CDW LIMITED

CDW Amazon Aurora

Amazon Aurora is a modern relational database service offering performance and high availability at scale, fully open-source MySQL- and PostgreSQL-compatible editions, and a range of developer tools for building serverless and machine learning (ML)-driven applications.

Features

High-performance storage subsystem with automatic growth
MySQL and PostgreSQL compatibility
Up to 5x MySQL throughput and 3x PostgreSQL throughput
Automated clustering and replication
Continuous automated backups and point-in-time restore
Up to 15 read replicas
Multi-AZ deployments with Aurora Replicas
Serverless configuration with automatic scaling
Built-in security with encryption and network isolation
Zero-ETL integrations with Amazon Redshift and SageMaker

Benefits

Improve application performance up to 5x for MySQL workloads
Increase PostgreSQL performance up to 3x standard PostgreSQL
Reduce database administration with automated clustering and replication
Scale storage automatically without downtime
Minimize recovery time with fault-tolerant storage
Enable global applications with multi-Region replication
Reduce costs with pay-as-you-go pricing
Access data analytics with zero-ETL integrations
Support modern applications with vector database capabilities
Ensure compliance with built-in security features

Free trial available

Service documents

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@uk.cdw.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

Contact

CDW LIMITED Andy Wood
Telephone: 0161 837 7744
Email: tenders@uk.cdw.com

About your service

Service categories

PaaS

Data Management

Database management systems
Databases
Database administration and development

Service scope

Service constraints: Please see https://docs.aws.amazon.com/general/latest/gr/aurora.html
System requirements: N/A
Cloud deployment model: Public cloud

User support

Email or online ticketing support: Yes
Support response times: Business Support+: General guidance < 24 hours; system impaired < 12 hours; production system impaired < 4 hours; production system down < 1 hour; business/mission critical system down < 30 minutes

Enterprise Support: General guidance < 24 hours; system impaired < 12 hours; production system impaired < 4 hours; production system down < 1 hour; business/mission critical system down < 15 minutes

Unified Operations: Same as Enterprise support, except the response time when business/mission critical system goes down: AWS Unified Operations provides five-minute response for severity-5 cases raised with Incident Detection and Response. Resolution effectiveness depends on available context.
User can manage status and priority of support tickets: Yes
Online ticketing support accessibility: WCAG 2.2 AAA
Phone support: Yes
Phone support availability: 24 hours, 7 days a week
Web chat support: Yes, at an extra cost
Web chat support availability: 24 hours, 7 days a week
Web chat support accessibility standard: WCAG 2.2 AAA
Web chat accessibility testing: AWS conducts comprehensive accessibility testing through manual assistive technology testing, functional testing by people with disabilities, and automated evaluations. Accessibility specialists test the interface using screen readers (e.g., JAWS, NVDA, VoiceOver), keyboard-only navigation, and voice recognition to help make our cloud computing accessible to everyone. This multi-layered testing approach operates throughout the development lifecycle, with results informing design improvements and status information in our Accessibility Conformance Reports (ACRs).
Onsite support: Yes, at extra cost
Support levels: AWS Support offers three comprehensive plans designed to accelerate your cloud operations: Business Support+, Enterprise Support, and Unified Operations. Each tier builds upon the previous with enhanced features, faster response times, and deeper expertise to match your evolving requirements. A comparison between the , Business Support+, Enterprise support plans is available on our Compare AWS Support Plans webpage (https://aws.amazon.com/premiumsupport/compare-plans/). The table on that page compares the plans across many factors, including case severity/response times, access to architecture support, and account assistance.
Support available to third parties: Yes
AI chatbot: Yes

Onboarding and offboarding

Getting started: AWS provides a range of resources to help customers get started on our services. These include comprehensive documentation (in multiple formats), introductory videos, hands-on labs, online and in-person training, access to a large network of partners and support from the public sector account team.
Service documentation: Yes
Documentation formats: HTML

PDF

Other
Other documentation formats: Kindle
End-of-contract data extraction: Data may be copied out using AWS API tools to download data.
End-of-contract process: Buyer may terminate the relationship with Supplier for any reason by (i) providing Supplier with notice and (ii) closing Buyer's account for all services for which Supplier provides an account closing mechanism.

