CERTIFICATIONS (IF APPLICABLE) Vendor Certification: Provide a copy of all current licenses, registrations and certifications issued by federal, state and local agencies, and any other licenses, registrations or certifications from any other governmental entity with jurisdiction, allowing respondent to perform the covered services including, but not limited to, licenses, registrations, or certifications. Certifications can include M/WBE, HUB, and manufacturer certifications for sales and service.




4.15.1 AWS LETTER OF SUPPLY AS GOVERNMENT RESELLER




4.15.2 AWS GOVERNMENT COMPETENCY PARTNER The AWS Competency Program is designed to highlight partners who have demonstrated technical proficiency and proven customer success in specialized solution areas. Attaining an AWS Competency allows A&T to differentiate itself to customers by showcasing expertise in a specific solution area.

The AWS Cloud provides scalable, cost-efficient solutions for governments around the world. Our cloud services can be employed to meet mandates, reduce costs, drive efficiencies, and increase innovation across civilian agencies, national defense and intelligence communities, and state and local governments. AWS Government Competency Partners like A&T provide solutions to—and/or have deep experience working with—government customers to deliver mission-critical workloads and applications on AWS.

In the box below, we provide an excerpt from the notice A&T received when AWS certified it as a government-competency partner.

Messaging Guidance for Announcing Competency Achievement

Partners may announce their involvement in the Competency Program via press release, blogging, or Tweets. AWS does not provide AWS quotes for use in press releases to announce membership in the Competency Program. AWS does not need to review all supporting Social Media for the announcement as long as the messages contained in the release and/or blog are consistently replicated throughout all campaign elements.

As a courtesy, AWS PR must review the content, prior to going public, regarding announcement of the partner’s entry into the Competency Program to ensure consistency with AWS's messaging guidelines and brand voice. AWS final approval on a partner’s release will only be granted when the partner accepts all AWS feedback to the release and confirmed it will be included in final version. Please allow AWS PR at least 3-4 business days' notice to review properly. Partners should work directly with their AWS PDM on their press release. It is the PDMs’ responsibility to involve the US-based Competency Team (Rachel Rose [email protected]) and AWS PR for appropriate reviews.

Partner should keep the following key messages in mind when drafting their release on their Competency achievement (messages should not be used wholesale, partners should use their own interpretation):

The AWS Competency program is designed to highlight AWS Partner Network (APN) Partners who have demonstrated technical proficiency and proven customer success in specialized solution areas.

Attaining an AWS Competency allows partners to differentiate themselves to customers by showcasing expertise in a specific solution area.

Partners can qualify for one or more AWS Competency by having a strong overall AWS practice, showcasing customer success, and demonstrating technical readiness within the Competency.

Customers can be assured they are working with qualified partners since all partner products and solutions are validated by internal AWS teams (SA’s, product/service, PDMs, etc.).




4.15.3 AWS SOLUTION ARCHITECT CERTIFICATIONS A&T started 2014 with one cloud Solution Architect and three cloud engineers. Our retention at this point is 100% of that staff and significant growth so that we now have:

8 AWS Business Professional Accreditations 11 AWS Technical Professional Accreditations 9 Solutions Architect and SysOps Certifications A&T has grown its AWS Technical Professional staff from one in 2014 to 11 accredited staff today and our AWS Business Professionals from one in 2014 to nine today.

Below are certificates for the three individuals who will be available to NCPA customers: Deepak Dewangan, Tom Lynch, and Arit Udo.

4.15.3.1 DEEPAK DEWANGAN




4.15.3.2 TOM LYNCH




4.15.3.3 ARIT UDO




5 TAB 5 – PRODUCTS AND SERVICES / SCOPE • Respondent shall perform and provide these products and/or services under the terms of this agreement. The supplier shall assist the end user

with making a determination of their individual needs. • The following is a list of suggested (but not limited to) categories. List all categories along with manufacturer that you are responding with:

5.1 PRODUCT AND SERVICES EVALUATION CRITERIA A&T will make the 14 services stipulated in the RFP available to NCPA customers. We also look forward to assisting those NCPA customer users with determining solutions for their individual needs.

We will assist in two ways: continuous corporate research on cloud solutions and one-on-one consulting with NCPA customer stakeholders about their needs.

A&T has a fulltime Chief Technology Officer (CTO), Mureed Nazir, who has been with the company for 21 years and is very well versed in cloud technology. He is widely recognized as a preeminent cloud expert, evidenced by the fact that AWS selected him as a key speakers for its 2015 AWS Public Sector Symposium. Mr. Nazir attends numerous conferences and training sessions each year and is involved in numerous technical panels during which he learns about current technology. He works regularly with CORs and CIOs to inform them about new technologies that will benefit his customers.

5.1.1 ABILITY TO PROVIDE AND PERFORM THE REQUIRED SERVICES FOR THE CONTRACT Because A&T and NCPA customers have access to 1) the complete AWS catalog, including 35,000+ CLIN items, a number that updates monthly as AWS issues product releases, and 2) AWS’ Marketplace catalog for 3rd-party products, NCPA customers have access to all AWS and 3rd-party services. Furthermore, as the 14 items in Proposal Section 5.2 indicate, we can provide all required services. In addition, Proposal Section 8 provides information on added-value services that A&T can offer should an NCPA customer request them.

5.1.1.1 PRODUCT DELIVERY WITHIN PARTICIPATING ENTITIES SPECIFIED PARAMETERS A&T is able to provide products from AWS within hours after the NCPA customer successfully places an order. Commonly, products and services are available within 1 business day.

5.1.1.2 NUMBER OF LINE ITEMS DELIVERED COMPLETE IN NORMAL DELIVERY TIME AS % OF ITEMS ORDERED Because we are responding to an IDIQ vehicle that has not provided details on specific line items to be delivered in a specified timeframe, we will point to our record on other contracts where we have delivered specified products on time 100% of the time.

5.1.1.3 VENDOR’S ABILITY TO PERFORM TOWARDS ABOVE REQUIREMENTS AND DESIRED SPECIFICATIONS In the remainder of Proposal Section 5.2, we indicate that AWS has products for 13 items (Proposal Sections 5.2.1-5.2.12) and that we offer 3rd-party products for items in Proposal Sections 5.2.4, 5.2.6-5.2.13) available from AWS’ Marketplace.

5.1.1.4 QUANTITY OF LINE ITEMS AVAILABLE THAT ARE COMMONLY PURCHASED BY THE ENTITY Our experience on more than a dozen other cloud contracts is that offering 35,000 CLIN items and access to 2700+ products in 35 categories via the AWS Marketplace has always been sufficient.

We would add that should an NCPA client request an item that is not available via the A&T GSA catalog or the AWS Marketplace, we pledge to research availability of that request and to the best of our ability make it available.

5.1.1.5 QUALITY OF LINE ITEMS AVAILABLE COMPARED TO NORMAL PARTICIPATING ENTITY STANDARDS Because we are responding to an IDIQ vehicle that has not provided details on the quality of specific line items, we point to our record on other contracts where we have delivered specified quality 100% of the time and have never had a client indicate that product quality was unacceptable.




5.2 PRODUCTS AND SERVICES DETAIL 5.2.1 CLOUD STORAGE Manufacturer that A&T will use: AWS—Amazon S3, Amazon S3 IA, Amazon Glacier, Amazon EBS, AWS Import/Export Snowball, and AWS Storage Gateway

Figure 13 describes AWS products that A&T can provide and sources for additional detail. Figure 13. Detail on AWS Cloud Storage Products

Product Name OEM Service Description Amazon S3 & Amazon S3 IA

AWS Amazon S3 is storage for the Internet. You can use Amazon S3 to store and retrieve any amount of data, at any time, from anywhere on the web. Amazon S3 offers a range of storage classes designed for different use cases: Amazon S3 Standard for general-purpose storage of frequently accessed data, Amazon S3 Standard − Infrequent Access (Standard − IA) for long-lived, but less frequently accessed data, and Amazon Glacier for long-term archive.

Amazon Glacier AWS Amazon Glacier is a storage service optimized for infrequently used data, or “cold data.” The service provides secure, durable, and extremely low-cost storage for data archiving and backup. With Amazon Glacier, you can store your data cost effectively for months, years, or even decades. Amazon Glacier enables you to offload the administrative burdens of operating and scaling storage to AWS, so you don't have to worry about capacity planning, hardware provisioning, data replication, hardware failure detection and recovery, or time-consuming hardware migrations.

Amazon EBS AWS Provides block-level storage volumes for use with Amazon EC2 instances. Amazon EBS volumes are highly available and reliable storage volumes that can be attached to any running instance that is in the same Availability Zone. Amazon EBS volumes that are attached to an Amazon EC2 instance are exposed as storage volumes that persist independently from the life of the instance. With Amazon EBS, you only pay for what you use.

AWS Import/Export Snowball

AWS AWS Import/Export Snowball accelerates transferring large amounts of data between the cloud and portable storage devices that you mail to us. AWS transfers data directly onto and off of your storage devices using Amazon’s high-speed internal network. Your data load typically begins the next business day after your storage device arrives at AWS. After the data export or import completes, we return your storage device. For large data sets, AWS Import/Export is significantly faster than Internet transfer and more cost effective than upgrading your connectivity.

AWS Storage Gateway

AWS AWS Storage Gateway is a service that connects an on-premises software appliance with cloud-based storage to provide seamless and secure integration between your on-premises IT environment and AWS's storage infrastructure.

5.2.2 REMOTE STORAGE Manufacturer that A&T will use: Amazon Glacier and Amazon S3 that we described in 5.2.1.

As further background, we would note that for remote storage, NCPA customers may use the AWS cloud infrastructure built around regions and Availability Zones (AZs). A region is a physical location in the world where we have multiple AZs. AZs consist of one or more discrete data centers, each with redundant power, networking, and connectivity and housed in separate facilities. These AZs offer you the ability to operate production applications and databases that are more highly available, fault tolerant, and scalable than would be possible from a single data center. AWS currently has 13 regions and 35 AZs throughout the world: US East (Northern Virginia), US West (Oregon), US West (Northern California), AWS GovCloud (US) (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Singapore), Asia Pacific (Tokyo), Asia Pacific (Sydney), Asia Pacific (Seoul), Asia Pacific (Mumbai), South America (Sao Paulo), and China (Beijing). Information on each region can be found at the AWS Global Infrastructure webpage. Figure 14 depicts the current AWS regions and AZs, along with 4 new regions and 9 AZs that are coming online in 2016.

The AWS products and services that are available in each region are listed at the Region Table webpage.




Figure 14. Global Map of AWS Regions and Availability Zones

Figure 15 illustrates the relationship between regions and AZs.

Figure 15. Regions and Availability Zones

Availability and Reliability AWS takes extensive precautions to help ensure that we will remain fully operational, with no loss of service for our hosted applications. AWS replicates critical system components across multiple AZs to ensure high availability both under normal circumstances and during disasters such as fires, tornadoes, or floods. AZs consist of one or more discrete data centers, each with redundant power, networking, and connectivity and housed in separate facilities. Each AWS AZ runs on its own independent infrastructure, engineered to be highly reliable so that even extreme disasters or weather events should only affect a single AZ. The data centers’ electrical power systems are designed to be fully redundant and maintainable without impact to operations. Common points of failure, such as generators, UPS units, and air conditioning, are not shared across AZs.

At AWS, we plan for failure by maintaining contingency plans and regularly rehearsing our responses. In the words of Werner Vogels, Amazon’s CTO: “Everything fails, all the time.” We regularly perform preventative maintenance on our generators and UPS units to ensure that equipment is ready when needed. We also maintain a series of incident response plans covering both common and uncommon events, and update them regularly to incorporate lessons learned and prepare for emerging threats. In the days leading up to a known event such as a hurricane, we make preparations such as increasing fuel




supplies, updating staffing plans, and adding provisions like food and water to ensure the safety of the support teams. Once it is clear that a storm will impact a specific region, the response plan is executed and we post updates to the Service Health Dashboard throughout the event.

Note that AWS far exceeds the Uptime Institute Tiering certification. Tiering aspects do not take into consideration the nature of the services of the cloud environment, and although the uptime institution tiering can be a great guide, it ultimately does not accurately map to a cloud service provider organization. AWS does not have a Certified Uptime Tiering level; however, we operate a data center environment using N+1 architecture. AWS offers Service Level Agreements (SLAs) for services such as Amazon EC2 and Amazon EBS at 99.95%, and Amazon S3 with an SLA of 99.9%. Our generator backup capabilities are detailed in our Service Organization Control (SOC) Reports (as is our discussion regarding business continuity planning and N+1 architecture).

