Indonesian Energy & Logistics Group Modernizes SAP ECC with Secure and Scalable AWS Cloud Architecture

About the Customer

The customer is a growing Indonesian energy infrastructure and logistics group operating across coal mining, infrastructure management, and logistics services. The organization supports complex, mission-critical business processes across multiple subsidiaries and relies heavily on its enterprise resource planning platform to run core operations.

As the business expanded, the customer required a more reliable, scalable, and secure enterprise system to sustain growth while maintaining consistent performance and availability.

Customer Challenge

The customer was running its SAP ECC system on legacy on-premise hardware, which introduced several operational and technical challenges:

• Limited Scalability – Existing infrastructure could not easily scale to meet increasing business demands.

• High Maintenance Costs – Aging hardware and data center operations required significant ongoing investment.

• Operational Dependency on On-Premise Data Centers – Infrastructure availability and performance were tightly coupled to in-house facilities.

• Risk to System Availability – Hardware limitations increased the risk of downtime for mission-critical SAP workloads.

The customer sought to migrate SAP ECC to AWS to establish a highly available, secure, and cloud-native SAP environment, while maintaining or improving system performance.

Partner Solution

PT Innovation Cloud Services (ICS Compute) worked with the customer to design and implement a secure and scalable SAP ECC architecture on AWS, following AWS best practices for enterprise workloads and mission-critical systems.

The solution was deployed in the AWS Asia Pacific (Jakarta) Region to meet latency and data residency requirements.

ICS Compute designed a dedicated Amazon Virtual Private Cloud (VPC) with a layered network architecture that separates connectivity components, application workloads, and data tiers. SAP ECC environments operate entirely within private subnets, while controlled public subnets host only the components required for secure connectivity and administration. The design also includes isolated network tiers for database workloads and staging purposes, enabling future expansion and operational flexibility.

SAP ECC application servers and supporting components run on Amazon EC2 instances. Instance sizing and capacity planning were performed based on workload characteristics, with a design target to keep CPU and memory utilization below 85% under normal operating conditions. This approach provides sufficient performance headroom while maintaining cost efficiency and operational stability.

To protect business-critical data, daily backups are configured for all production EC2 instances using centralized backup policies. These backups support fast recovery and simplify backup administration across the environment.

For disaster recovery, AWS Elastic Disaster Recovery (AWS DRS) is implemented to provide near real-time replication of critical SAP ECC workloads from the primary environment to a secondary recovery environment within AWS. Replicated instances remain in a standby state and can be activated during disaster recovery events, enabling failover readiness and improved business continuity.

Operational visibility is provided through Amazon CloudWatch. ICS Compute implemented custom dashboards displaying CPU utilization, memory utilization, and disk utilization, enabling the operations team to monitor system health and take proactive action.

From a security and governance perspective, AWS Identity and Access Management (IAM) enforces least-privilege access for administrators and operators. AWS CloudTrail records authentication events and API activity for auditing and compliance, while Amazon GuardDuty continuously monitors the environment for potential threats and suspicious behavior.

Through this implementation, the customer established a modern SAP ECC environment on AWS that is secure, resilient, and ready to support future business growth.

Results and Benefits

The AWS migration enabled the customer to modernize its SAP landscape with a secure, scalable, and resilient cloud foundation, delivering tangible business and operational outcomes:

• Stable SAP ECC operations on cloud infrastructure designed for enterprise workloads.

• Disaster recovery environment in place, with AWS Elastic Disaster Recovery providing replication and failover readiness.

• Improved infrastructure scalability without additional on-premise capital investment.

• Consistent system performance meeting or exceeding pre-migration benchmarks.

• Reliable daily backups for all production systems.

• SAP ECC application running without functional issues after migration.

About the Partner

PT. Innovation Cloud Services (ICS Compute) is Indonesia’s first AWS Premier Consulting Partner, specializing in secure cloud adoption, modernization, and managed services. Recognized with AWS Competencies in Migration & Modernization, DevOps, Resilience, and Generative AI, ICS Compute helps enterprises transform operations with scalable, secure, and compliant AWS solutions.