Buyers pay for the services they use to the point of account termination. Please see the AWS UK G-Cloud 14 Pricing Document affiliated with this service in the Digital Marketplace.

Customers retain control and ownership of their data. Supplier will not erase customer data for 30 days following an account termination. This allows customers to retrieve content from Supplier services so long as the customer has paid any charges for any post-termination use of the service offerings and all other amounts due.
Documentation accessibility standard: WCAG 2.2 AA

Using the service

Web browser interface: Yes
Using the web interface: The AWS Management Console provides a simple web interface for Amazon Web Services. Users can log in with your AWS account name and password. If you’ve enabled AWS Multi-Factor Authentication, you will be prompted for your device’s authentication code. Almost all functionality for each of our services is exposed through the AWS Management Console. It facilitates management for all aspects of the AWS account in a consolidated view whilst providing access to all services and their respective functionalities.

In some cases, specific configuration parameters of a service are dedicated to, and only available from, the AWS Command Line Interface, AWS SDK, or the API.
Web interface accessibility standard: EN 301 549
Web interface accessibility testing: AWS conducts web interface (AWS Management Console) accessibility testing through a combination of manual, functional testing by people with disabilities, and automated evaluations. Accessibility specialists test the console using assistive technologies such as screen readers (e.g., JAWS, NVDA, VoiceOver), evaluate for keyboard-only navigation, and other assistive technologies. AWS provide more than 250 Accessibility Conformance Reports for AWS services, which demonstrate the degree to which our services conform to accessibility standards. All conformance reports are available for customers to download on-demand through AWS Artifact. Please refer to these conformance reports for detailed information about AWS service accessibility.
API: Yes
What users can and can't do using the API: "Using the Amazon RDS API, users can perform key operations such as manage Aurora DB clusters and instances, configure database settings and parameters, initiate backups and restores, set up and manage read replicas.

Amazon RDS provides an HTTP endpoint to run SQL statements on an Amazon Aurora DB cluster. To run these statements, you use the RDS Data API.

For the full list of API operations please see:
https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/Welcome.html
https://docs.aws.amazon.com/rdsdataservice/latest/APIReference/Welcome.html"
API automation tools: Ansible

Chef

SaltStack

Terraform

Puppet

Other
Other API automation tools: Wide range of third party services work with AWS APIs.

SDKs for Python, Ruby, PHP, JavaScript, Java, .NET, Node.js
API documentation: Yes
API documentation formats: HTML

PDF
Command line interface: Yes
Command line interface compatibility: Linux or Unix

Windows

MacOS
Using the command line interface: "Amazon Aurora uses the following command line interfaces:
AWS Command Line Interface (AWS CLI) - A unified tool to manage your AWS services.

For full functionality please see:
https://docs.aws.amazon.com/cli/latest/reference/rds"

Scaling

Independence of resources: "Customer environments are logically segregated to prevent users and customers from accessing resources not assigned to them.

Services which provide virtualized operational environments to customers (i.e. EC2) ensure that customers are segregated via security management processes/controls at the network and hypervisor level.

AWS continuously monitors service usage to protect infrastructure and support availability commitments/requirements. AWS maintains a capacity planning model to assess infrastructure usage and demands at least monthly, and usually more frequently. The AWS capacity planning model supports the planning of future demands to acquire and implement additional resources based on current resources and forecasted requirements."
Usage notifications: Yes
Usage reporting: API

Email

SMS

Other
Other usage reporting: "AWS Service Quotas Automatic Quota Management:
AWS customers can receive notifications about quota usage through automatic quota management via the Service Quotas console or API.
For applicable services please see https://console.aws.amazon.com/servicequotas/home/amSettings

CloudWatch Service Limit and Quota Alarms:
You can use CloudWatch to configure alarms that alert you when usage approaches service limits and quotas.
For applicable services please see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Quotas-Visualize-Alarms.html