Hurricane Sandy Example Just before Hurricane Sandy struck (Oct 2012), A&T submitted an unsolicited DR plan that helped the State of Maryland avert catastrophic downtime. As a result, the Governor of Maryland issued a commendation for A&T. AWS’ blog cited this work, stating: “A&T Systems, an AWS Advanced Consulting Partner, used AWS in support of a statewide emergency management agency as Hurricane Sandy struck”

5.2.3 STORAGE VIRTUALIZATION Manufacturer that A&T will use: AWS—lacier and Amazon S3. See 5.2.1 above for details

5.2.4 FILE STORAGE Manufacturers that A&T will use: AWS (Amazon Elastic File System, EFS) and SoftNAS (SoftNAS)

Figure 16 describes AWS file storage product that A&T can provide and sources for additional detail. Figure 16. Detail on-File Storage Products

Product Name OEM Service Description Amazon EFS (Preview):

AWS A file storage service for Amazon EC2 instances. Amazon EFS is easy to use and provides a simple interface that allows you to create and configure file systems quickly and easily. With Amazon EFS, storage capacity is elastic, growing and shrinking automatically as you add and remove files, so your applications have the storage they need, when they need it. Sign up for the preview here.

SoftNAS SoftNAS SoftNAS Cloud for AWS is the leading cloud NAS on the AWS Marketplace. It extends native AWS storage (EBS, S3) to create an enterprise-class, full-featured cloud NAS filer. Safely migrate mission-critical applications to the AWS cloud without a physical storage appliance in minutes without specialized training. High-Availability is included at no extra cost for AWS users who deploy the two requisite instances. Key Features: Standard Edition up to 20 Terabytes (TB), NFS, CIFS and iSCSI support, 99.999% reliability with cross-zone High-Availability for private Virtual Private Clouds (VPCs) (SNAP HATM), cross-region block replication (SnapReplicateTM), consistent storage pool backup/restore through EBS snapshots, Active Directory integration, compression, deduplication, thin-provisioning, easy set-up and configuration wizards, intuitive admin interface (StorageCenterTM). 99.999% storage uptime, or it's free.

5.2.5 FILE VERSION HISTORY Manufacturer that A&T will use: AWS—AWS Service Catalog and AWS CodeCommit

Figure 17 describes file version history products that A&T can provide. Figure 17. Detail on AWS File-Version History Products

Product Name OEM Description Service Catalog AWS Allows NCPA users to manage multiple versions of products in their catalog: allows them to add new versions of templates

and associated resources based on software updates or configuration changes. When they create a new version of a product, the update is automatically distributed to all users who have access to the product, allowing the user to select which version of the product to use. Users can update running instances of product to the new version quickly and easily.

CodeCommit AWS A fully-managed source control service that makes it easy for companies to host secure, highly scalable private Git repositories. Eliminates need to operate your own source control system or worry about scaling its infrastructure. Use CodeCommit to store anything securely from source code to binaries, and it works seamlessly with your existing Git tools.




5.2.6 FILE COLLABORATION Manufacturers that A&T will use: AWS (SharePoint, Amazon WorkDocs), Bitfusion (AeroFS), Aspera (Aspera), Digitalbucket, Globalscape (EFT Enterprise), Unlimi-Tech Software (FileCatalyst), and iRODS (iRODS).

Figure 18 describes collaboration products that A&T can provide. Figure 18. Detail on AWS Cloud File-Collaboration Products

Product Name OEM Description AWS SharePoint AWS Run SharePoint on AWS to rapidly deploy and scale your collaboration platform. Take advantage of the benefits that

the AWS cloud offers such as pay-as-you-go pricing, scalability, and data integrity to run your SharePoint workloads today. AWS provides options for using existing Microsoft licenses. You have a choice of several versions with options for size, payment, licensing, and type of deployment. Available as a single AMI or a CloudFormation template that defines a starter architecture with features for redundancy, scaling, and load balancing built in. Get started today to take advantage of popular SharePoint Enterprise features like enterprise search, workflow management, mobility support, social integration, business intelligence, advanced document management and more.

WorkDocs AWS Amazon WorkDocs is a fully managed, secure enterprise storage and sharing service with strong administrative controls and feedback capabilities that improve user productivity. Users can comment on files, send them to others for feedback, and upload new versions without having to resort to emailing multiple versions of their files as attachments. Users can take advantage of these capabilities wherever they are, using the device of their choice, including PCs, Macs, tablets and phones. Amazon WorkDocs offers IT administrators the option of integrating with existing corporate directories, flexible sharing policies and control of the location where data is stored.

AeroFS Bitfusion File syncing and collaboration product built for the enterprise. Aspera Aspera Helps organizations collect, distribute and exchange large files and data sets across global distances, enabling a

variety of workflows for fast, efficient collaboration between globally distributed teams. ... The protocol also supports resume of file transfers.

Digitalbucket.net digitalbucket.net

Delivers a reliable, scalable, and customizable on demand File Sharing and Collaboration platform and services for Individuals and Businesses to store and retrieve any type of data on the web. With the growing world of e-business and the reality of on demand solutions replacing more traditional ways of managing and running businesses, digitalbucket.net allows businesses to store their digital assets and access them from anywhere anytime and be able to collaborate with others.

EFT Enterprise Globalscape Managed File Transfer (MFT) server that sits at the edge of your Amazon VPC network. Partners can deposit files using a dedicated client application that supports SFTP or FTPS, a modern web browser using Hyper Text Transfer Protocol Security (HTTPS) and HTML5, or EFTs mobile client, which includes built-in Enterprise Mobility Management (EMM) controls for file access, preview, and sharing. .Customize EFT with optional add-on modules, such as the OpenPGP module for advanced encryption, the Workspaces module for team collaboration or virtual deal rooms, and the Content Integrity module for integration with your existing DLP and AV solutions.

FileCatalyst Unlimi-Tech Software

Collaboration and information sharing are essential and constantly occurring practices in organizations - often taking the form of file transfer. Quick communication is key and slow or failed file transfers can stand in the way of productivity. International file transfers are especially challenging, frequently disconnecting and almost never reaching full line speed. .FileCatalyst Direct is a software-only file transfer solution that provides accelerated, secure, reliable delivery and file transfer tracking and management. ... Global organizations use FileCatalyst to solve issues related to file transfer, including content distribution, file sharing and offsite backups.

iRODS iRODS Consortium

Extremely flexible data grid middleware for managing huge amounts of files and other unstructured data. iRODS provides a data virtualization layer that makes data available in a single namespace, even if it is spread over local and remote storage devices, whether the storage is file- or block-based. ... And iRODS provides a secure collaboration capability that allows users to share data between independently-managed Zones, so users can access data from a consistent platform, but administrators do not need to compromise on policy.

5.2.7 DATA BACKUP AND ARCHIVING Manufacturers that A&T will use: AWS (Amazon Glacier, AWS Storage Gateway), CommVault (Commvault), and CloudBerry (Cloudberry)

Figure 19 describes AWS data backup and archiving product that A&T can provide.




Figure 19. Detail on Backup and Archiving Products Product Name OEM Service Description Amazon Glacier AWS Storage service optimized for infrequently used data, or “cold data.” The service provides secure, durable, and

extremely low-cost storage for data archiving and backup. With Amazon Glacier, you can store your data cost effectively for months, years, or even decades. Amazon Glacier enables you to offload the administrative burdens of operating and scaling storage to AWS, so you don't have to worry about capacity planning, hardware provisioning, data replication, hardware failure detection and recovery, or time-consuming hardware migrations.

Amazon Storage Gateway

AWS Service connecting an on-premises software appliance with cloud-based storage to provide seamless and secure integration between an organization’s on-premises IT environment and AWS’s storage infrastructure. The service allows you to store data securely in the AWS cloud for scalable and cost-effective storage. The AWS Storage Gateway supports industry-standard storage protocols that work with your existing applications. It provides low-latency performance by maintaining frequently accessed data on-premises while securely storing all of your data encrypted in Amazon S3 or Amazon Glacier.

Cloudberry Cloudberry Cloudberry Explorer allows accessing/managing of Azure storage accounts and moving files and folders between your computer and cloud storage. Cloudberry Explorer for Microsoft Azure comes in two versions – Freeware and PRO. Freeware client for Azure Blob Storage allows tracking, analyzing and debugging your usage of storage. It also comes with full support for Microsoft Azure Storage Analytics. Supported Operating System (OS): Windows 7 or higher; Windows Server 2008 or higher System requirements: Microsoft .NET Framework 4.0, 1.4 GHz 64-bit processor, 512 MB RAM, 32 Gigabit (GB) minimum disk space, GB (10/100/1000baseT) Ethernet adapter

Commvault CommVault Companies have many reasons for choosing AWS when they migrate to the cloud — with agility, cost, reach, security and compliance topping the list. Commvault lets you reap all those benefits and more by making it easy to build, run and protect your applications and infrastructure in the AWS cloud. As an APN Advanced Technology Partner and Storage Competency Partner, we support the full range of AWS storage options. From day-to-day backup and recovery to long-term archiving, Commvault makes it easier to migrate your data to and from the AWS cloud. Our indexing and cataloging simplify search and retrieval of your data down to the file level — speeding up recovery. By enabling automated, policy-based data movement between your on-premises storage and server infrastructure, we give you the flexibility to store data in Amazon S3 or Amazon Glacier, or move entire workloads directly into EC2 instances. You can even migrate remote offices and data centers to AWS to streamline infrastructure and control costs. DR in Amazon EC2 cover all your workloads — not just tier 1.

5.2.8 DATA AUDITS Manufacturers that A&T will use: AWS (Amazon CloudTrail, Amazon WorkDocs), CloudCheckr (CloudCheckr), SolarWinds (DNS Audit), and Tenable (Nessus)

Figure 20 describes AWS data audit tools that A&T can provide. Figure 20. Detail on Data Audit Products

Product Name OEM Service Description CloudTrail AWS A web service that records AWS API calls for your account and delivers log files to you. The recorded information

includes the identity of the API caller, the time of the API call, the source Internet Protocol (P) address of the API caller, the request parameters, and the response elements returned by the AWS service. With CloudTrail, you can get a history of AWS API calls for your account, including API calls made via the AWS Management Console, AWS SDKs, command line tools, and higher-level AWS services (such as AWS CloudFormation). The AWS API call history produced by CloudTrail enables security analysis, resource change tracking, and compliance auditing.

WorkDocs AWS See description in Proposal Section 5.2.6. CloudCheckr CloudCheckr CloudCheckr provides a comprehensive collection of over 250 proprietary and configurable checks relating to

compliance policies. Checks cover the categories of Availability, Cost, Security, and Usage to ensure proper configuration and compliance. With individual and multi account visibility, color coded priority, and automated alerting, policy enforcement is made easy even in the most complex environments. Each check offers drill down functionality to ensure immediate identification of relevant resources, details, and users. Check descriptions deliver explanations of the violation’s importance and provide instructions for mitigation. Embedded trend graphs allow users to assess the frequency of each particular concern. Customization enables users to configure checks for personalized reporting, depending upon the particular needs of their individual environment. Ignore and suppress features ensure that users do not encounter time consuming false positive results. Benefit to NCPA customers: CloudCheckr provides security, cost, and usage reporting and analytics to help manage AWS deployments.

DNS Audit Tool Solarwinds Helps you locate DNS errors in the database by scanning a range of IP addresses and performing reverse DNS




Product Name OEM Service Description lookups for each address. If DNS Audit receives a DNS response for an address, it then attempts a forward DNS lookup to verify that the forward lookup resolves to the originally scanned IP address.

Nessus Tenable Tenable provide the most flexible deployment and scanning options for AWS customers. AWS users can deploy Nessus on-premises or in the AWS cloud to quickly and easily to secure their AWS environment. Tenable solutions perform auditing of the AWS environment to ensure infrastructure is hardened and correctly configured per AWS best practices and industry standards. With Nessus Enterprise for AWS, customers can scan their AWS instances to identify vulnerabilities and detect malware. Tenable’s Nessus provides peace of mind by ensuring that critical IT applications are hardened and secure whether hosted on premise or in the AWS cloud.

5.2.9 EXTERNAL FILE SENDING Manufacturers that A&T will use: AWS (AWS SharePoint; AWS Snowball; AWS Database Migration Service; AWS DirectConnect), Cloudberry (Cloudberry), CommVault (Commvault), Globalscape (EFT Enterprise); Unitrends (Unitrends), and Zamanda (Amanda Enterprise Network and Carbonite Server Hybrid Backup)

A&T’s interpretation of external file sending: How to move files from any location to Cloud or back

Types of data to move: files and folders, backups, databases, etc.

