VODAFONE LIMITED

Public Cloud – AWS (Resell Only)

Amazon Web Service (AWS) offered by Vodafone brings you the breadth and depth of the AWS portfolio, the leading provider of Public Cloud services globally. AWS is a secure cloud services platform, offering compute power, database storage, content delivery, and other functionality to help businesses scale and grow.

Features

• Scalable, reliable, and secure global computing infrastructure
• Your application can scale up or down based on demand
• End-to-end approach to secure flexible infrastructure

Benefits

• Quick and secure hosting of your applications
• Flexibility to select all the services you need
• No long-term contracts or up-front commitments

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at frameworks_team@vodafone.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

849368623648104

Contact

Frameworks Team
07775671027
frameworks_team@vodafone.com

About your service

• Service categories:

  IaaS

  IaaS Compute

  Virtualised x86

  • General purpose

Service scope

• Service constraints: Please view Service Description for Service Constraints
• System requirements: Please view Service Description for System Requirements
• Cloud deployment model: Public cloud

User support

• Email or online ticketing support: Yes
• Support response times: The standard response time is one hour with support available on a 24/7 basis. The Support Incident Escalation is available to be utilised for critical issues and whenever needed to resolve the issue speedily.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Vodafone will provide you with support for AWS Service. Our Hosting Solutions Support team provides a 24x365 Service Desk and Incident Management team. Support will be provided in English. The Vodafone operational model for support is ITIL based. Vodafone’s support model for AWS will triage issues into AWS if Vodafone is unable to resolve the issue. More details : Service Descriptions Support section
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Onboarding guidance is provided as part of the service. When the AWS service is ready the customer will be provided with the following: I. Service Terms – contains Vodafone and AWS T&Cs II. Service Descriptions – a guide to cover all customer information inc. AWS products, support, global infrastructure etc. III : Document for all relevant information pack
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: From the application that uses AWS or through the Admin GUI. Vodafone may also be able to help you minimise the impact of off-boarding through our professional service capability.
• End-of-contract process: The customer must remove all of their data from the the Platform and notify Vodafone that they wish to terminate the Service.; Vodafone will notify the Customer of the date that the Service and any remaining data will be removed.; It is Customer’s sole responsibility to remove their data from the Platform; Vodafone has no liability for any Customer data that remains on the Platform once the Customer has notified Vodafone that they wish to terminate the Service.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: All onboarding and offboarding processes are coordinated by our Cloud Management Team who have a range of methods to share documentation depending on the requirements of the customer. This ranges from sharing via email, to sharing with direct access to a shared online portal.

Using the service

• Web browser interface: Yes
• Using the web interface: Customer can access AWS management console
• Web interface accessibility standard: WCAG 2.2 AAA
• Web interface accessibility testing: It is accessible anywhere through an internet connection over HTTPs and end to end security can be assured by using Vodafone's secure networks.
• API: Yes
• What users can and can't do using the API: The AWS public cloud provides a self-service management console and application programming interfaces for the provision and management of AWS services. Both the API and Console are available over the public Internet to Vodafone and our customers.
• API automation tools:
  • Ansible
  • Chef
  • OpenStack
  • SaltStack
  • Terraform
  • Puppet
• API documentation: No
• Command line interface: Yes
• Command line interface compatibility:
  • Linux or Unix
  • Windows
  • MacOS
• Using the command line interface: Please refer the attached link for more detail. https://aws.amazon.com/cli/

Scaling

• Independence of resources: AWS offers a broad set of global cloud-based products including compute, storage, databases, analytics, networking, mobile, developer tools, management tools, IoT, security and enterprise applications. These services help organizations move faster, lower IT costs, and scale
• Usage notifications: Yes
• Usage reporting: Email
• Optimising consumption: Yes
• Automatic scaling: No

Analytics

• Infrastructure or application metrics: Yes
• Metrics types:
  • CPU
  • Disk
  • Memory
• Reporting types: API access
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Amazon Web Services (AWS)

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: Less than once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Other
• Other data at rest protection approach: The AWS infrastructure puts strong safeguards in place to help protect customer privacy. All data is stored in highly secure AWS data centers. AWS enables customers to control their content (where it will be stored, how it will be secured in transit or at rest, For information on how data at rest is protected in AWS, see:; ; https://aws.amazon.com/whitepapers/overview-of-security-processes/; ; https://d1.awsstatic.com/whitepapers/AWS_Securing_Data_at_Rest_with_Encryption.pdf; ; With regards to Billing data is encrypted at rest.
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Backup and recovery

• What’s backed up:
  • Replaces your existing on-premises or off-site backup solution
  • Backup offers multiple components that you download and deploy
• Backup controls: Backup applications need to be purchased by AWS console. No Operational Support System (OSS) tooling is deployed (monitoring, backup, patch management and anti-malware).
• Datacentre setup: Multiple datacentres with disaster recovery
• Scheduling backups: Users contact the support team to schedule backups
• Backup recovery: Users contact the support team
• Backup and recovery: Yes
• RPO/RTO: No

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • IPsec or TLS VPN gateway
  • Other
• Other protection between networks: Ou can connect to an AWS access point via HTTP or HTTPS using Secure Sockets Layer (SSL), a cryptographic protocol that is designed to protect against eavesdropping, tampering, and message forgery.; For customers who require additional layers of network security, AWS offers the Amazon Virtual Private Cloud (VPC), which provides a private subnet within the AWS cloud, and the ability to use an IPsec Virtual Private Network (VPN) device to provide an encrypted tunnel between the Amazon VPC and your data center.; ; For all details see: https://aws.amazon.com/whitepapers/overview-of-security-processes/
• Data protection within supplier network:
  • IPsec or TLS VPN gateway
  • Other
• Other protection within supplier network: For all details see: https://aws.amazon.com/whitepapers/overview-of-security-processes/