AWS Trusted Advisor Service Limits Checks:
AWS Trusted Advisor can be used to set up notifications when service usage exceeds 80% of quota limits (requires Business or Enterprise Support plan).
For applicable services please see https://docs.aws.amazon.com/awssupport/latest/user/service-limits.html"
Optimising consumption: Yes
Automatic scaling: Yes

Analytics

Infrastructure or application metrics: Yes
Metrics types: CPU

Memory

Number of active instances

Other
Other metrics: Database connections

Transaction latency metrics (commit, DDL, DML, select, insert, update, delete)

I/O operations (read, write IOPS and throughput)

Buffer cache hit ratios

Replication lag metrics

Storage usage and billing metrics

Query performance metrics

Memory health and OOM metrics

Active and blocked transactions

Backtrack and snapshot storage metrics
Reporting types: API access

Real-time dashboards
Resource tagging: Yes
FOCUS resource tagging: Yes

Resellers

Supplier type: Reseller (no extras)
Organisation whose services are being resold: Amazon Web Services (AWS)

Staff security

Staff security clearance: Conforms to BS7858:2019
Government security clearance: Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: United Kingdom

European Economic Area (EEA)

Other locations
User control over data storage and processing locations: Yes
Datacentre security standards: Supplier-defined controls
Penetration testing frequency: At least every 6 months
Penetration testing approach: Another external penetration testing organisation
Protecting data at rest: Other
Other data at rest protection approach: AWS adheres to independently validated privacy, data protection, security protections and control processes. These are listed under “standards and certifications”.

AWS is responsible for the security of the cloud; customers are responsible for security in the cloud. AWS enables customers to control their content (where it will be stored, how it will be secured in transit or at rest, how access to their AWS environment will be managed).

Wherever appropriate, AWS offers options to add additional security layers to data at rest, via scalable and efficient encryption features. AWS offers flexible key management options and dedicated hardware-based cryptographic key storage.
Data sanitisation process: Yes
Equipment disposal approach: In-house destruction process
Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Explicit overwriting of storage before reallocation / Secure Erase

Physical Destruction / Hardware containing data is completely destroyed

Backup and recovery

What’s backed up: Aurora can back up entire database cluster volumes including:

All data, configuration settings, and transaction logs.
Backup controls: "Replication monitoring: Global Databases can monitor RPO lag time of secondary clusters to ensure they stay within target RPO windows

Write forwarding: Global Databases secondary clusters can forward writes to primary

Dedicated infrastructure: Global Databases use dedicated replication infrastructure that leaves databases available to serve applications

Cross-Region/account: Snapshots support simultaneous cross-Region and cross-account copying in a single action

Full backups: Cross-account and cross-Region copy from full backups

For more details, see https://docs.aws.amazon.com/whitepapers/latest/disaster-recovery-workloads-on-aws/disaster-recovery-options-in-the-cloud.html"
Datacentre setup: Multiple datacentres with disaster recovery
Scheduling backups: Users schedule backups through a web interface
Backup recovery: Users can recover backups themselves, for example through a web interface
Backup and recovery: Yes
RPO/RTO: Yes

Data-in-transit protection

Data protection between buyer and supplier networks: Private network or public sector network

TLS (version 1.2 or above)

IPsec or TLS VPN gateway

Legacy SSL and TLS (under version 1.2)

Other
Other protection between networks: Bonded fibre optic connections
Data protection within supplier network: TLS (version 1.2 or above)

IPsec or TLS VPN gateway

Legacy SSL and TLS (under version 1.2)

Other
Other protection within supplier network: "Customer environments are logically segregated to prevent users and customers from accessing resources not assigned to them. AWS gives customers ownership and control over their content by design through simple, but powerful tools that allow customers to determine how their content will be secured in transit.

AWS enables customers to open a secure, encrypted channel to AWS services using TLS/SSL, and/or IPsec or TLS VPN (if applicable), or other means of protection the customers wish to use.
API calls can be encrypted with TLS/SSL to maintain confidentiality; the AWS Console connection is encrypted with TLS."