Task types: Move large quantities of data: AWS Snowball Database migration: AWS Database Migration Service Backups from on premise to Cloud: CommVault, CloudBerry, Unitrend, and Zamanda Amanda

Enterprise and Carbonite Secure connectivity between on-premise and cloud: AWS DirectConnect

Figure 21 describes external file sending tools that A&T can provide. Figure 21. Detail on External File Sending Products

Product Name OEM Service Description AWS Database Migration Service

AWS Helps migrate databases to AWS easily and securely. The source database remains fully operational during the migration, minimizing downtime to applications that rely on the database. Can migrate your data to and from most widely used commercial and open-source databases. The service supports homogenous migrations such as Oracle to Oracle, as well as heterogeneous migrations between different database platforms, such as Oracle to Amazon Aurora or Microsoft SQL Server to MySQL. It also allows you to stream data to Amazon Redshift from any of the supported sources including Amazon Aurora, PostgreSQL, MySQL, MariaDB, Oracle, SAP ASE and SQL Server, enabling consolidation and easy analysis of data in the petabyte-scale data warehouse. AWS Database Migration Service can also be used for continuous data replication with high-availability.

AWS DirectConnect

AWS Makes it easy to establish a dedicated network connection from your premises to AWS. Using AWS Direct Connect, you can establish private connectivity between AWS and your datacenter, office, or colocation environment, which in many cases can reduce your network costs, increase bandwidth throughput, and provide a more consistent network experience than Internet-based connections. Lets you establish a dedicated network connection between your network and one of the AWS Direct Connect locations. Using industry standard 802.1q VLANs, this dedicated connection can be partitioned into multiple virtual interfaces. This allows you to use the same connection to access public resources such as objects stored in Amazon S3 using public IP address space, and private resources such as Amazon EC2 instances running within an Amazon VPC using private IP space, while maintaining network separation between the public and private environments. Virtual interfaces can be reconfigured at any time to meet your changing needs.

AWS SharePoint AWS See Proposal Section 5.2.6 AWS Snowball AWS AWS Import/Export is a service that accelerates transferring large amounts of data into and out of AWS using

physical storage appliances, bypassing the Internet. AWS Import/Export has two features that support this functionality in two different ways, AWS Snowball (Snowball) and AWS Import/Export Disk (Disk). With AWS Snowball (Snowball), you can transfer hundreds of terabytes or petabytes of data between your on-premises data centers and Amazon S3. Snowball uses Snowball appliances and provides simple interfaces that you can use to create jobs, transfer data, and track the status of your jobs through to completion. By shipping your data in Snowballs, you can transfer large amounts of data at a significantly faster rate than if you were transferring




Product Name OEM Service Description that data over the Internet, saving you time and money. For files folders, archives (backups or snapshots), backups of databases.

Cloudberry Cloudberry See Proposal Section 5.2.7 Commvault CommVault See Proposal Section 5.2.7 Unitrends Unitrends Unitrends delivers award-winning business recovery solutions for any IT environment. The company’s portfolio of

virtual, physical and cloud solutions provides adaptive protection for organizations globally. To address the complexities facing today’s modern data center, Unitrends delivers end-to-end protection and instant recovery of all virtual and physical assets as well as automated disaster recovery testing built for virtualization. With the industry’s lowest total cost of ownership, Unitrends’ offerings are backed by a customer support team that consistently achieves a 98 percent satisfaction rating. Unitrends’ solutions are also sold through a community of thousands of leading technology partners, service providers and resellers worldwide.

Amanda Enterprise Carbonite

Zmanda Amanda Enterprise Network Backup: Explosive data growth, combined with demanding requirements for data availability, has placed a tremendous burden on IT operations staff at businesses of all sizes. Yet, many organizations do not have the staff or budget to purchase and manage complex and expensive backup and recovery software products. Amanda Enterprise was designed to address these challenges–providing a backup and recovery solution that combines fast installation, simplified management, enterprise-class functionality, and low-cost subscription fees. As an open source product, Amanda Enterprise only uses standard formats and tools — effectively freeing you from being locked into a vendor to recover your archived data. Avoid the high cost of data loss by not losing it in the first place. Carbonite Pro workstation backup for small and midsize businesses helps prevent accidental deletion by automatically backing up computer files with no human intervention. It protects an unlimited number of computers, external hard drives (EHD) and network attached storage (NAS) in the cloud with a single subscription, and it includes free mobile apps for file sharing and anytime, anywhere access to work data

5.2.10 FILE PREVIEWS Manufacturers that A&T will use: AWS (AWS SharePoint); Globalscape (EFT Enterprise)

Figure 22 describes file preview products that A&T can provide. Figure 22. Detail on File Preview Products

Product Name OEM Description AWS SharePoint AWS See Proposal Section 5.2.6 EFT Enterprise Globalscape MFT server that sits at the edge of your Amazon VPC network. Partners can deposit files using a dedicated client

application that supports SFTP or FTPS, a modern web browser using HTTPS and HTML5, or EFTs mobile client, which includes built-in EMM controls for file access, preview, and sharing. .Customize EFT with optional add-on modules, such as the OpenPGP module for advanced encryption, the Workspaces module for team collaboration or virtual deal rooms, and the Content Integrity module for integration with your existing DLP and AV solutions.

5.2.11 VIDEO STREAMING Manufacturers that A&T will use: AWS—Amazon CloudFront; Adobe (Adobe Media Server); Microsoft (IIS Live Smooth Streaming); and Wowza (Wowza Streaming Engine)

Figure 23 describes AWS video streaming products that A&T can provide. Figure 23. Detail on Video Streaming Products

Product Name OEM Service Description Amazon CloudFront

AWS Amazon CloudFront is a content delivery web service. It integrates with other AWS Cloud services to give developers and businesses an easy way to distribute content to end users with low latency, high data transfer speeds, and no commitments.

Adobe Media Server

Adobe Use Adobe Media Server version 5.0 to stream live performances, webinars, and other events. Adobe Media Server on AWS is an easy, affordable and scalable way to deploy multiprotocol media streaming. Dynamic Hyper Text Transfer Protocol (HTTP) Packaging, protected HTTP streaming, and DRM support for Apple HLS enable a single packaging and protection workflow for delivering all your video assets to the broadest device landscape. Besides HTTP Streaming, Adobe Media Server enables real time communication using the RTMFP protocol. The number of RTMFP connections across different type of instances




Product Name OEM Service Description IIS Live Smooth Streaming

Microsoft Live Smooth Streaming, an IIS Media Services extension, enables adaptive streaming of live events to Smooth Streaming clients, such as Microsoft Silverlight. Using HTTP to deliver live events takes advantage of the scale of existing HTTP networks and keeps content close to your viewers, making true HD (720p+) a realistic option for live web broadcasts. The additional advantage of using HTTP-based delivery for live events is that the existing HTTP infrastructure also drastically increases live event availability. For the most popular live web broadcasts, CDNs and content providers worry about how much capacity they can dedicate on their resource-constrained streaming network. By using HTTP, they can take advantage of all resources of their network and don't have to worry about maxing out network capacity and shutting out users from live events.

Wowza Streaming Engine

Wowza Create live streaming sessions for global delivery using CloudFront. Wowza Streaming Engine 4.2 supports the following HTTP based streaming protocols: HLS (HTTP Live Streaming); HDS (HTTP Dynamic Streaming); Smooth Streaming; and MPEG DASH. When a user streams a video using one of the above protocols, the video is broken into smaller chunks that are cached in the CloudFront network for improved performance and scalability.

5.2.12 OFF-LINE FILE ACCESS Manufacturers that A&T will use: AWS (AWS Snowball); NetApp (ONTAB)

Interpretation of off-line file access: Use the cloud for content storage such as backups, files and folders, etc., with a way to retrieve the files in case a connection to cloud is unavailable or content is too voluminous to download via Internet connection.

Figure 24 describes off-line file access products that A&T can provide. Figure 24. Detail on Off-Line File Access Products

Product Name OEM Service Description AWS Snowball AWS See Proposal Section 5.2.9 for large-file transfer from AWS to a local site ONTAP Cloud NetApp NetApp OnCommand Cloud Manager is the required installation and deployment software for NetApp ONTAP Cloud

storage software service. Cloud Manager provides management for your cloud and hybrid cloud storage environment based on NetApp ONTAP software, including ONTAP Cloud, ONTAP Cloud High Availability, NetApp AFF and FAS storage systems. Cloud Manager eases the day-to-day requirements of your ONTAP software environment including configuring, provisioning, and monitoring each of your active virtual and hardware storage nodes. It offers a point-and-click installation that automatically selects and assigns cloud resources to each instance. When deploying ONTAP Cloud, Cloud Manager will use your AWS credentials to select the EC2 virtual machine and the EBS storage necessary to run the instance of your choice. When deploying Cloud Manager, you can provide your IAM profile.

5.2.13 MOBILE FILE ACCESS Manufacturer that A&T will use: Bitnami (ownCloud), FileCloud (FileCloud), Gladinet (Gladinet Cloud Enterprise), Globalscape (EFT Enterprise), and Pydio (Pydio Enterprise)

Figure 25 describes 3rd-party mobile file access products that A&T can provide. Figure 25. Detail on 3rd-Party Mobile File Access Products

Product Name OEM Description EFT Enterprise Globalscape MFT server that sits at the edge of your Amazon VPC network. Partners can deposit files using a dedicated client

application that supports SFTP or FTPS, a modern web browser using HTTPS and HTML5, or EFTs mobile client, which includes built-in EMM controls for file access, preview, and sharing. .Customize EFT with optional add-on modules, such as the OpenPGP module for advanced encryption, Workspaces module for team collaboration or virtual deal rooms, and Content Integrity module for integration with existing DLP and AV solutions.

FileCloud FileCloud Leading, self-hosted file sharing, sync and mobile access for Businesses. .FileCloud client apps are available for all the desktop and mobile operating systems ( Windows, Mac , Linux, iOS, Android and Windows Phone 8). Our 5 star rated mobile apps provide secure access to organization content from anywhere. In addition to file sharing and sync, FileCloud also provides endpoint backup, data leak prevention (DLP) and Health Insurance Portability and Accountability Act (HIPAA) compliant auditing. .FileCloud can save you over 10,000 USD for 100 user licenses when compared to the similar enterprise file share and sync products.

Gladinet Cloud Enterprise

Gladinet Enterprise file sync and share solution based on Amazon S3 with unified, managed access for mobile devices, desktops and file servers. Instantly migrate existing file shares and permissions to the cloud and access them with existing AD identities from any device.

ownCloud Bitnami Pre-configured, ready to run image for running ownCloud on Amazon EC2. ownCloud is a flexible, open source file sync and share solution. Whether using a mobile device, a workstation, or a web client, it provides the ability to




Product Name OEM Description access files on any device in one simple-to-use, secure and controlled solution

Pydio Enterprise Pydio Self-hosted file sharing, sync and mobile access for Businesses. Using AWS infrastructure, you can start your own branded, file storage solution in few minutes at a compelling price point. Pydio's client apps are available for all the major desktop and mobile operating systems ( Windows, Mac , Linux, iOS, and Android).

5.3 A&T SYSTEMS AS A VIABLE, ROBUST NCPA CLOUD PRIME CONTRACTOR A&T offers a compelling case for candidacy as prime contractor on NCPA’s cloud contract. We are a small business that combines significant experience of successfully performing programs with nationwide reach, supporting state and local governments for their information technology (IT) needs, excellent standing in the AWS vendor network, financial stability reflected in our D&B rating of 3A2, and the flexibility/responsiveness that are hallmarks of highly effective small businesses. A&T is an Advanced Consulting Partner and Authorized Reseller for AWS. A&T has an excellent relationship and deep expertise in all aspects of AWS offering. One of the reasons for our excellent, unique relationship with AWS is that A&T offers AWS cloud only. We maintain relationship at all levels within AWS including Vice President of Amazon responsible for the World Wide Public Sector. We have established many PMOs in our 32-year history, two of which exceed the NCPA scale. On the USARC contract for Voice Communications and Secret Internet Protocol Network, we served 950+ Army sites in all 50 states for 9 years. We employed 80+ fulltime staff and 100+ field service vendors on T.O.s that generated $160M in revenue and a monthly telecommunications spend of $1.5M that A&T paid in advance on USARC’s behalf. For VA, the department selected us as a system integrator on the $200M National Mobile Devices and Services (NMDS) IDIQ contract with only three awardees—A&T, AT&T, and Verizon. We have had customer sites in 39 states, managed 20,000 wireless devices for scores of VA facilities, and had all four national telecom carriers under subcontract via VA Letters of Authorization. For NMDS we support our telecom effort with a cloud environment. In the cloud realm, we operate two PMOs for which we coordinate multiple clients in a complex organization similar to the NCPA contract. The first provides cloud Professional Services (PS) and cloud usage to USGS where our CTO is leading a USGS architecture/migration team with 50+ members representing 60+ departments. USGS gained sufficient confidence in A&T’s expertise to authorize hiring 24 staff not in the original contract. Finally, for the State of Maryland DoIT, A&T has supported DoIT for the last 9 years, during which Maryland’s cloud environment has emerged. A&T recently handled DoIT’s migration to the cloud, and DoIT plans to gather existing/emerging cloud projects with scores of Maryland departments under its umbrella with A&T managing that consolidation effort. In sum, A&T has the infrastructure—back-office, contract negotiation/management, and program management experience to handle a national effort—a transferable skill we will apply to this contract.

