FPT SoftwareFHNCertificationsReference architectures
Talk to NGT
Clouds

Alibaba Cloud

Landing zones as code, DevOps, operations and strangler-style modernisation on Alibaba Cloud.

Explore ServicesTalk to NGT
Data centreLegacy applicationAnother cloud
alibaba-cloudAlibaba Cloudlanding zone as code
Container Service for KubernetesDevOps pipelinesFinOps, CloudOps, SecOps

At a glance

NGT designs and automates Alibaba Cloud landing zones as code, builds the DevOps pipelines and operations on them, and modernises applications slice by slice with a factory and strangler approach.

An Alibaba Cloud landing zone, written as code

Designed and deployed with infrastructure as code, then run with DevOps pipelines.

  • Accounts in a directoryResource Directory folders per environment, with control policies on the branches.
  • One network hubA transit router on Cloud Enterprise Network joins every VPC and the data centre.
  • Audited everywhereActionTrail, Cloud Config and Simple Log Service on every account.
  • Nothing by handTerraform or ROS templates for accounts, networks and baselines.
Alibaba Cloud Landing Zone as Code
dedicated lineVPC attachmentslogs and trailsOn premisesAlibaba CloudManagement account · Resource DirectoryNetwork accountSecurity, logging and operationsWorkload accounts · production and non-productionData centreTerraformmodules per layerResourceOrchestration Servi…or ROS templatesCloud GovernanceCenterbaselineResource Directoryfolders per environmentCloudSSO and RAMone sign-inCloud Configcompliance rulesBudgetsper accountExpress Connectdedicated lineVPN Gatewaybackup pathCEN Transit RouterCloud FirewallNAT Gatewaycentral egressAlibaba Cloud DNSPrivateZoneActionTrailmulti-account trailSimple Log ServiceSecurity CenterKMS / Cloud HSMCloudMonitorBastionhostadmin accessApplication LoadBalancerACKContainer Service for KubernetesECSElastic Compute ServicePolarDB / ApsaraDBRDS for MySQLOSSObject Storage ServiceCloud Backup

Point at a component to light its links; select it for what it does here and the practice that makes it right on Alibaba Cloud.

Point at a component to see what it does; select it for the best practice.Open the architecture

What we build on Alibaba Cloud

Select a problem to see the architecture NGT builds for it.

A new product on ACK or SAE

The problem

A new product must launch in Asia on Alibaba Cloud, secure and scalable from its first release.

How NGT solves it
  • ACK or SAE behind CDN, WAF and ALB
  • PolarDB, Tair and OSS behind them
  • Pipelines and monitoring from day one
What you get

A production-ready platform on Alibaba Cloud's own managed services.

Greenfield Product Platform on Alibaba Cloud
HTTPSSQL, cache, filestraces, metricscommitdeploykeysAlibaba CloudEdge · one way inVPC · application tierFoundation · built from code firstData · managed servicesDelivery · Apsara DevOpsKeys, identity and postureObserveUsersweb and mobileProduct teamdevelopersAlibaba Cloud CDNWAFApplication LoadBalancerACKservicesServerless AppEngine (SAE)or no cluster to runTerraformor ROS templatesResourceOrchestration Servi…Cloud GovernanceCenteraccounts and guardrailsPolarDB forPostgreSQLTair (Redis)OSSfiles and assetsCode repositoryevery change reviewedApsara DevOps Flowbuild, test, scanContainer Registry(ACR)KMS secretsRAMSecurity CenterARMStraces and APMManaged Service forPrometheusdashboardsSimple Log ServiceCloudMonitoralarms

Point at a component to light its links; select it for what it does here and the practice that makes it right on Alibaba Cloud.

Point at a component to see what it does; select it for the best practice.Open the architecture

Alibaba Cloud skills in NGT, in numbers

8 of 8Alibaba Cloud DevOps Specialty certifications in FPT Software Hanoi are held by NGT engineers (Nov 2024)FPT Software Hanoi certification register
2 of 2Alibaba Cloud Certified Professional (ACP) certifications in FPT Software Hanoi, both NGT (Nov 2024)FPT Software Hanoi certification register
22professional, specialty and associate certifications earned by 10 NGT engineers in 2024FPT Software Hanoi Alibaba certificate list

Go deeper

Multi-cloud: five clouds, one way of workingModernisation: containers, serverless and re-architectureDevSecOps: pipelines with security built inArchitecture: modernisation factory on Alibaba Cloud

Explore Alibaba Cloud

4 pages, each a few minutes to read.

01 · 3 sectionsServicesSix services in the Alibaba Cloud offering, the needs they answer, and the tools.02 · 3 sectionsArchitectureThe modernisation factory, the strangler steps and the landing zone layer by layer.03 · 3 sectionsMethodNGT's five steps on Alibaba Cloud, which service moves what, and operations after the move.04 · 5 sectionsPeopleAlibaba Cloud certifications earned by NGT engineers in 2024.

Frequently asked questions

What customers ask first.

All questions

Next steps

Next in CloudsAWSTalk to NGTStart with an assessment
SourcesFPT Software Alibaba Cloud Service OfferingFPT Software Hanoi Alibaba certificate list (2024)FPT Software Hanoi certification register (Nov 2024)NGT Service Offering v2.0 (Mar 2025)