Availability and resilience

Guaranteed availability: "AWS currently provides SLAs for several services. Due to the rapidly evolving nature of AWS’s product offerings, SLAs are best reviewed directly on our website via the link below: https://aws.amazon.com/legal/service-level-agreements/

Well-architected solutions on AWS that leverage AWS service SLAs and unique AWS capabilities such as multiple Availability Zones, can ease the burden of achieving specific SLA requirements. We encourage customers to visit our well architected documentation on our website, at https://docs.aws.amazon.com/wellarchitected/latest/reliability-pillar/appendix-a-designed-for-availability-for-select-aws-services.html"
Approach to resilience: "The AWS Business Continuity plan details the process that AWS follows in the case of an outage, from detection to deactivation. AWS has developed a three-phased approach: Activation and Notification Phase, Recovery Phase, and Reconstitution Phase. This approach ensures that AWS performs system recovery and reconstitution efforts in a methodical sequence, maximizing the effectiveness of the recovery and reconstitution efforts and minimizing system outage time due to errors and omissions.

AWS maintains a ubiquitous security control environment across all regions. Each data centre is built to physical, environmental, and security standards in an active-active configuration, employing an n+1 redundancy model, ensuring system availability in the event of component failure. Components (N) have at least one independent backup component. All data centres are online and serving traffic. In case of failure, there is sufficient capacity to enable traffic to be load-balanced to the remaining sites.

Customers are responsible for implementing contingency planning, training and testing for their systems hosted on AWS. AWS provides customers with the capability to implement a robust continuity plan, including the frequent server instance back-ups, data redundancy replication, and the flexibility to place instances and store data within multiple geographic regions across multiple Availability Zones."
Outage reporting: Public dashboard; personalised dashboard with API and events; configurable alerting (email/SMS/messaging)

Identity and authentication

User authentication needed: Yes
User authentication: Multi-Factor Authentication (MFA)

Identity federation with existing provider (for example Google Apps)

Username or password

Other
Other user authentication: AWS’s Identity and Access Management (IAM) system allows you to control access to AWS services/resources. No actions are permissible without authentication. IAM facilitates the issuance of access permissions per user/group. MFA is available at no extra cost. AWS CloudTrail allows you to log, continuously monitor and retain events related to API calls across your AWS infrastructure.
Access restrictions in management interfaces and support channels: AWS IAM provides user access control to AWS services, APIs and specific resources. Other controls include time, originating IP address, SSL use, and whether users authenticated via Multi Factor Authentication devices. API calls to launch/terminate instances, change firewalls, and perform other functions are signed by customers’ Amazon Secret Access Key (either the root AWS Account’s Secret Access Key or the Secret Access key of a user created with IAM). API calls can be encrypted with TLS/SSL for confidentiality and customers can use TLS/SSL-protected API endpoints.
Access restriction testing frequency: At least every 6 months
Management access authentication: Multi-Factor Authentication (MFA)

Other
Description of management access authentication: AWS controls access to systems through authentication that requires a unique user ID and password. AWS systems don't allow actions to be performed without identification or authentication. Remote access requires multi-factor authentication. All remote administrative access attempts are logged and reviewed by the Security team for unauthorized attempts or suspicious activity. Incident response procedure is triggered in case of suspicious activity. AWS employs the concept of least privilege, allowing only the necessary access for users to accomplish their job. User access to AWS systems requires documented approval from authorized personnel.
Devices users manage the service through: Dedicated device on a segregated network (providers own provision)

Audit information for users

Access to user activity audit information: Users have access to real-time audit information
How long user audit data is stored for: User-defined
Access to supplier activity audit information: You control when users can access audit information
How long supplier audit data is stored for: At least 12 months
How long system logs are stored for: At least 12 months

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: Yes
Security governance standards: CSA CSM version 4.0

ISO/IEC 27001

Other
Other security governance standards: ISO 27017, ISO27018, Cyber Essentials Plus, CSA CCM version 4.0,
Information security policies and processes: AWS implements formal, documented policies and procedures that provide guidance for operations and information security within the organisation. Policies address purpose, scope, roles, responsibilities and management commitment.

Employees maintain policies in a centralised and accessible location. AWS Security Assurance is responsible for familiarizing employees with the AWS security policies.