5.4 AWS AS A ROBUST CSP As Figure 26 in Gartner’s 2015 report indicates visually, AWS is the leading IaaS CSP. Gartner wrote that “AWS is a thought leader; it is extraordinarily innovative, exceptionally agile, and very responsive to the market. It has the richest array of IaaS features and PaaS-like capabilities. It continues to rapidly expand its service offerings and offer higher-level solutions. Although it is beginning to face more competition from Microsoft and Google, it retains a multiyear competitive advantage. Although it will not be the ideal fit for every need, it has become the ‘safe choice’ in this market, appealing to customers who desire the broadest range of capabilities and long-term.”

Gartner Report—2015 IaaS Assessment “[AWS] is the overwhelming market share leader, with over 10 times more cloud IaaS compute capacity in use than the aggregate total of the other 14 providers in this Magic Quadrant. AWS is a thought leader; it is extraordinarily innovative, exceptionally agile, and very responsive to the market. It has the richest array of IaaS features and PaaS-like capabilities. It is the provider most commonly chosen for strategic adoption.




Amazon has a long history of using a decentralized IT infrastructure. This has enabled our development teams to access compute and storage resources on demand, increasing overall productivity and agility. By 2005, Amazon had spent over a decade and millions of dollars building and managing the large-scale, reliable, and efficient IT infrastructure that powered one of the world’s largest online retail platforms. Amazon launched AWS so that other organizations could benefit from Amazon’s experience and investment in running a large-scale, distributed, transactional IT infrastructure. AWS has been operating since 2006, and currently supports an almost limitless variety of workloads for over a million customers in 190 countries (Figure 27).

Figure 27. 2000+ Government Agencies, 5000 Educational Customers, and 17,500+ Nonprofits Use AWS’ Cloud

The AWS cloud is uniquely positioned to provide scalable, cost-efficient solutions to the U.S. federal government; helping find ways cloud services can be employed to meet mandates, reduce costs, drive

Figure 26. Gartner Magic Quadrant for May 2015 Shows AWS as the Dominant Cloud IaaS Player




efficiencies, and increase innovation. Over 2,000 government agencies already use AWS to address a diverse set of use cases, from complex government systems, to mission-critical intelligence projects dealing with large volumes of sensitive data.

Figure 28. High-Level View of the AWS Cloud Platform

AWS offers a broad set of global compute, storage, database, analytics, application, and deployment services, all listed at http://aws.amazon.com/products/. Figure 28 is a simple view of the AWS cloud platform and associated services. AWS offerings come with a range of supporting components: e.g., management tools, networking services, and application augmentation services, with multiple interfaces to AWS Application Programming Interface (API)-based services, including SDKs, Integrated Development Environment (IDE) toolkits, and Command Line Tools: http://aws.amazon.com/tools/.




8 TAB 8 – VALUE ADDED PRODUCTS AND SERVICES Include any additional products and/or services available that vendor currently performs in their normal course of business that is not included in the scope of the solicitation that you think will enhance and add value to this contract for Region 14 ESC and all NCPA participating entities.

8.1 EVALUATION CRITERIA FOR VALUE ADDED SERVICES DESCRIPTION, PRODUCTS, AND/OR SERVICES 8.1.1 MARKETING AND TRAINING A&T proposed a robust marketing effort for its products and services that we elaborated in the following three proposal sections: 4.4 (description of organization), 4.10 (marketing plan), and 4.11 (introducing NCPA to A&T staff).

For training, our standard AWS solution includes a 2-hour training and AWS setup session followed by availability as customers indicate any subsequent issues. The training includes guidance on setting up the AWS operation and instruction on how to access the AWS catalog, Marketplace, and reports that provide transparency about the customer’s AWS utilization.

8.1.2 CUSTOMER SERVICE Proposal Section 4.13 provides a detailed description of our customer service. We would also state that we have consistently received outstanding references that include these two notable items:

1. In its Contractor Performance Assessment Reporting System (CPARS) rating, USGS have us an “exceptional”

2. At its 2016 Public Sector Summit, AWS awarded a City on a Cloud “Best Practices” citation to the DCHBX for innovations on its Cloud Services project. As a prime contractor on this project, A&T provided AWS IaaS, PaaS, security ATO, and customer service that contributed to the project’s success, so DC HBX officials invited A&T to join them as they received the AWS award (Proposal Section 4.2). DCHBX officials noted that when they implemented their healthcare website that involves customer service using AWS products, the launch was flawless. They were ecstatic with the product and A&T’s service.

8.2 OTHER VALUE ADDED PRODUCTS AND SERVICES 8.2.1 A&T CLOUD 1-2-3 A&T supports the entire cloud lifecycle as easy as 1-2-3, providing cloud governance, PS, and MS.

Cloud 1—Governance Model Effective IT governance helps in successfully aligning IT with business needs. A&T has developed the “A&TVantage™ Cloud Governance Model” (Figure 32) that leverages A&T experience in Public-Sector focused Cloud solutions, managed services, and deep understanding of industry best practices.

A&T assists clients with three types of governance issues: technical, business/organizational, and legal. Examples of each type:

TECHNICAL: Change and data management policies, compliance with technical and security requirements, high availability, redundancy, DR

Figure 32. A&T Cloud Governance Model




BUSINESS/ORGANIZATIONAL: CSPs technical/financial status, division of responsibility within organization, cloud policies and processes, and risk

LEGAL: Privacy laws; data breaches; who owns technology, service, and interfaces; liability for data breaches; policies to provide digital forensics data

Cloud 2—Professional Services BENEFITS OF USING A&T PROFESSIONAL SERVICES 1. Government staff can concentrate on their own existing competencies 2. Government staff do not need to incur steep learning curve to become conversant with cloud technical

details 3. Developing governance structure is more efficient and faster 4. Government obtains an optimal architectural design more quickly 5. Fast Solution Guarantee: A&T can deliver a preliminary solution in 3 days or less 6. Move to the cloud with confidence by leveraging the experience of A&T cloud architects and

engineers Our experience has shown that often after clients acquire AWS Cloud services, they struggle with one of two dilemmas: 1) they possess internal expertise to support the Cloud environment but lack sufficient labor resources to support it as they might wish or 2) they lack internal expertise to implement and manage the environment and create/maintain associated governance policies. A&T can help by providing these activities (also see Figure 33)




1. Process: Decide what to move to the cloud 2. Governance plan: Identify IT governance domain objectives and deliverables 3. Delivery: Decide how to deliver cloud–IaaS, PaaS, or SaaS 4. Deployment: Decide how to deploy cloud–public, private, hybrid, community cloud 5. Formation: Determine form–internal/external 6. Governance solution: Create policies for risk, security, compliance 7. Evaluate, improve, adapt: Changes–technology laws, organization, and personnel

Figure 33. A&T’s Professional Services Model Element 1. Process 2. Gov Plan 3. Delivery 4. Deployment 5. Formation 6. Gov Solution 7. Improve/Adapt

Phase Initiate Discover Design Migrate Integrate Validate Operate Optimize

Cloud 1-2-3

Activity Visualize Strategize Assess

Discover apps Analyze Prioritize

Design solution Set patterns Create plan Test plan

Deploy core infrastructure Prepare current Infrastructure Move apps, services, data

Integrate: • Infrastructure • Applications • Operations

Validate functionality Evaluate performance Get business acceptance

Do transition Deliver services Plan cutover & legacy decom Review governance & security

Evaluate migration Assess DevOps Continually integrate & deploy

Cloud 3—MS A&T is already handling O&M support for numerous Federal, State, and Municipal clients. Figure 34 (on two pages) provides detail about A&T’s MS offering.




Figure 34. A&T’s Can Support All NCPA Customer Managed Services Needs




8.2.2 TOOLS THAT A&T HAS EXPERIENCE SUPPORTING Figure 35 indicates tools that A&T uses in the governance process and has experience supporting.

Figure 35. Technical Tools, Methods and Resources to Support Cloud Hosting Governance A&T Tools provide innovative, leading-edge technology that contribute to cost savings and enhanced productivity

# Gov. Topics

Tools, Methods And Resources For Performing Governance Services

1 Data Integrity & Security

A&T uses AWS IAM, AWS security group, and Check Point virtual appliance to manage security of VPC

2 VPC Design & DR

A&T has many certified AWS Cloud architects who work with customers to architect their VPCs to address specific needs of scalability, redundancy or services. We address security needs using CheckPoint, Sophos, Imperva, or Alert Logic for Intrusion Detection System (IDS) and Intrusion Prevention (System (IPS), AWS Security Groups and AWS IAM; backup needs using CommVault backup solutions; monitoring and performance optimization using AWS tools and CloudCheckr. We design each solution carefully to add DR options based on customers recovery point objectives, recovery time objectives and uptime requirements. We use disaster VPC in a geographically different zone or even a region with automatic synchronization and failover and fail back setups.

3 Identity & Access Mgt

A&T uses IAM to manage customer access to console using two-factor authentication and PKI access keys for access to S3 storage and EC2 instances. We also use virtual gateway appliances such as Check Point to add the IDS/IPS security layer and bring secure VPN capabilities. For Windows environments, we use AD for access control and management to Windows servers.

4 Deployment, Administration, & Account Mgt

After successful deployment, our NOCC configures all required MS such as monitoring, backups and inventory of services and automated reporting and invoicing setup. NOCC is also responsible for all adds, moves, and changes to the entire environment.

5 Resource Monitoring & Mgt

A&T uses AWS CloudWatch to monitor/manage all AWS provided products/services and metrics: e.g., CPU, traffic, memory, utilization, costs against predefined thresholds. We also use Level Platforms and Nagios at the OS level to monitor all application services/queues. A&T’s NOCC handles patch management, upgrade and monitoring and management of firewall IDS/and IPS.

6 Cost Optimization Mgt

A&T uses CloudCheckr, AWS Trusted Advisor, and AWS CloudWatch to analyze costs against utilizations and budgets. We configure predefined thresholds to set limits and alarms. We use the same tools to generate trend report to build future scalability and growth planning and provide cost estimates to budgetary purposes. We also use these tools to identify cost savings options to optimize use of the AWS resources by scaling up/down based on usage trends and using more efficient instances if use is lower.

7 Cloud Infrastr & Foundation Services

AWS offers a broad set of global compute, storage, database, analytics, application, and deployment services to power a wide variety of workloads including: web and mobile applications, data processing and warehousing, storage, archive, and many others. These foundations services can be purchased from AWS console.

8.2.3 GENERAL CLOUD TOOLS THAT A&T CAN SUPPORT Figure 36 describes 3rd-party cloud tools we have cited in our proposal and indicates their benefits.

Figure 36. 3rd-Party Cloud Tools that A&T Uses to Support PEs Tool Name Description Of Tool Benefit To NCPA

FIREWALL Alert Logic

Our managed web application firewall is your frontline defense against attacks. Deployment models match your requirements and offer 24x7 monitoring for solid protection against compromises.

These 3rd party firewall tools provide additional network, systems and end-user protection adjacent to the AWS cloud firewalls. They can help meet FISMA Moderate and High qualifications

CheckPoint

Accounting, auditing and tax resources that work with standard Microsoft Word® and Excel® or paperless engagement software. Use Checkpoint Tools individually or together for a complete end-to- end solution.

Sophos

Standalone program that allows you to perform a quick scan of your computer for computer viruses. If any infections are found it will attempt to remove them for free. As this program only scans your computer and remove any infections it finds, it can be used even if you have another anti-virus product installed.

