FPT SoftwareFHNCertificationsReference architectures
Talk to NGT
Huawei Cloud · 02 of 4

Architecture

Migration in waves, the landing zone layer by layer, and the secured working area.

Migration to Huawei Cloud in Waves
01

Migration to Huawei Cloud in waves

Huawei Cloud's own migration services carry the data; NGT's wave plan sets the pace.

Migration to Huawei Cloud in Waves
replicatecopycutoversyncmove groupsSource estateHuawei CloudMigration servicesTarget VPCs · landing zoneNGT wave planVMs and serversDatabasesFiles and objectsServer MigrationServiceData ReplicationServiceObject StorageMigration ServiceElastic Cloud ServerRDSObject StorageServiceCloud ContainerEnginere-platformed appsElastic Load BalanceCloud EyemonitoringCloud Backup andRecoveryLanding zoneredesignPilotParallel wavesGo-liveHyper-careafter each go-liveHand-overto the maintenance team

Point at a component to light its links; select it for what it does here and the practice that makes it right.

Point at a component to see what it does; select it for the best practice.Open the architecture
02

A Huawei Cloud landing zone, layer by layer

Redesigned for Huawei Cloud, written as code, the same in every account.

  1. 01Accounts and identityAccounts per environment and team; one sign-in with the customer's directory.OrganizationsIAM
  2. 02NetworkOne hub for every VPC, a dedicated line to the data centre, central inspection.Enterprise RouterDirect ConnectCloud Firewall
  3. 03Audit and logsEvery operation traced; logs kept apart from the workloads.Cloud Trace ServiceLog Tank Service
  4. 04Keys and secretsEncryption on by default, secrets out of code.Data Encryption Workshop
  5. 05OperationsMonitoring and backup in the account baseline.Cloud EyeCloud Backup and Recovery
  6. 06Working areaVirtual desktops for the delivery team, next to the workloads.Workspace
Written as Terraform
03

Laptops, or a secured working area

Why delivery teams work through cloud desktops on sensitive programmes.

Work on the team's own laptops Work through Workspace desktops
Where code and data liveCopies on many devicesIn the cloud, next to the workloads
Copying data outHard to stopClipboard, USB and egress blocked by policy
Joining and leavingDevices to set up, collect and wipeA desktop from a hardened image; access removed in one step
AuditScattered across devicesEvery sign-in and operation traced
SourcesNGT DevSecOps Service Offering (Jan 2025)NGT Service Offering v2.0 (Mar 2025)FPT Software Hanoi certification register (Nov 2024)FPT Software Hanoi Alibaba and Huawei certificate list (Nov 2024)NGT engineer profiles, a sample of 38 (Nov 2024 – Mar 2026)