Skip to content
iceMax
hello@icemax.net

AWS Infrastructure & Compute

AWS infrastructure & compute.

Compute sized against measured demand, with recovery and cost treated as part of the architecture.

02 Service Overview

We design, deploy and operate Amazon Web Services environments tailored to the application running on them — a managed AWS service from Singapore for organisations across Asia-Pacific.

Environments are sized against the application’s measured demand rather than a default template, and scaling behaviour is configured so capacity follows traffic. Backup and failover are specified as part of the same design, so recovery position is known before it is needed rather than established during an incident.

Compute provisioned to the workload

The most common failure of a cloud estate is not an outage; it is paying every month for capacity that was provisioned for a launch and never revisited. An AWS environment designed properly starts from what the application actually does: its request pattern over a day and a week, its memory and CPU profile under load, how it degrades when a component is lost.

From that profile we specify the instance families and sizes, the auto-scaling policy that adds and removes capacity as demand moves, and the storage classes that match how data is actually accessed. Where a workload is containerised, Amazon ECS or EKS is deployed with the same discipline — node groups sized to real usage, not to the largest conceivable peak.

Every environment is expressed as infrastructure as code. Terraform or CloudFormation holds the definition, changes are reviewed before they are applied, and the environment can be reproduced in another region in hours if it ever needs to be.

Cost governance as an operating discipline

AWS pricing rewards commitment and punishes inattention. We audit the account on an ongoing basis, not as a one-time exercise: utilisation of every instance against its size, Savings Plan and Reserved Instance coverage against the steady-state baseline, S3 storage classes against access frequency, EBS volumes and snapshots no longer attached to anything, data transfer paths that cross availability zones or regions without needing to.

Each finding carries a number — what it costs today, what it would cost after the change, and any risk in making it. Decisions are made on that basis, and the resulting saving is tracked in the monthly review so the estate does not drift back.

Recovery designed in, not bolted on

Backup and disaster recovery are specified at design time, against a stated recovery point and recovery time objective for each workload. AWS Backup handles scheduled snapshots with cross-region copy; failover architecture — from warm standby to active multi-region — is chosen to match the objective rather than the maximum available. Restores are tested on a schedule, because a backup that has never been restored is an assumption.

Where AWS sits in the wider estate

AWS is one of two cloud platforms we operate, behind a Cloudflare perimeter and alongside Google Cloud. Workloads are placed where they run best and connected with VPC peering or dedicated interconnect, so the estate is one routed path rather than two separate accounts.

Organisations engage us to take over an existing AWS account that has grown without an owner, to build a new environment for an application that is moving to the cloud, or to provide the infrastructure function that a small engineering team does not have time to be.

01 What We Provide
01

EC2 Compute Deployment

Configuration and auto-scaling of Amazon EC2 instances to handle shifting traffic demands.

02

Cloud Cost Governance

Auditing resource allocation, reserved instances, and storage tiers to reduce monthly AWS overhead.

03

Disaster Recovery & Backup

Cross-region backup strategies and failover architecture to ensure data redundancy.

02 How We Approach the Engagement
  1. 01

    Requirements review

    Application profile, traffic pattern and recovery expectations are established before any environment is provisioned.

  2. 02

    Environment design

    Instance sizing, scaling policy, storage tiering and network layout are specified against that profile.

  3. 03

    Deployment

    Environments are built with scaling and backup configured from the outset rather than retrofitted.

  4. 04

    Cost and capacity review

    Allocation, reserved instances and idle capacity are audited on an ongoing basis.

03 Technical Capabilities
  • Amazon EC2 instance configuration and auto-scaling
  • Amazon ECS and EKS container platforms
  • VPC design, subnetting and security group policy
  • Scaling policies aligned to traffic demand
  • Resource allocation and reserved instance auditing
  • Savings Plans and Reserved Instance coverage analysis
  • Storage tier selection and S3 lifecycle policy
  • Cross-region backup strategy with AWS Backup
  • Failover architecture for data redundancy
  • Infrastructure as code with Terraform and CloudFormation
04 Questions

What does AWS managed services from iceMax cover?

Design and build of the environment — VPC, compute, storage, identity and network boundaries — followed by ongoing operation: patching cadence, scaling policy review, backup verification, cost and capacity audit, and incident response for the infrastructure layer. Application code stays with your developers; the platform it runs on is ours to keep healthy.

We already run on AWS. Can iceMax take over an existing account?

Yes, and this is the most common starting point. The engagement begins with a Well-Architected style review of the existing account: what is running, what it costs, where the single points of failure are, and which resources have not been touched in months. Changes are proposed with the cost and risk of each, and nothing is altered without agreement.

How much can AWS costs realistically be reduced?

It depends on how the account was built. Estates provisioned quickly and never revisited commonly carry 25–40% in idle instances, oversized storage classes, unattached volumes and snapshots, and on-demand pricing where a commitment would have been safe. Estates that have already been through a cost review yield less. We quantify the saving before changes are made, so the decision is on real numbers.

Which AWS regions do you work in?

Primarily ap-southeast-1 (Singapore), with ap-southeast-3 (Jakarta), ap-east-1 (Hong Kong), ap-southeast-2 (Sydney) and ap-northeast-1 (Tokyo) for regional workloads and cross-region disaster recovery. Data residency requirements are confirmed at the requirements stage and drive region selection.

Can AWS be combined with Cloudflare and Google Cloud in one engagement?

That is how most of our environments are built. Cloudflare provides the perimeter in front of the AWS origin, and where a workload is better placed on GCP — for example, data platforms or GKE — VPC peering or a secure interconnect joins the two. One team designs and operates the whole path.

Do you provide 24/7 support for AWS environments?

Managed environments are monitored continuously with alerting on availability, capacity and cost anomalies. Response commitments are set per engagement according to the workload’s criticality; the terms are agreed before the environment goes into service, not negotiated during an incident.

Enquiries

Discuss an AWS
infrastructure requirement.