BACKUP AND RECOVERY




Tool Name Description Of Tool Benefit To NCPA

Cloudberry

Cloudberry Explorer allows accessing and managing Azure storage accounts as well as moving files and folders between your computer and cloud storage. Cloudberry Explorer for Microsoft Azure comes in two versions – Freeware and PRO. Freeware client for Azure Blob Storage allows tracking, analyzing and debugging your usage of storage. It also comes with full support for Microsoft Azure Storage Analytics. Supported OS: Windows 7 or higher; Windows Server 2008 or higher System requirements: Microsoft .NET Framework 4.0, 1.4 GHz 64-bit processor, 512 MB RAM, 32 GB minimum disk space, Gigabit (10/100/1000baseT) Ethernet adapter

These 3rd party backup and recovery tools help to perform data backup along with AWS Snapshots. They can help meet FISMA Moderate and High qualifications

CommVault

Data/information management software, used for data protection & backup.

Zamanda

Backup of open files (Volume Shadow Services must be enabled) Backs up NTFS file system. Uses open format for backup images (ZIP64) Client backup compression using deflate algorithm Client configuration tool ZWCconfig. Allows configuration of ports that are used and amanda server name. Support for exclude patterns (wildcard * is supported, full path must be specified) Install shield based installer.

MONITORING AND MANAGEMENT Level Platforms

Remote monitoring and management software products and services for managed services providers (MSPs), IT service providers and Value Added Resellers (VARs) that provide IT support services for small and medium size businesses. The platform delivers integrated monitoring, management/automation capabilities, allowing service providers to manage all IT environments —computers, security, apps, IP telephony, cloud services from a single web-based dashboard. Cloud and on-premises editions. Also offers Managed Workplace 2012, for Mobile Device Management capabilities that allow MSPs to monitor, configure, and secure smartphones and tablets that run on Apple, Google, MS, and RIM OSs.

These 3rd party monitor and management tools help provide additional support for remote monitoring and management, log management, and infrastructure management to include complete monitoring and alerting for servers, switches, applications, and services. These tools can help meet FISMA Moderate and High qualifications

Splunk

Splunk® offers the leading platform for Operational Intelligence. It enables the curious to look closely at what others ignore—machine data—and find what others never see: insights that can help make your company more productive, profitable, competitive and secure.

Nagios

Nagios monitors your entire IT infrastructure to ensure systems, applications, services, and business processes are functioning properly. In the event of a failure, Nagios can alert technical staff of the problem, allowing them to begin remediation processes before outages affect business processes, end users, or customers. With Nagios you’ll never be left having to explain why an unseen infrastructure outage hurt your organization’s bottom line.

CYBER SECURITY: DATA & APPLICATION PROTECTION Imperva

Imperva protects your business critical data and applications—in the cloud and on premises.

Imperva protects cloud applications, websites, files, SP systems, critical databases, and Big Data repositories from cyber-attacks, theft, and fraud.

AUDIT CloudCheckr CloudCheckr provides a comprehensive collection of over 250 proprietary

and configurable checks relating to compliance policies. Checks cover the




Tool Name Description Of Tool Benefit To NCPA

categories of Availability, Cost, Security, and Usage to ensure proper configuration and compliance. With individual and multi account visibility, color coded priority, and automated alerting, policy enforcement is made easy even in the most complex environments. Each check offers drill down functionality to ensure immediate identification of relevant resources, details, and users. Check descriptions deliver explanations of the violation’s importance and provide instructions for mitigation. Embedded trend graphs allow users to assess the frequency of each particular concern. Customization enables users to configure checks for personalized reporting, depending upon the particular needs of their individual environment. Ignore and suppress features ensure that users do not encounter time consuming false positive results.

CloudCheckr provides security, cost, and usage reporting and analytics to help manage AWS deployments.

8.2.4 AWS MARKETPLACE FOR 3RD-PARTY CLOUD SOFTWARE AWS Marketplace is an online software store that helps customers find, buy, and immediately start using software that runs on the AWS cloud. It includes software from trusted vendors like SAP, Zend, Microsoft, IBM, Canonical, and 10gen as well as many widely used open source offerings including WordPress, Drupal, and MediaWiki.

The growth of the APN and AWS Marketplace continues to accelerate as customers actively seek partners with the products and expertise to help them take advantage of the AWS cloud. The technology research company, Gartner Inc., states in its Magic Quadrant for Cloud IaaS, Worldwide for 2015 that AWS has attracted “a very large technology partner ecosystem that includes software vendors that have licensed and packaged their software to run on AWS, as well as many vendors that have integrated their software with AWS capabilities. It also has an extensive network of partners that provide application development expertise, managed services, and PS such as data center migration.”

8.2.4.1 HIGHLIGHTS AWS Marketplace offers more than 2,700 software products in 35 categories that customers can launch

on AWS with one click. For software companies interested in making their products available to AWS customers, AWS

Marketplace provides an easy ramp to the cloud. Customers use 205 million hours a month of Amazon EC2 for AWS Marketplace products.

8.2.4.2 AWS MARKETPLACE WORKS WITH QUALIFIED PARTNERS The AWS Marketplace enables qualified partners to market and sell their software to AWS Customers. The APN (APN) is the global partner program for AWS. APN is a tiered program comprising Consulting and Technology Partners, who graduate through the tiers based on their level of engagement with AWS. APN is focused on helping qualified partners build a successful AWS-based business by providing great business, technical, marketing, and GTM support.

The AWS Marketplace is designed to help customers interact with APN’s Independent Software Vendors, VARs, and Systems Integrators who have software products to offer to customers in the cloud. Partners use AWS Marketplace to be up and running in days and offer their software products to customers around the world.

8.2.4.3 BUY FROM POPULAR SOFTWARE VENDORS ON AWS MARKETPLACE AWS Marketplace is pleased to announce support for buying software along new pricing dimensions that are intended to match the value you receive from software better. These new dimensions include pricing by user, by host or by data.

8.2.4.4 NEW PRICING DIMENSIONS MATCH THE WAY YOU CONSUME SOFTWARE With these new pricing dimensions, you can scale your software usage up or down without modifying




your EC2 Instance and still pay through your AWS Marketplace bill. When your usage changes, the price you pay per hour changes. This means you only pay for the amount of software you need to operate your workloads. All usage will still be calculated at the end of the month, along with other AWS usage, and added to your existing AWS bill. This is a new level of flexibility in consumption based pricing.

Over the coming months, we anticipate dozens of our top sellers will make the minor changes to their products offered in AWS Marketplace to use our new flexible metering capability. We are pleased at launch to have worked with four vendors who moved to exploit our innovation and be ready with our software capability in AWS Marketplace: Aspera, Chef, SoftNAS, and Trend Micro. Learn more by exploring their products below.

The growth of the APN and AWS Marketplace continues to accelerate as customers actively seek partners with the products and expertise to help them take advantage of the AWS cloud.

Figure 37 below highlights the breadth of the APN and the AWS Marketplace. Figure 37. AWS's Extensive Partner Ecosystem




9 TAB 9 – REQUIRED DOCUMENTS 9.1 CLEAN AIR AND WATER ACT / DEBARMENT NOTICE

Clean Air and Water Act & Debarment Notice

I, the Vendor, am in compliance with all applicable standards, orders or regulations issued pursuant to the Clean Air Act of 1970, as Amended (42 U.S. C. 1857 (h), Section 508 of the Clean Water Act, as amended (33 U.S.C. 1368), Executive Order 117389 and Environmental Protection Agency Regulation, 40 CFR Part 15 as required under OMB Circular A-102, Attachment O, Paragraph 14 (1) regarding reporting violations to the grantor agency and to the United States Environment Protection Agency Assistant Administrator for the Enforcement.

I hereby further certify that my company has not been debarred, suspended or otherwise ineligible for participation in Federal Assistance programs under Executive Order 12549, “Debarment and Suspension”, as described in the Federal Register and Rules and Regulations

Potential Vendor: A&T Systems, Inc.

Print Name: Fred S. Sanders


City, Sate, Zip: Silver Spring, MD 20904

Authorized signature: Date: July 21, 2016




9.2 CONTRACTORS REQUIREMENTS Contractor Requirements

Contractor Certification

Contractor’s Employment Eligibility

By entering the contract, Contractor warrants compliance with the Federal Immigration and Nationality Act (FINA), and all other federal and state immigration laws and regulations. The Contractor further warrants that it is in compliance with the various state statues of the states it is will operate this contract in.

Participating Government Entities including School Districts may request verification of compliance from any Contractor or subcontractor performing work under this Contract. These Entities reserve the right to confirm compliance in accordance with applicable laws.

Should the Participating Entities suspect or find that the Contractor or any of its subcontractors are not in compliance, they may pursue any and all remedies allowed by law, including, but not limited to: suspension of work, termination of the Contract for default, and suspension and/or debarment of the Contractor. All costs necessary to verify compliance are the responsibility of the Contractor.

The offeror complies and maintains compliance with the appropriate statutes, which requires compliance with federal immigration laws by State employers, State contractors and State subcontractors in accordance with the E-Verify Employee Eligibility Verification Program.

Contractor shall comply with governing board policy of the NCPA Participating entities in which work is being performed.

Fingerprint & Background Checks

If required to provide services on school district property at least five (5) times during a month, contractor shall submit a full set of fingerprints to the school district if requested of each person or employee who may provide such service.

Alternately, the school district may fingerprint those persons or employees. An exception to this requirement may be made as authorized in Governing Board policy. The district shall conduct a fingerprint check in accordance with the appropriate state and federal laws of all contractors, subcontractors or vendors and their employees for which fingerprints are submitted to the district. Contractor, subcontractors, vendors and their employees shall not provide services on school district properties until authorized by the District.

The offeror shall comply with fingerprinting requirements in accordance with appropriate statutes in the state in which the work is being performed unless otherwise exempted.

Contractor shall comply with governing board policy in the school district or Participating Entity in which work is being performed

Business Operations in Sudan, Iran

In accordance with A.R.S. 35-391 and A.R.S. 35-393, the Contractor hereby certifies that the contractor does not have scrutinized business operations in Sudan and/or Iran.


Date: July 21, 2016




9.3 ANTITRUST CERTIFICATION STATEMENTS Antitrust Certification Statements (Tex. Government Code § 2155.005)

I affirm under penalty of perjury of the laws of the State of Texas that:

(1) I am duly authorized to execute this contract on my own behalf or on behalf of the company, corporation, firm, partnership or individual (Company) listed below;

(2) In connection with this bid, neither I nor any representative of the Company has violated any provision of the Texas Free Enterprise and Antitrust Act, Tex. Bus. & Comm. Code Chapter 15;

(3) In connection with this bid, neither I nor any representative of the Company has violated any federal antitrust law; and

(4) Neither I nor any representative of the Company has directly or indirectly communicated any of the contents of this bid to a competitor of the Company or any other company, corporation, firm, partnership or individual engaged in the same line of business as the Company.

Company name: A&T Systems, Inc.


City/State/Zip: Silver Spring, MD 20904

Telephone No.: 301-675-5555

Fax No.: 301-384-1405

Email address: [email protected]

Printed name: Fred Sanders

Position with company: Vice President





9.4 FEMA STANDARD TERMS AND CONDITIONS ADDENDUM FOR CONTRACTS AND GRANTS FEMA Standard Terms and Conditions Addendum for Contracts and Grants

If any purchase made under the Master Agreement is funded in whole or in part by Federal Emergency Management Agency (“FEMA”) grants, Contractor shall comply with all federal laws and regulations applicable to the receipt of FEMA grants, including, but not limited to the contractual procedures set forth in Title 44 of the Code of Federal Regulations, Part 13 (“44 CFR 13”).

In addition, Contractor agrees to the following specific provisions:

1) Pursuant to 44 CFR 13.36(i)(1), University is entitled to exercise all administrative, contractual, or other remedies permitted by law to enforce Contractor’s compliance with the terms of this Master Agreement, including but not limited to those remedies set forth at 44 CFR 13.43.

2) Pursuant to 44 CFR 13.36(i)(2), University may terminate the Master Agreement for cause or convenience in accordance with the procedures set forth in the Master Agreement and those provided by 44 CFR 13.44.