AWS has established information security functions that are aligned with defined structure, reporting lines, and responsibilities. Leadership involvement provides clear direction and visible support for security initiatives.

Policies are approved by AWS leadership at least annually or following a significant change to the AWS environment.

Operational security

Configuration and change management standard: Supplier-defined controls
Configuration and change management approach: Changes to AWS services and features follow secure software development practices, including security risk reviews prior to launch. Developer access to production environments is via explicit access system requests, subject to owner review and authorisation.

Teams set bespoke change management standards per service, underpinned by standard AWS guidelines.

All production environment changes are reviewed, tested and approved. Stages include design, documentation, implementation (including rollback procedures), testing (non-production environment), peer to peer review (business impact/technical rigour/code), final approval by authorised party.

Emergency changes follow AWS incident response procedures. Exceptions to change management processes are documented and escalated to AWS management.
Vulnerability management type: Supplier-defined controls
Vulnerability management approach: AWS Security performs vulnerability scans on the host operating system, web applications, and databases in the AWS environment. Approved third party vendors conduct external assessments (minimum frequency: quarterly). Identified vulnerabilities are monitored and evaluated. Countermeasures are designed and implemented to neutralise known/newly identified vulnerabilities.

AWS Security monitors newsfeeds/vendor sites for patches and receives customer intelligence via http://aws.amazon.com/security/vulnerability-reporting/.

Security and Compliance is a shared responsibility between AWS and the customer, and the customer must perform some of the vulnerability management process. See https://aws.amazon.com/compliance/shared-responsibility-model/ for more details.
Protective monitoring type: Supplier-defined controls
Protective monitoring approach: AWS deploys (pan-environmental) monitoring devices to collect information on unauthorized intrusion attempts, usage abuse, and network/application bandwidth-usage. Devices monitor:

• Port scanning attacks
• Usage (CPU, processes, disk utilization, swap rates, software-error generated losses)
• Application metrics
• Unauthorized connection attempts

AWS security controls are reviewed by independent external auditors during audits for our SOC, PCI DSS and ISO 27001 compliance.

Security and Compliance is a shared responsibility between AWS and the customer. See https://aws.amazon.com/compliance/shared-responsibility-model/ for more details.
Incident management type: Supplier-defined controls
Incident management approach: AWS adopts a three-phased approach to manage incidents:

1. Activation and Notification Phase
2. Recovery Phase
3. Reconstitution Phase

To ensure the effectiveness of the AWS Incident Management plan, AWS conducts incident response testing, providing excellent coverage for the discovery of defects and failure modes as well as testing the systems for potential customer impact.

The Incident Response Test Plan is executed annually, in conjunction with the Incident Response plan. It includes multiple scenarios, potential vectors of attack, the inclusion of the systems integrator in reporting and coordination and varying reporting/detection avenues.
Post-quantum cryptography secure: Yes

Secure development

Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Separation between users

Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
Who implements virtualisation: Supplier
Virtualisation technologies used: Other
Other virtualisation technology used: AWS proprietary
How shared infrastructure is kept separate: Customer environments are logically segregated, preventing users and customers from accessing unassigned resources. Customers maintain full control over their data access. Services which provide virtualized operational environments to customers, ensure that customers are segregated and prevent cross-tenant privilege escalation and information disclosure via hypervisors and instance isolation.

Energy efficiency

Energy-efficient datacentres: Yes
Description of energy efficient datacentres: By the end of 2025, AWS will complete third-party conformity assessment on our owned and operated data centres in Ireland, France, Germany, Spain and Sweden. AWS owned data centres in the UK are designed and operated according to similar design standards used for in-scope data centres of the third-party assessment. As such, we believe AWS owned data centres in the UK align with the best practices of the EU Code of Conduct (EU CoC). New servers purchased for AWS data centers in the European Union meet EU 2019/424 ("Lot 9") energy efficiency requirements, and all data center servers and storage products comply with the EU Ecodesign Directive (2009/125/EC). AWS has conducted energy efficiency audits since 2015 and has implemented certified Energy Management Systems (EnMS) in accordance with ISO 50001 standards in Europe. AWS also maintains ISO 14001 certification for environmental management across European data center locations, demonstrating systematic environmental performance management aligned with ISO 14001:2015 standards. AWS achieved 100% renewable energy match for global operations in 2023, seven years ahead of the 2030 target, while Field Engineering teams continuously drive improvement projects to improve energy efficiency and optimize capacity.

