Multi Cloud Administrator (AZURE, AWS, GCP)

Multi Cloud Administrator (AZURE, AWS, GCP)

SAP landscapes now run on Azure, AWS, and GCP. This course covers the cloud administration a Basis consultant must own: virtual machines, networking, identity, and landing an SAP system on each hyperscaler.

You leave able to work with cloud teams in their terms, not only in SAP terms.

Syllabus

  • Multi-cloud (Basis) - Program overview for SAP Basis
    • SAP Basis role when SAP runs on Azure, AWS, or GCP
    • What this course covers vs. cloud architect / cloud admin training
    • RISE with SAP, private cloud, and customer-managed IaaS - Basis view
    • Shared responsibility model for SAP on hyperscalers
    • Lab access, subscriptions, and safe change practices
  • Multi-cloud (Basis) - SAP deployment models on hyperscalers
    • SAP-certified IaaS offerings - what Basis still operates
    • Dedicated SAP instances vs. shared managed services (overview)
    • S/4HANA on Azure / AWS / GCP - typical landscape layout
    • When Basis escalates to cloud platform team vs. handles locally
  • Multi-cloud (Basis) - Azure essentials for SAP Basis
    • Azure portal navigation for SAP operators (not architect design)
    • Resource groups, regions, and availability zones - SAP implications
    • Azure VMs for SAP: sizing SKUs and naming (overview)
    • Managed disks and storage types relevant to SAP workloads
    • Start, stop, restart SAP VMs and coordinate with SAP services
  • Multi-cloud (Basis) - AWS essentials for SAP Basis
    • AWS console basics for SAP operators
    • EC2 instances, instance types, and SAP-certified families (overview)
    • EBS volumes, snapshots, and attachment for SAP hosts
    • Regions, AZs, and placement for SAP HA (Basis awareness)
    • EC2 lifecycle operations coordinated with SAP shutdown/start
  • Multi-cloud (Basis) - GCP essentials for SAP Basis
    • Google Cloud console basics for SAP operators
    • Compute Engine VMs and machine types for SAP (overview)
    • Persistent disks, snapshots, and SAP data paths
    • Zones and regions - SAP HA awareness
    • Instance start/stop aligned with SAP maintenance windows
  • Multi-cloud (Basis) - Networking for SAP on cloud
    • VPC (AWS/GCP) and VNet (Azure) - subnets for SAP tiers
    • Public vs. private IPs and SAP GUI / Fiori access patterns
    • Security groups, NSGs, and firewall rules for SAP ports
    • DNS in cloud and integration with corporate DNS for SAP hosts
    • Documenting required flows for Basis change requests
  • Multi-cloud (Basis) - Hybrid connectivity for SAP
    • Why hybrid links matter for SAP (RFC, GUI, replication, backup)
    • Site-to-site VPN - Basis verification and troubleshooting hooks
    • Azure ExpressRoute, AWS Direct Connect, GCP Cloud Interconnect (overview)
    • SAP Cloud Connector - role in BTP to on-prem / private SAP
    • Connectivity tests Basis runs after network changes
  • Multi-cloud (Basis) - Identity and access (Basis scope)
    • Cloud IAM vs. SAP OS users (<sid>adm, sapadmin) - separation
    • SSH keys and RDP access to SAP VMs in cloud
    • Service principals / IAM roles Basis may use for automation (overview)
    • Escalation paths for privileged access and break-glass
  • Multi-cloud (Basis) - Storage, backup, and restore
    • Cloud snapshots vs. SAP-consistent backup (coordination with DB)
    • Freeze/thaw and DB tools - Basis checklist before cloud snapshots
    • Azure Backup / AWS Backup / disk snapshots - operator view
    • Restore scenarios: OS-only vs. full SAP system recovery
    • Copying VMs/disks for sandbox refresh in cloud (overview)
  • Multi-cloud (Basis) - High availability and DR in cloud
    • Availability zones and SAP ASCS/ERS / HANA SR awareness
    • Load balancers in front of SAP - Basis configuration touchpoints
    • DR region concepts - what Basis validates during failover tests
    • Maintenance windows across zones and SAP cluster behavior
  • Multi-cloud (Basis) - Installing and patching SAP in cloud VMs
    • SAP installation media and paths on cloud VMs
    • Hostname, /etc/hosts, and cloud metadata - SAP prerequisites
    • Kernel and SWPM updates in cloud - same as on-prem with cloud I/O notes
    • Temporary disks vs. persistent - avoiding SAP on ephemeral storage
  • Multi-cloud (Basis) - Monitoring and logging
    • Azure Monitor, CloudWatch, Cloud Logging - what Basis glances at
    • VM metrics (CPU, disk, network) correlated with ST06 / OS
    • Alert routing: when Basis acts vs. cloud ops team
    • SAP application logs still primary for ABAP issues in cloud
  • Multi-cloud (Basis) - Security and compliance (Basis tasks)
    • OS patching coordination with SAP downtime in cloud
    • Encryption at rest for SAP disks - verify with platform team
    • TLS certificates on SAP ICM/Gateway in cloud deployments
    • Security baseline checks before go-live on cloud SAP
  • Multi-cloud (Basis) - Cost and capacity awareness
    • Why Basis should understand VM sizing and idle cost
    • Stop/deallocate vs. SAP-supported shutdown procedures
    • Reading basic cost dashboards to flag oversized dev systems
    • When to request resize vs. tune SAP memory parameters
  • Multi-cloud (Basis) - Migration and landscape moves
    • Lift-and-shift SAP to cloud - Basis milestones
    • SAP LaMa / system copy concepts in cloud target (overview)
    • IP/DNS cutover and SAP profile updates after cloud move
    • Post-migration smoke tests for Basis
  • Multi-cloud (Basis) - BTP and SAP SaaS integration
    • BTP subaccounts and connectivity to private SAP in cloud/on-prem
    • Cloud Connector installation and routing - Basis responsibilities
    • Destination and trust setup - coordination with BTP admins
  • Multi-cloud (Basis) - Troubleshooting SAP on cloud
    • Systematic checks: cloud VM -> OS -> network -> SAP -> database
    • Common issues: wrong NSG/SG, DNS, time sync, disk full
    • SAP GUI / RFC failures after cloud network change
    • When to open tickets with hyperscaler vs. SAP support
  • Multi-cloud (Basis) - Hands-on labs and assessment
    • Lab: Navigate portal and identify SAP VM resources (Azure or AWS or GCP)
    • Lab: Validate NSG/security group rules for SAP ports
    • Lab: Snapshot coordination checklist with HANA/DB prep
    • Lab: Cloud Connector connectivity test to SAP system
    • Knowledge check: shared responsibility and escalation paths
    • Capstone: runbook for monthly SAP maintenance on a cloud VM