3) Pursuant to 44 CFR 13.36(i)(3)-(6)(12), and (13), Contractor shall comply with the following federal laws:

a. Executive Order 11246 of September 24, 1965, entitled “Equal Employment Opportunity,” as amended by Executive Order 11375 of October 13, 1967, and as supplemented in Department of Labor (“DOL”) regulations (41 CFR Ch. 60);

b. Copeland “Anti-Kickback” Act (18 U.S.C. 874), as supplemented in DOL regulations (29 CFR Part 3);

c. Davis-Bacon Act (40 U.S.C. 276a-276a-7) as supplemented by DOL regulations (29 CFR Part 5);

d. Section 103 and 107 of the Contract Work Hours and Safety Standards Act (40 U.S.C. 327-30) as supplemented by DOL regulations (29 CFR Part 5);

e. Section 306 of the Clean Air Act (42 U.S.C. 1857(h), section 508 of the Clean Water Act (33 U.S.C. 1368), Executive Order 11738, and Environmental Protection Agency regulations (40 CFR part 15); and

f. Mandatory standards and policies relating to energy efficiency which are contained in the state energy conservation play issued in compliance with the Energy Policy and Conservation Act (Pub. L.94-163, 89 Stat. 871).

4) Pursuant to 44 CFR 13.36(i)(7), Contractor shall comply with FEMA requirements and regulations pertaining to reporting, including but not limited to those set forth at 44 CFR 40 and 41.

5) Pursuant to 44 CFR 13.36(i)(8), Contractor agrees to the following provisions 72 regarding patents:

a. All rights to inventions and/or discoveries that arise or are developed, in the course of or under this Agreement, shall belong to the participating agency and be disposed of in accordance with the participating agencies policy. The participating agency, at its own discretion, may file for patents in connection with all rights to any such inventions and/or discoveries.

6) Pursuant to 44 CFR 13.36(i)(9), Contractor agrees to the following provisions, regarding copyrights:

a. If this Agreement results in any copyrightable material or inventions, in accordance with 44 CFR 13.34, FEMA reserves a royalty-free, nonexclusive, and irrevocable license to reproduce, publish or otherwise use, for Federal Government purposes:

1) The copyright in any work developed under a grant or contract; and




2) Any rights of copyright to which a grantee or a contactor purchases ownership with grant support.

7) Pursuant to 44 CFR 13.36(i)(10), Contractor shall maintain any books, documents, papers, and records of the Contractor which are directly pertinent to this Master Agreement. At any time during normal business hours and as often as the participating agency deems necessary, Contractor shall permit participating agency, FEMA, the Comptroller General of United States, or any of their duly authorized representatives to inspect and photocopy such records for the purpose of making audit, examination, excerpts, and transcriptions.

8) Pursuant to 44 CFR 13.36(i)(11), Contractor shall retain all required records for three years after FEMA or participating agency makes final payments and all other pending matters are closed. In addition, Contractor shall comply with record retention requirements set forth in 44 CFR 13.42.




9.5 REQUIRED CLAUSES FOR FEDERAL ASSISTANCE BY FTA Required Clauses for Federal Assistance provided by FTA

ACCESS TO RECORDS AND REPORTS

Contractor agrees to:

a) Maintain all books, records, accounts and reports required under this Contract for a period of not less than three (3) years after the date of termination or expiration of this Contract or any extensions thereof except in the event of litigation or settlement of claims arising from the performance of this Contract, in which case Contractor agrees to maintain same until Public Agency, the FTA Administrator, the Comptroller General, or any of their duly authorized representatives, have disposed of all such litigation, appeals, claims or exceptions related thereto.

b) Permit any of the foregoing parties to inspect all work, materials, payrolls, and other data and records with regard to the Project, and to audit the books, records, and accounts with regard to the Project and to reproduce by any means whatsoever or to copy excerpts and transcriptions as reasonably needed for the purpose of audit and examination.

FTA does not require the inclusion of these requirements of Article 1.01 in subcontracts. Reference 49 CFR 18.39 (i)(11).

CIVIL RIGHTS / TITLE VI REQUIREMENTS

1) Non-discrimination. In accordance with Title VI of the Civil Rights Act of 1964, as amended, 42 U.S.C. § 2000d, Section 303 of the Age Discrimination Act of 1975, as amended, 42 U.S.C. § 6102, Section 202 of the Americans with Disabilities Act of 1990, as amended, 42 U.S.C. § 12132, and Federal Transit Law at 49 U.S.C. § 5332, Contractor or subcontractor agrees that it will not discriminate against any employee or applicant for employment because of race, color, creed, national origin, sex, marital status age, or disability. In addition, Contractor agrees to comply with applicable Federal implementing regulations and other implementing requirements FTA may issue.

2) Equal Employment Opportunity. The following Equal Employment Opportunity requirements apply to this Contract:

a. Race, Color, Creed, National Origin, Sex. In accordance with Title VII of the Civil Rights Act, as amended, 42 U.S.C. § 2000e, and Federal Transit Law at 49 U.S.C. § 5332, the Contractor agrees to comply with all applicable Equal Employment Opportunity requirements of U.S. Dept. of Labor regulations, “Office of Federal Contract Compliance Programs, Equal Employment Opportunity, Department of Labor, 41 CFR, Parts 60 et seq., and with any applicable Federal statutes, executive orders, regulations, and Federal policies that may in the future affect construction activities undertaken in the course of this Project. Contractor agrees to take affirmative action to ensure that applicants are employed, and that employees are treated during employment, without regard to their race, color, creed, national origin, sex, marital status, or age. Such action shall include, but not be limited to, the following: employment, upgrading, demotion or transfer, recruitment or recruitment advertising, layoff or termination, rates of pay or other forms of compensation; and selection for training, including apprenticeship. In addition, Contractor agrees to comply with any implementing requirements FTA may issue.

b. Age. In accordance with the Age Discrimination in Employment Act (ADEA) of 1967, as amended, 29 U.S.C. Sections 621 through 634, and Equal Employment Opportunity Commission (EEOC) implementing regulations, “Age Discrimination in Employment Act”, 29 CFR Part 1625, prohibit employment discrimination by Contractor against individuals on the basis of age, including present and prospective employees. In addition, Contractor agrees




to comply with any implementing requirements FTA may issue.

c. Disabilities. In accordance with Section 102 of the Americans with Disabilities Act of 1990, as amended (ADA), 42 U.S.C. Sections 12101 et seq., prohibits discrimination against qualified individuals with disabilities in programs, activities, and services, and imposes specific requirements on public and private entities. Contractor agrees that it will comply with the requirements of the Equal Employment Opportunity Commission (EEOC), “Regulations to Implement the Equal Employment Provisions of the Americans with Disabilities Act,” 29 CFR, Part 1630, pertaining to employment of persons with disabilities and with their responsibilities under Titles I through V of the ADA in employment, public services, public accommodations, telecommunications, and other provisions.

d. Segregated Facilities. Contractor certifies that their company does not and will not maintain or provide for their employees any segregated facilities at any of their establishments, and that they do not and will not permit their employees to perform their services at any location under the Contractor’s control where segregated facilities are maintained. As used in this certification the term “segregated facilities” means any waiting rooms, work areas, restrooms and washrooms, restaurants and other eating areas, parking lots, drinking fountains, recreation or entertainment areas, transportation, and housing facilities provided for employees which are segregated by explicit directive or are in fact segregated on the basis of race, color, religion or national origin because of habit, local custom, or otherwise. Contractor agrees that a breach of this certification will be a violation of this Civil Rights clause.

3) Solicitations for Subcontracts, Including Procurements of Materials and Equipment. In all solicitations, either by competitive bidding or negotiation, made by Contractor for work to be performed under a subcontract, including procurements of materials or leases of equipment, each potential subcontractor or supplier shall be notified by Contractor of Contractor's obligations under this Contract and the regulations relative to non-discrimination on the grounds of race, color, creed, sex, disability, age or national origin.

4) Sanctions of Non-Compliance. In the event of Contractor's non-compliance with the non-discrimination provisions of this Contract, Public Agency shall impose such Contract sanctions as it or the FTA may determine to be appropriate, including, but not limited to: 1) Withholding of payments to Contractor under the Contract until Contractor complies, and/or; 2) Cancellation, termination or suspension of the Contract, in whole or in part.

Contractor agrees to include the requirements of this clause in each subcontract financed in whole or in part with Federal assistance provided by FTA, modified only if necessary to identify the affected parties.

DISADVANTAGED BUSINESS PARTICIPATION

This Contract is subject to the requirements of Title 49, Code of Federal Regulations, Part 26, “Participation by Disadvantaged Business Enterprises in Department of Transportation Financial Assistance Programs”, therefore, it is the policy of the Department of Transportation (DOT) to ensure that Disadvantaged Business Enterprises (DBEs), as defined in 49 CFR Part 26, have an equal opportunity to receive and participate in the performance of DOT-assisted contracts.

1) Non-Discrimination Assurances. Contractor or subcontractor shall not discriminate on the basis of race, color, national origin, or sex in the performance of this Contract. Contractor shall carry out all applicable requirements of 49 CFR Part 26 in the award and administration of DOT-assisted contracts. Failure by Contractor to carry out these requirements is a material breach of this Contract, which may result in the termination of this Contract or other such remedy as public agency deems appropriate. Each subcontract Contractor signs with a subcontractor must include the assurance in this paragraph. (See 49 CFR 26.13(b)).




2) Prompt Payment. Contractor is required to pay each subcontractor performing Work under this prime Contract for satisfactory performance of that work no later than thirty (30) days after Contractor’s receipt of payment for that Work from public agency. In addition, Contractor is required to return any retainage payments to those subcontractors within thirty (30) days after the subcontractor’s work related to this Contract is satisfactorily completed and any liens have been secured. Any delay or postponement of payment from the above time frames may occur only for good cause following written approval of public agency. This clause applies to both DBE and non-DBE subcontractors. Contractor must promptly notify public agency whenever a DBE subcontractor performing Work related to this Contract is terminated or fails to complete its Work, and must make good faith efforts to engage another DBE subcontractor to perform at least the same amount of work. Contractor may not terminate any DBE subcontractor and perform that Work through its own forces, or those of an affiliate, without prior written consent of public agency.

3) DBE Program. In connection with the performance of this Contract, Contractor will cooperate with public agency in meeting its commitments and goals to ensure that DBEs shall have the maximum practicable opportunity to compete for subcontract work, regardless of whether a contract goal is set for this Contract. Contractor agrees to use good faith efforts to carry out a policy in the award of its subcontracts, agent agreements, and procurement contracts which will, to the fullest extent, utilize DBEs consistent with the efficient performance of the Contract.

ENERGY CONSERVATION REQUIREMENTS

Contractor agrees to comply with mandatory standards and policies relating to energy efficiency which are contained in the State energy conservation plans issued under the Energy Policy and Conservation Act, as amended, 42 U.S.C. Sections 6321 et seq. and 41 CFR Part 301-10.

FEDERAL CHANGES

Contractor shall at all times comply with all applicable FTA regulations, policies, procedures and directives, including without limitation those listed directly or by reference in the Contract between public agency and the FTA, as they may be amended or promulgated from time to time during the term of this contract. Contractor’s failure to so comply shall constitute a material breach of this Contract.

INCORPORATION OF FEDERAL TRANSIT ADMINISTRATION (FTA) TERMS

The provisions include, in part, certain Standard Terms and Conditions required by the U.S. Department of Transportation (DOT), whether or not expressly set forth in the preceding Contract provisions. All contractual provisions required by the DOT, as set forth in the most current FTA Circular 4220.1F, dated November 1, 2008, are hereby incorporated by reference. Anything to the contrary herein notwithstanding, all FTA mandated terms shall be deemed to control in the event of a conflict with other provisions contained in this Contract. Contractor agrees not to perform any act, fail to perform any act, or refuse to comply with any public agency requests that would cause public agency to be in violation of the FTA terms and conditions.

NO FEDERAL GOVERNMENT OBLIGATIONS TO THIRD PARTIES

Agency and Contractor acknowledge and agree that, absent the Federal Government’s express written consent and notwithstanding any concurrence by the Federal Government in or approval of the solicitation or award of the underlying Contract, the Federal Government is not a party to this Contract and shall not be subject to any obligations or liabilities to agency, Contractor, or any other party (whether or not a party to that contract) pertaining to any matter resulting from the underlying Contract.

Contractor agrees to include the above clause in each subcontract financed in whole or in part with federal assistance provided by the FTA. It is further agreed that the clause shall not be modified, except to identify the subcontractor who will be subject to its provisions.