Pricing

Discount for educational organisations: No
Free trial available: Yes
Description of free trial: Short-term trial
Experience select AWS services through limited free trials. Begin your trial when you start using the service, and utilize any eligible credits for usage beyond trial limits.
Link to free trial: https://aws.amazon.com/free/

Discount

Provide your minimum discount applicable to your baseline prices: 0%

Formula for calculating price of your services

Which of the core deployment models you intend to offer

Public Cloud

Public Cloud - Formula for calculating price of your services

Total Cost: The Total Cost for a buyer's call off requirement in a Public Cloud Deployment
=
Baseline Pricing: As a reseller of public cloud services from several public cloud service providers, including Microsoft, AWS, NetApp and Veeam, Buyers will be able to find a full catalogue of services and baseline pricing on each of the vendor's publicly accessible websites (all links entered below). Buyers can view baseline pricing for the individual service that they require and are also able to build service estimates using the baseline pricing where one or more services are required. The estimates allows the Buyer to configure a baseline quote for the required services to the required/desired specification. Additionally, all CDW services listings in Lot 1a also include a price document that provides Buyers with access to baseline pricing.

Links to the full catalogue of available services and baseline pricing for proposed vendors are:

Microsoft:
https://azure.microsoft.com/en-gb/pricing/#Pricing-by-product

https://azure.microsoft.com/en-gb/pricing/calculator/

Amazon Web Services (AWS): https://aws.amazon.com/pricing/

https://calculator.aws/#/estimate

NetApp: https://www.netapp.com/pricing/

Veeam: https://www.veeam.com/products/veeam-data-cloud/purchasing-options.html
Baseline Pricing - Web link: https://azure.microsoft.com/en-gb/pricing/#Pricing-by-product
-
Minimum Discounting: 0%
+
Onboarding Activity: Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
+
Additional sources of cost: Additional sources of cost that may relate to a Buyer contracting for services in this deployment model could include:

•Ongoing support: Some Buyers may require additional support in managing their cloud infrastructure once the services are operational. CDW can provide IaaS/PaaS ongoing management support through our CloudCare managed services, which is an additional cost consisting of an initial CapEx cost and ongoing costs which are calculated based on a percentage of the Buyer’s monthly consumption.
•Unscheduled services: Such as unscheduled Healthcheck professional service assessments which are not included part of the onboarding scope/service.
•Buyer overspend: Whilst CDW will make every effort to ensure the services deployed are tailored (rightsized) to each Buyer’s specific requirements and budget, there may be some instances of Buyer overspend that result in additional costs. CDW engages with each Buyer and uses our defined pre-sales methodology to undertake a thorough assessment of the Buyer’s immediate requirements, growth strategy and budgetary requirements. This is the foundation for designing a service deployment model that accurately reflects the Buyer’s immediate and future service consumption and spend. However, some unforeseeable factors, such as unexpected rates/periods of Buyer growth, may result in requirements for increased consumption and ultimately, increased/additional costs.
-
Additional sources of cost reduction: Sources of cost reduction that could relate to a Buyer contracting for services in this deployment model could include:

•Access to Cloud Service Provider (CSP) funding pots/programs: Many of the leading CSPs having funding pots and programs available that can be used to subsidise Buyer services and reduce costs. These funding pots are often accessible in scenarios when defined CSP eligibility criteria and pre-requisites are met. Examples of funding programs include Microsoft Azure’s Migration & Modernization Program (AMMP), Microsoft’s End Customer Investment Funds (ECIF) and Microsoft’s Commerce Incentives (MCI).
•Vertical specific discount schemes: Many of the CPSs offer vertical specific discount schemes on their services. As an example, Microsoft offers government discount schemes and discounts/grants for eligible not for profit organisations. As another example, AWS offers public sector discounts through their One Government Value Agreement (OGVA) program.
•Committed spend agreements: Some of the leading CPSs offer contractual agreements that offer benefits, such as discounts and cost reductions, in exchange for the Buyer making an up-front commitment to achieve a minimum level of consumption/spend. For example, Microsoft offers the Microsoft Azure Consumption Commitment (MACC) which offers Buyers discounts and financial benefits for commitment to a pre-agreed level of consumption/spend.

