Production Workload Migration to AWS for HRCE, Government of Tamil Nadu
Migration of ITMS, WMS, staging application, PostgreSQL databases, and file-based workloads to AWS
- Customer
- Hindu Religious and Charitable Endowments (HRCE), Government of Tamil Nadu
- Location
- Tamil Nadu, India
- Implementation Period
- 1 September 2026 – 5 October 2026
- AWS Region
- Asia Pacific (Mumbai)
Project Overview
The Hindu Religious and Charitable Endowments (HRCE) Department, Government of Tamil Nadu, initiated the migration of its production workloads—including ITMS, WMS, staging applications, PostgreSQL databases, and file-based content—from its on-premises environment to Amazon Web Services (AWS).
Ilios Digital, an AWS delivery partner, supported the department through the end-to-end migration process. The engagement covered workload assessment, target architecture design, AWS environment provisioning, secure connectivity, database migration, file transfer, application deployment, security configuration, testing, and production cutover.
The migration was designed to maintain application and data connectivity throughout the transition while establishing a secure and operationally manageable environment on AWS.
Business Challenges
HRCE's applications, databases, and file-based workloads were interconnected within its existing on-premises environment. Migrating these workloads required careful planning to preserve application dependencies and data consistency. The key challenges included:
Migrating production applications without disrupting business operations.
Maintaining secure connectivity between the on-premises environment and AWS.
Migrating PostgreSQL databases while maintaining data consistency and synchronization.
Transferring application files, images, and flat files with completeness and integrity.
Establishing secure application access, monitoring, and audit controls.
Planning and validating the production cutover to minimize migration risk.
Solution Overview
Ilios Digital designed and implemented a secure, VPC-based AWS environment to host HRCE's identified production workloads.
The solution included Amazon EC2 for application hosting, Application Load Balancer and Network Load Balancer for traffic distribution, AWS WAF for web application protection, and PostgreSQL database migration using AWS Database Migration Service (AWS DMS).
AWS Site-to-Site VPN provided secure connectivity between the existing on-premises environment and AWS during migration. AWS DataSync was used to transfer application files, images, and flat files to Amazon S3.
The migration followed a controlled sequence of assessment, deployment, synchronization, validation, and production cutover.
AWS Solution Architecture
The target architecture was deployed in the AWS Mumbai Region using Amazon VPC, with public and private subnets to separate access-facing components from application and database workloads.
Amazon VPC
Network Isolation
Network isolation using public and private subnets, route tables, and security groups.
Amazon EC2
Application Hosting
Hosting ITMS, WMS, staging applications, jump server, and supporting workloads.
Elastic Load Balancing
Traffic Distribution
Application Load Balancer and Network Load Balancer for traffic distribution and health checks.
AWS WAF
Web Application Protection
Protection for web-facing application traffic.
AWS Site-to-Site VPN
Secure Connectivity
Secure connectivity between the on-premises environment and AWS.
Amazon RDS for PostgreSQL / PostgreSQL Database Environment
Target Database
Target database configuration with primary and replica components.
AWS Database Migration Service (AWS DMS)
Database Migration
Initial database migration and ongoing replication.
AWS DataSync
File Transfer
Transfer of application files, images, and flat files.
Amazon S3
File Storage
Storage for migrated file-based workloads.
AWS IAM, AWS KMS, and AWS Secrets Manager
Access, Encryption, and Credentials
Access control, encryption, and credential management.
AWS Network Firewall
Network Protection
Network traffic protection.
Amazon CloudWatch and Amazon SNS
Monitoring and Alerts
Monitoring, metrics, notifications, and operational alerts.
AWS CloudTrail, Amazon GuardDuty, and Amazon Inspector
Audit and Threat Detection
Audit logging, threat detection, and vulnerability assessment.
Migration and Implementation Approach
The engagement was delivered through a structured ten-phase migration process:
Workload assessment and target architecture design.
AWS environment and network foundation setup.
Secure on-premises connectivity through AWS Site-to-Site VPN.
Provisioning of AWS resources and application workloads.
PostgreSQL database migration using AWS DMS.
File migration using AWS DataSync and Amazon S3.
Application deployment and security configuration.
Application, database, network, and file validation.
Production synchronization and cutover.
Post-migration validation and operational handover.
Business Impact and Outcomes
The migration established a production AWS environment for HRCE's identified workloads within the five-week engagement period. Key outcomes included:
Production workload migration
ITMS, WMS, and staging application workloads transitioned to AWS.
Database migration
PostgreSQL databases migrated and synchronized using AWS DMS.
File migration
Application files, images, and flat files transferred to Amazon S3 using AWS DataSync.
Validation coverage
13 validation areas completed across networking, applications, databases, replication, file migration, load balancing, security, monitoring, and cutover.
Secure connectivity
AWS Site-to-Site VPN established and validated for migration and synchronization.
Centralized monitoring
Amazon CloudWatch and Amazon SNS configured to support operational visibility and notifications.
Operational handover
Migration activities, configurations, test results, and validation evidence documented and handed over to HRCE stakeholders.
Resilience and Recovery
The solution incorporated database replication, load-balancer health checks, repeat file synchronization, and controlled cutover procedures.
AWS DMS supported database synchronization until the final production transition, while AWS DataSync enabled file transfer and validation. Amazon S3 provided storage for migrated files. Monitoring and security services supported operational visibility following cutover.
Conclusion
Through this engagement, Ilios Digital helped the HRCE Department transition its identified production applications, PostgreSQL databases, and file-based workloads from an on-premises environment to AWS.
By combining secure connectivity, application hosting, database replication, file migration, security controls, and centralized monitoring, the project established a structured and controlled approach to production workload migration.
The completed migration and validation activities were documented to support production acceptance and ongoing operations.