PROGRAM FRAUD AND FALSE OR FRAUDULENT STATEMENTS

Contractor acknowledges that the provisions of the Program Fraud Civil Remedies Act of 1986, as amended, 31 U.S.C. §§ 3801 et seq. and U.S. DOT regulations, “Program Fraud Civil Remedies,” 49 CFR Part 31, apply to its actions pertaining to this Contract. Upon execution of the underlying Contract, Contractor certifies or affirms the truthfulness and accuracy of any statement it has made, it makes, it may make, or causes to me made, pertaining to the underlying Contract or the FTA assisted project for which this Contract Work is being performed.

In addition to other penalties that may be applicable, Contractor further acknowledges that if it makes, or causes to be made, a false, fictitious, or fraudulent claim, statement, submission, or certification, the Federal Government reserves the right to impose the penalties of the Program Fraud Civil Remedies Act of 1986 on Contractor to the extent the Federal Government deems appropriate.

Contractor also acknowledges that if it makes, or causes to me made, a false, fictitious, or fraudulent claim, statement, submission, or certification to the Federal Government under a contract connected with a project that is financed in whole or in part with Federal assistance originally awarded by FTA under the authority of 49 U.S.C. § 5307, the Government reserves the right to impose the penalties of 18 U.S.C. § 1001 and 49 U.S.C. § 5307 (n)(1) on the Contractor, to the extent the Federal Government deems appropriate.

Contractor agrees to include the above clauses in each subcontract financed in whole or in part with Federal assistance provided by FTA. It is further agreed that the clauses shall not be modified, except to identify the subcontractor who will be subject to the provisions.




9.6 STATE NOTICE ADDENDUM State Notice Addendum

Pursuant to certain state notice provisions the following public agencies and political subdivisions of the referenced public agencies are eligible to access the contract award made pursuant to this solicitation. Public agencies and political subdivisions are hereby given notice of the foregoing request for proposal for purposes of complying with the procedural requirement of said statutes:

Nationwide: http://www.usa.gov/Agencies/Local_Government/Cities.shtml

Other States: Cities, Towns, Villages, and Boroughs




10 APPENDIX 1: FULL RENDITION OF AWS SLA TEXT 10.1 SLA , RELATIONSHIP MANAGEMENT AGREEMENT [RFQ SECTION 9.0] The following list cites URLs for AWS SLAs on its five basic services:

• EC2: http://aws.amazon.com/ec2/sla/ • S3: http://aws.amazon.com/s3-sla-backup/ • RDS: http://aws.amazon.com/rds/sla/ • Cloudfront: http://aws.amazon.com/cloudfront/sla/ • Route 53: http://aws.amazon.com/route53/sla/

Sections 1.1.1 through 1.1.5 provide SLA detail.

10.1.1 AMAZON CLOUDFRONT SLA Last Updated June 1, 2013 This Amazon CloudFront Service Level Agreement (“SLA”) is a policy governing the use of Amazon CloudFront under the terms of the Amazon Web Services Customer Agreement (the “AWS Agreement”) between Amazon Web Services, Inc. (“AWS”, “us” or “we”) and users of AWS’ services (“you”). This SLA applies separately to each account using Amazon CloudFront. Unless otherwise provided herein, this SLA is subject to the terms of the AWS Agreement and capitalized terms will have the meaning specified in the AWS Agreement. We reserve the right to change the terms of this SLA IAW the AWS Agreement

SERVICE COMMITMENT AWS will use commercially reasonable efforts to make Amazon CloudFront available with a Monthly Uptime Percentage (defined below) of at least 99.9% during any monthly billing cycle (the “Service Commitment”). In the event Amazon CloudFront does not meet the Service Commitment, you will be eligible to receive a Service Credit as described below.

DEFINITIONS “Error Rate” means: (i) the total number of internal server errors returned by Amazon CloudFront

divided by (ii) the total number of requests during that five minute period. We will calculate the Error Rate for each Amazon CloudFront account as a percentage for each five minute period in the monthly billing cycle. The calculation of the number of internal server errors will not include errors that arise directly or indirectly as a result of any of the Amazon CloudFront SLA Exclusions (as defined below).

“Monthly Uptime Percentage” is calculated by subtracting from 100% the average of the Error Rates from each five minute period in the monthly billing cycle.

A “Service Credit” is a dollar credit, calculated as set forth below, that we may credit back to an eligible account.

SERVICE CREDITS Service Credits are calculated as a percentage of the total charges paid by you for Amazon CloudFront for the billing cycle in which the error occurred IAW the schedule below.

Monthly Uptime Percentage Service Credit Percentage Equal to or greater than 99% but less than 99.9% 10% less than 99% 25%

We will apply any Service Credits only against future Amazon CloudFront payments otherwise due from you. At our discretion, we may issue the Service Credit to the credit card you used to pay for the billing cycle in which the error occurred. Service Credits will not entitle you to any refund or other payment from AWS. A Service Credit will be applicable and issued only if the credit amount for the applicable




monthly billing cycle is greater than one dollar ($1 USD). Service Credits may not be transferred or applied to any other account. Unless otherwise provided in the AWS Agreement, your sole and exclusive remedy for any unavailability, non-performance, or other failure by us to provide Amazon CloudFront is the receipt of a Service Credit (if eligible) IAW the terms of this SLA.

CREDIT REQUEST AND PAYMENT PROCEDURES To receive a Service Credit, you must submit a claim by opening a case in the AWS Support Center. To be eligible, the credit request must be received by us by the end of the second billing cycle after which the incident occurred and must include:

i. the words “SLA Credit Request” in the subject line;

ii. the dates and times of each incident of non-zero Error Rates that you are claiming; and

iii. your request logs that document the errors and corroborate your claimed outage (any confidential or sensitive information in these logs should be removed or replaced with asterisks).

If the Monthly Uptime Percentage applicable to the month of such request is confirmed by us and is less than 99.9%, then we will issue the Service Credit to you within one billing cycle following the month in which your request is confirmed by us. Your failure to provide the request and other information as required above will disqualify you from receiving a Service Credit.

AMAZON CLOUDFRONT SLA EXCLUSIONS The Service Commitment does not apply to any unavailability, suspension or termination of Amazon CloudFront, or any other Amazon CloudFront performance issues: (i) that result from a suspension described in Section 6.1 of the AWS Agreement; (ii) caused by factors outside of our reasonable control, including any force majeure event or Internet access or related problems beyond the demarcation point of Amazon CloudFront; (iii) that result from any actions or inactions of you or any third party; (iv) that result from your equipment, software or other technology and/or third party equipment, software or other technology (other than third party equipment within our direct control); (v) arising from our suspension and termination of your right to use Amazon CloudFront IAW the AWS Agreement; (vi) that result from exceeding usage limits stated in the Amazon CloudFront documentation; or (vii) that result from use of an origin server other than Amazon S3 (collectively, the “Amazon CloudFront SLA Exclusions”). If availability is impacted by factors other than those used in our calculation of the Error Rate, then we may issue a Service Credit considering such factors at our discretion.

10.1.2 AMAZON EC2 SLA Last Updated June 1, 2013 This Amazon EC2 Service Level Agreement (“SLA”) is a policy governing the use of Amazon Elastic Compute Cloud (“Amazon EC2”) and Amazon Elastic Block Store (“Amazon EBS”) under the terms of the Amazon Web Services Customer Agreement (the “AWS Agreement”) between Amazon Web Services, Inc. (“AWS”, “us” or “we”) and users of AWS’ services (“you”). This SLA applies separately to each account using Amazon EC2 or Amazon EBS. Unless otherwise provided herein, this SLA is subject to the terms of the AWS Agreement and capitalized terms will have the meaning specified in the AWS Agreement. We reserve the right to change the terms of this SLA IAW the AWS Agreement.

SERVICE COMMITMENT AWS will use commercially reasonable efforts to make Amazon EC2 and Amazon EBS each available with a Monthly Uptime Percentage (defined below) of at least 99.95%, in each case during any monthly billing cycle (the “Service Commitment”). In the event Amazon EC2 or Amazon EBS does not meet the Service Commitment, you will be eligible to receive a Service Credit as described below.




DEFINITIONS “Monthly Uptime Percentage” is calculated by subtracting from 100% the percentage of minutes during

the month in which Amazon EC2 or Amazon EBS, as applicable, was in the state of “Region Unavailable.” Monthly Uptime Percentage measurements exclude downtime resulting directly or indirectly from any Amazon EC2 SLA Exclusion (defined below).

“Region Unavailable” and “Region Unavailability” mean that more than one Availability Zone in which you are running an instance, within the same Region, is “Unavailable” to you.

“Unavailable” and “Unavailability” mean:

o For Amazon EC2, when all of your running instances have no external connectivity.

o For Amazon EBS, when all of your attached volumes perform zero read write IO, with pending IO in the queue.

A “Service Credit” is a dollar credit, calculated as set forth below, that we may credit back to an eligible account.

SERVICE COMMITMENTS AND SERVICE CREDITS Service Credits are calculated as a percentage of the total charges paid by you (excluding one-time payments such as upfront payments made for Reserved Instances) for either Amazon EC2 or Amazon EBS (whichever was Unavailable, or both if both were Unavailable) in the Region affected for the monthly billing cycle in which the Region Unavailability occurred IAW the schedule below.

Monthly Uptime Percentage Service Credit Percentage Less than 99.95% but equal to or greater than 99.0% 10% Less than 99.0% 30%

We will apply any Service Credits only against future Amazon EC2 or Amazon EBS payments otherwise due from you. At our discretion, we may issue the Service Credit to the credit card you used to pay for the billing cycle in which the Unavailability occurred. Service Credits will not entitle you to any refund or other payment from AWS. A Service Credit will be applicable and issued only if the credit amount for the applicable monthly billing cycle is greater than one dollar ($1 USD). Service Credits may not be transferred or applied to any other account. Unless otherwise provided in the AWS Agreement, your sole and exclusive remedy for any unavailability, non-performance, or other failure by us to provide Amazon EC2 or Amazon EBS is the receipt of a Service Credit (if eligible) IAW the terms of this SLA.


1. the words “SLA Credit Request” in the subject line; 2. the dates and times of each Unavailability incident that you are claiming; 3. the affected EC2 instance IDs or the affected EBS volume IDs; and 4. your request logs that document the errors and corroborate your claimed outage (any confidential or

sensitive information in these logs should be removed or replaced with asterisks). If the Monthly Uptime Percentage of such request is confirmed by us and is less than the Service Commitment, then we will issue the Service Credit to you within one billing cycle following the month in which your request is confirmed by us. Your failure to provide the request and other information as required above will disqualify you from receiving a Service Credit.




AMAZON EC2 SLA EXCLUSIONS The Service Commitment does not apply to any unavailability, suspension or termination of Amazon EC2 or Amazon EBS, or any other Amazon EC2 or Amazon EBS performance issues: (i) that result from a suspension described in Section 6.1 of the AWS Agreement; (ii) caused by factors outside of our reasonable control, including any force majeure event or Internet access or related problems beyond the demarcation point of Amazon EC2 or Amazon EBS; (iii) that result from any actions or inactions of you or any third party, including failure to acknowledge a recovery volume; (iv) that result from your equipment, software or other technology and/or third party equipment, software or other technology (other than third party equipment within our direct control); (v) that result from failures of individual instances or volumes not attributable to Region Unavailability; (vi) that result from any maintenance as provided for pursuant to the AWS Agreement; or (vii) arising from our suspension and termination of your right to use Amazon EC2 or Amazon EBS IAW the AWS Agreement (collectively, the “Amazon EC2 SLA Exclusions”). If availability is impacted by factors other than those used in our Monthly Uptime Percentage calculation, then we may issue a Service Credit considering such factors at our discretion.

10.1.3 AMAZON RDS SLA Last Updated March 25, 2016 This Amazon RDS Service Level Agreement ("SLA") is a policy governing the use of the Amazon Relational Database Service ("Amazon RDS") under the terms of the AWS Customer Agreement (the "AWS Agreement") between Amazon Web Services, Inc. and its affiliates ("AWS", "us" or "we") and users of AWS’ services ("you"). This SLA applies separately to each account using Amazon RDS. Unless otherwise provided herein, this SLA is subject to the terms of the AWS Agreement and capitalized terms will have the meaning specified in the AWS Agreement. We reserve the right to change the terms of this SLA in accordance with the AWS Agreement.

SERVICE COMMITMENT AWS will use commercially reasonable efforts to make Multi-AZ instances available with a Monthly Uptime Percentage (defined below) of at least 99.95% during any monthly billing cycle (the "Service Commitment"). In the event Amazon RDS does not meet the Monthly Uptime Percentage commitment, you will be eligible to receive a Service Credit as described below.