Mandatory certifications

Are you are bidding to offer IaaS and/or PaaS as a reseller or are you in sole control of the infrastructure

Reseller

Cloud service suppliers you intend to resell with evidence

Organisation 1

Organisation name

Microsoft

Website address/upload for organisation

Website address

https://marketplace.microsoft.com/en-us/partners/872cc32f-6dcc-4955-bfe9-4ceffd1ff2b8/overview

Organisation 2

Organisation name

Veeam

Website address/upload for organisation

Website address

https://www.veeam.com/partners/find-a-partner.html?country=GBR&search=cdw

Organisation 3

Organisation name

Amazon Web Services (AWS)

Website address/upload for organisation

Website address

https://partners.amazonaws.com/search/partners/?facets=Program%20%3A%20AWS%20Marketplace%20Skilled%20Consulting%20Partner&pName=CDW

Organisation 4

Organisation name

NetApp

Website address/upload for organisation

Website address

https://www.netapp.com/partners/partner-connect/cdw-ltd/

ISO 9001 certification

Provided

ISO 27001 certification

Provided

ISO 20000-1 certification

Provided

Are you reliant on the Cloud Service Provider for some accreditations

Yes

Cyber Essentials

Do you have a Cyber Essentials Plus certificate?: Yes
Cyber Essentials Plus certificate Number: 4f861f6b-f0f0-44fa-a807-6049b0d9bfdc

Non-mandatory Standards and certifications

ISO 28000:2022 certification: No
Quality management systems (QMS): Yes
CSA STAR certification: No
PCI certification: Yes
Who accredited the PCI DSS certification: Worldpay
PCI DSS accreditation date: Tuesday 11 March 2025
What the PCI DSS doesn’t cover: N/A
Other security certifications: No

Section B - Commitment for Future: Delivery: Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d

New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b

Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified

Plans to engage the contract workforce in deciding the most important workplace issues to address

Ensuring new workers are informed of their right to join a trade union

Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce

Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours

Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing

Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment

Activities to cascade good practice on fair working conditions throughout the supply chain

Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave

Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce

Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary

Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible

Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative

Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors

Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract

Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas

Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

Volunteering opportunities for staff

Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors

Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented

Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.

How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain

Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges

Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals

Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals

Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)

Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain

Ensuring accessibility to contracting and subcontracting opportunities for disabled business owners and employees

Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual

Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract

Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations

Plans for positive actions with community groups.

Measures for making facilities used in the delivery of the contract available for community groups, education or training

Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds

Collaborating with anchor institutions and community groups to make facilities available for education, training or community events

Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

Policy Outcome 6: Employment and training: For those who face barriers to employment

Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract

Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors

Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)

Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors

Collection of the views and expertise of disabled people and their representative organisations on successfully supporting disabled employees or applicants

Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition

Introducing transparency to pay and reward processes

Offering a range of quality opportunities with routes of progression if appropriate, e.g. T Level industry placements, students supported into higher level apprenticeships.

Working conditions which promote an inclusive working environment and promote retention and progression

Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain

Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

Understanding of the issues affecting the development of new skills by target cohort

Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce

Other measures to offer development opportunities for the target cohort(s) in the contract workforce

Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

Understanding of issues relating to entering the contract workforce

Creation of outreach activities to create a pipeline of employees for the future contract delivery

Content of the outreach activity is designed to suit the target cohort

Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition

Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

Request an accessible format

Cookies on Digital Marketplace

CDW Amazon Aurora

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

About your service

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Backup and recovery

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Security governance

Operational security

Secure development

Separation between users

Energy efficiency

Pricing

Discount

Formula for calculating price of your services

Mandatory certifications

Cyber Essentials

Non-mandatory Standards and certifications

Social value

Service documents