Availability and resilience

• Guaranteed availability: Refer to AWS availability SLAs from here : https://aws.amazon.com/de/legal/service-level-agreements/
• Approach to resilience: Highly resilient, fault-tolerant network connections are key to a well-architected system. AWS recommends connecting from multiple data centers for physical location redundancy. When designing remote connections, consider using redundant hardware and telecommunications providers. Additionally, it is a best practice to use dynamically routed, active/active connections for automatic load balancing and failover across redundant network connections. Provision sufficient network capacity to ensure that the failure of one network connection does not overwhelm and degrade redundant connections.
• Outage reporting: As part of the service offering you have access to AWS Health that provides ongoing visibility into the state of your AWS resources, services, and accounts. The service gives you awareness and remediation guidance for resource performance or availability issues that may affect your applications that run on AWS.; The Personal Health Dashboard (PHD), powered by the AWS Health API, is available to all customers. The dashboard requires no setup and is ready to use for authenticated AWS users. You can use the AWS Health API to integrate with in-house and third-party systems.; Further information on AWS Health can be found here: https://docs.aws.amazon.com/health/latest/ug/what-is-aws-health.html

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: When an AWS account is first created, an associated single sign-in identity is created which has complete access to all AWS services and resources, which reside within the account. The root user is accessed by signing-in with the email address and password which were used to create the account.; ii. In the scenario where a customer is new to AWS or transferring to Vodafone (excluding BYO model), the root credentials will be either retained or migrated to Vodafone.; For further details please refer service description document
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password
• Devices users manage the service through: Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Vodafone policies align to ISO27002:2013

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Available on request
• Vulnerability management type: Undisclosed
• Vulnerability management approach: Cloud provider controls. Refer to https://aws.amazon.com/security/
• Protective monitoring type: Undisclosed
• Protective monitoring approach: Cloud provider controls (Amazon CloudWatch) and Vodafone Fraud module.
• Incident management type: Undisclosed
• Incident management approach: Incident management processes are in line with ITIL best practices, and integrated with event, problem, and change management processes.; ; Please refer to the Service Description document for more information.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
• Who implements virtualisation: Third-party
• Third-party virtualisation provider: Amazon Web Services (AWS)
• How shared infrastructure is kept separate: Refer to AWS Shared responsibility model

Energy efficiency

• Energy-efficient datacentres: Yes
• Description of energy efficient datacentres: Available upon request

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount

• Provide your minimum discount applicable to your baseline prices: 0%

Formula for calculating price of your services

• Formula for calculating price of your services:

  Which of the core deployment models you intend to offer

  Public Cloud

  Public Cloud - Formula for calculating price of your services

  ---

  Total Cost

  The Total Cost for a buyer's call off requirement in a Public Cloud Deployment

  =

  Baseline Pricing

  As per link below, which is also included in the service specific pricing document.

  Baseline Pricing - Web link

  https://aws.amazon.com/ec2/pricing/

  -

  Minimum Discounting

  0%

  +

  Onboarding Activity

  Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process

  +

  Additional sources of cost

  For IaaS compute services, Vodafone price these services in line with Hyperscaler recommended prices, which can be found in the link above as well as the service specific pricing document. These prices are subject to change by Hyperscaler but the Vodafone markup will remain the same for these services.

  -

  Additional sources of cost reduction

  For IaaS compute services, Vodafone price these services in line with Hyperscaler recommended prices, which can be found in the link above as well as the service specific pricing document. These prices are subject to change by Hyperscaler but the Vodafone markup will remain the same for these services.

  ---

• Total Cost: The Total Cost for a buyer's call off requirement in a Public Cloud Deployment
• Baseline Pricing: As per link below, which is also included in the service specific pricing document.
• Baseline Pricing - Web link: https://aws.amazon.com/ec2/pricing/
• Minimum Discounting: 0%
• Onboarding Activity: Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
• Additional sources of cost: For IaaS compute services, Vodafone price these services in line with Hyperscaler recommended prices, which can be found in the link above as well as the service specific pricing document. These prices are subject to change by Hyperscaler but the Vodafone markup will remain the same for these services.
• Additional sources of cost reduction: For IaaS compute services, Vodafone price these services in line with Hyperscaler recommended prices, which can be found in the link above as well as the service specific pricing document. These prices are subject to change by Hyperscaler but the Vodafone markup will remain the same for these services.

Mandatory certifications

• Mandatory certifications:

  Are you are bidding to offer IaaS and/or PaaS as a reseller or are you in sole control of the infrastructure

  Reseller

  Cloud service suppliers you intend to resell with evidence

  Organisation 1

  Organisation name

  Amazon Web Services

  Website address/upload for organisation

  Website address

  Website address

  https://partners.amazonaws.com/partners/001E000000tfevOIAQ/Vodafone

  ISO 9001 certification

  Provided

  ISO 27001 certification

  Provided

  ISO 20000-1 certification

  Provided

  Are you reliant on the Cloud Service Provider for some accreditations

  Yes

Cyber Essentials

• Do you have a Cyber Essentials Plus certificate?: Yes
• Cyber Essentials Plus certificate Number: Af87bed1-45db-4396-b5a5-0703ffdc35ce

Non-mandatory Standards and certifications

• ISO 28000:2022 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: NCC Group Security Services Ltd
• PCI DSS accreditation date: Friday 6 December 2024
• What the PCI DSS doesn’t cover: This does not cover UC or Hosting - these are covered by separate certification.
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at frameworks_team@vodafone.com. Tell them what format you need. It will help if you say what assistive technology you use.