DEFINITIONS "Monthly Uptime Percentage" for a given Multi-AZ instance is calculated by subtracting from 100%

the percentage of 1 minute periods during the monthly billing cycle in which the Multi-AZ instance was "Unavailable". If you have been running that Multi-AZ instance for only part of the month, your Multi-AZ instance is assumed to be 100% available for the portion of the month that it was not running. Monthly Uptime Percentage measurements exclude downtime resulting directly or indirectly from any Amazon RDS SLA Exclusion (defined below).

"Multi-AZ instance" means an Amazon RDS for MySQL, MariaDB, Oracle or PostgreSQL database instance with the Multi-AZ parameter set to true.

"Unavailable" means that all connection requests to the running Multi-AZ instance fail during a 1 minute period.

A "Service Credit" is a dollar credit, calculated as set forth below, that we may credit back to an eligible account.




SERVICE CREDITS Service Credits are calculated as a percentage of the charges paid by you for the Multi-AZ instances that did not meet the Monthly Uptime Percentage commitment in a billing cycle in accordance with the schedule below.

Monthly Uptime Percentage Service Credit Percentage Less than 99.95% but equal to or greater than 99.0% 10% Less than 99.0% 25%

We will apply any Service Credits only against future Amazon RDS payments otherwise due from you. At our discretion, we may issue the Service Credit to the credit card you used to pay for the billing cycle in which the unavailability occurred. Service Credits will not entitle you to any refund or other payment from AWS. A Service Credit will be applicable and issued only if the credit amount for the applicable monthly billing cycle is greater than one dollar ($1 USD). Service Credits may not be transferred or applied to any other account. Unless otherwise provided in the AWS Agreement, your sole and exclusive remedy for any unavailability or non-performance or other failure by us to provide Amazon RDS is the receipt of a Service Credit (if eligible) in accordance with the terms of this SLA.

CREDIT REQUEST AND PAYMENT PROCEDURES To receive a Service Credit, you will need to submit a claim by opening a case in the AWS Support Center. To be eligible, the credit request must be received by us by the end of the second billing cycle after which the incident occurred and must include:

i. the words "SLA Credit Request" in the subject line;

ii. the dates and times of each Unavailability incident you are claiming;

iii. the DB Instance IDs and the AWS Regions of the affected Multi-AZ instances; and

iv. your request logs that document the errors and corroborate your claimed outage (any confidential or sensitive information in these logs should be removed or replaced with asterisks).

If the Monthly Uptime Percentage of such request is confirmed by us and is less than the Service Commitment, then we will issue the Service Credit to you within one billing cycle following the month in which the request occurred. Your failure to provide the request and other information as required above will disqualify you from receiving a Service Credit.

AMAZON RDS SLA EXCLUSIONS The Service Commitment does not apply to any unavailability, suspension or termination of Amazon RDS, or any other Amazon RDS performance issues: (i) that result from a suspension described in Section 6.1 of the AWS Agreement; (ii) caused by factors outside of our reasonable control, including any force majeure event or Internet

access or related problems beyond the demarcation point of Amazon RDS; (iii) that result from any voluntary actions or inactions from you or any third party (e.g., rebooting a

database instance, scaling compute capacity, not scaling storage when the storage is full, misconfiguring security groups, VPC configurations or credential settings, disabling encryption keys or making the encryption keys inaccessible, etc.);

(iv) that result from instances belonging to the Micro DB instance class or other instance classes which have similar CPU and memory resource limitations;

(v) that result from you not following the basic operational guidelines described in t RDS User Guide (e.g., overloading a database instance to the point it is inoperable, creating excessively large number of tables that significantly increase the recovery time etc.);




(vi) caused by underlying database engine software that lead to repeated database crashes or an inoperable database instance;

(vii) that result in long recovery time due to insufficient IO capacity for your database workload;

(viii) that result from your equipment, software or other technology and/or third party equipment, software or other technology (other than third party equipment within our direct control); or

(ix) that result from any maintenance as provided for pursuant to the AWS Agreement; or

(x) arising from our suspension and termination of your right to use Amazon RDS in accordance with the AWS Agreement (collectively, the "Amazon RDS SLA Exclusions").

If availability is impacted by factors other than those explicitly used in our Monthly Uptime Percentage calculation, then we may issue a Service Credit considering such factors at our discretion.

10.1.4 AMAZON ROUTE 53 SLA Last Updated May 15, 2015 This Amazon Route 53 Service Level Agreement (“SLA”) is a policy governing the use of Amazon Route 53 (including Private DNS) under the terms of the Amazon Web Services Customer Agreement (the “AWS Agreement”) between Amazon Web Services, Inc. and its affiliates (“AWS”, “us” or “we”) and users of AWS’ services (“you”). This SLA applies separately to each account using Amazon Route 53. Unless otherwise provided herein, this SLA is subject to the terms of the AWS Agreement and capitalized terms will have the meaning specified in the AWS Agreement. We reserve the right to change the terms of this SLA in accordance with the AWS Agreement.

SERVICE COMMITMENT AWS will use commercially reasonable efforts to make Amazon Route 53 100% Available (defined below). In the event Amazon Route 53 does not meet the foregoing commitment, you will be eligible to receive a Service Credit as described below.

DEFINITIONS “100% Available” means that Amazon Route 53 did not fail to respond to your DNS queries during a

monthly billing cycle.

A “Service Credit” is a dollar credit, calculated as set forth below, that we may credit back to an eligible Amazon Route 53 account.

SERVICE CREDITS Service Credits are calculated based on 1 day of Service Credit, which is equal to your average daily Amazon Route 53 query charges for the monthly billing cycle preceding the monthly billing cycle in which the period that Amazon Route 53 was not 100% Available occurred, and are available as follows:

Duration Amazon Route 53 was not 100% Available

Duration Amazon Route 53 was not 100% Available Service Credit 5 - 30 minutes 1 day Service Credit 31 minutes - 4 hours 7 days Service Credit More than 4 hours 30 days Service Credit

We will apply any Service Credits only against future Amazon Route 53 payments otherwise due from you. At our discretion, we may issue the Service Credit to the credit card you used to pay for the billing cycle in which the error occurred. Service Credits will not entitle you to any refund or other payment from AWS. A Service Credit will be applicable and issued only if the credit amount for the applicable monthly billing cycle is greater than one dollar ($1 USD). Service Credits may not be transferred or




applied to any other account. Unless otherwise provided in the AWS Agreement, your sole and exclusive remedy for any unavailability, non-performance, or other failure by us to provide Amazon Route 53 is the receipt of a Service Credit (if eligible) in accordance with the terms of this SLA.


i. the words “SLA Credit Request” in the subject line;

ii. the dates and times of each period that Amazon Route 53 was not 100% Available that you are claiming; and

iii. your request logs that document the errors and corroborate your claimed outage (any confidential or sensitive information in these logs should be removed or replaced with asterisks).

If the period that Amazon Route 53 was not 100% Available is confirmed by us, then we will issue the Service Credit to you within one billing cycle following the month in which your request is confirmed by us. Your failure to provide the request and other information as required above will disqualify you from receiving a Service Credit.

AMAZON ROUTE 53 SLA EXCLUSIONS The Service Commitment does not apply to any unavailability, suspension or termination of Amazon Route 53, or any other Amazon Route 53 performance issues: (i) that result from a suspension described in Section 6.1 of the AWS Agreement; (ii) caused by factors outside of Amazon Route 53’s reasonable control, including any force majeure event, denial-of-service attack or Internet access or related problems beyond the demarcation point of Amazon Route 53; (iii) that result from any actions or inactions of you or any third party; (iv) that result from your equipment, software or other technology and/or third party equipment, software or other technology (other than third party equipment within our direct control); (v) arising from our suspension and termination of your right to use Amazon Route 53 in accordance with the AWS Agreement; (vi) that result from you exceeding usage limits stated in the Amazon Route 53 documentation (collectively, the “Amazon Route 53 SLA Exclusions”); or (vii) that, with respect to public DNS only, result during a period that you were not using all four virtual name servers (for example, ns123.awsdns.com, ns123.awsdns.net, ns123.awsdns.co.uk and ns123.awsdns.org) assigned to your “hosted zone”. If availability is impacted by factors other than those used in our calculation of 100% Available, then we may issue a Service Credit considering such factors at our discretion.

10.1.5 AMAZON S3 SLA Last Updated September 16, 2015 This Amazon S3 Service Level Agreement (“SLA”) is a policy governing the use of Amazon Simple Storage Service (“Amazon S3”) under the terms of the Amazon Web Services Customer Agreement (the “AWS Agreement”) between Amazon Web Services, Inc. and its affiliates (“AWS”, “us” or “we”) and users of AWS’ services (“you”). This SLA applies separately to each account using Amazon S3. Unless otherwise provided herein, this SLA is subject to the terms of the AWS Agreement and capitalized terms will have the meaning specified in the AWS Agreement. We reserve the right to change the terms of this SLA in accordance with the AWS Agreement.




SERVICE COMMITMENT AWS will use commercially reasonable efforts to make Amazon S3 available with the applicable Monthly Uptime Percentage (as defined below) during any monthly billing cycle (the “Service Commitment”). In the event Amazon S3 does not meet the Service Commitment, you will be eligible to receive a Service Credit as described below.

DEFINITIONS “Error Rate” means: (i) the total number of internal server errors returned by Amazon S3 as error status

“InternalError” or “ServiceUnavailable” divided by (ii) the total number of requests for the applicable request type during that five minute period. We will calculate the Error Rate for each Amazon S3 account as a percentage for each five minute period in the monthly billing cycle. The calculation of the number of internal server errors will not include errors that arise directly or indirectly as a result of any of the Amazon S3 SLA Exclusions (as defined below).

“Monthly Uptime Percentage” is calculated by subtracting from 100% the average of the Error Rates from each five minute period in the monthly billing cycle.

A “Service Credit” is a dollar credit, calculated as set forth below, that we may credit back to an eligible Amazon S3 account.

SERVICE CREDITS Service Credits are calculated as a percentage of the total charges paid by you for Amazon S3 for the billing cycle in which the error occurred in accordance with the schedule below.

For all requests not otherwise specified below:

Monthly Uptime Percentage Service Credit Percentage Equal to or greater than 99% but less than 99.9% 10% Less than 99% 25%

Monthly Uptime Percentage Service Credit Percentage Equal to or greater than 98% but less than 99.9% 10% Less than 98% 25%

We will apply any Service Credits only against future Amazon S3 payments otherwise due from you. At our discretion, we may issue the Service Credit to the credit card you used to pay for the billing cycle in which the error occurred. Service Credits will not entitle you to any refund or other payment from AWS. A Service Credit will be applicable and issued only if the credit amount for the applicable monthly billing cycle is greater than one dollar ($1 USD). Service Credits may not be transferred or applied to any other account. Unless otherwise provided in the AWS Agreement, your sole and exclusive remedy for any unavailability, non-performance, or other failure by us to provide Amazon S3 is the receipt of a Service Credit (if eligible) in accordance with the terms of this SLA.

CREDIT REQUEST AND PAYMENT PROCEDURES To receive a Service Credit, you must submit a claim by opening a case in the AWS Support Center. To be eligible, the credit request must be received by us by the end of the second billing cycle after which the incident occurred and must include: 1. the words “SLA Credit Request” in the subject line; 2. the dates and times of each incident of non-zero Error Rates that you are claiming; and 3. your request logs that document the errors and corroborate your claimed outage (any confidential or

sensitive information in these logs should be removed or replaced with asterisks).




If the Monthly Uptime Percentage applicable to the month of such request is confirmed by us and is less than the applicable Service Commitment, then we will issue the Service Credit to you within one billing cycle following the month in which your request is confirmed by us. Your failure to provide the request and other information as required above will disqualify you from receiving a Service Credit.

AMAZON S3 SLA EXCLUSIONS The Service Commitment does not apply to any unavailability, suspension or termination of Amazon S3, or any other Amazon S3 performance issues: (i) that result from a suspension described in Section 6.1 of the AWS Agreement; (ii) caused by factors outside of our reasonable control, including any force majeure event or Internet access or related problems beyond the demarcation point of Amazon S3; (iii) that result from any actions or inactions of you or any third party; (iv) that result from your equipment, software or other technology and/or third party equipment, software or other technology (other than third party equipment within our direct control); or (v) arising from our suspension and termination of your right to use Amazon S3 in accordance with the AWS Agreement (collectively, the “Amazon S3 SLA Exclusions”). If availability is impacted by factors other than those used in our calculation of the Error Rate, then we may issue a Service Credit considering such factors at our discretion.