# Kemet Tech | Cloud Infrastructure, Cybersecurity & AI Service Catalog Reviewed: September 8, 2026 Implementation delivery for customers, system integrators, MSPs and MSSPs. Implementation coverage across infrastructure, cloud operations, cybersecurity and artificial intelligence, including explicitly identified adjacent subscriptions and third-party integrations. Product labels include services, capabilities and tooling. Region, edition, lifecycle, licensing, hardware eligibility, support coverage and acceptance criteria are confirmed in each statement of work. Shape sizes, regional SKUs and unrelated business-application functionality are outside this catalog inventory. AI coverage is organized by implementation family, not every model version or preview. Business AI subscriptions and custom-model integrations are explicitly scoped. Engagements: assessment and roadmap; implementation and migration; remediation and modernization; validation and handover. Subcontract, white-label and direct-customer delivery can be scoped. Deliverables and acceptance criteria are agreed before kickoff. Cloud consumption, licenses, monitoring coverage and response commitments are separately scoped. Contact: support@kemettech.net | +1 813-863-1132 | https://kemettech.net ## Amazon Web Services Product reference: https://aws.amazon.com/products/ ### Cloud strategy & landing zones Infrastructure | Establish a governed cloud foundation for new workloads or consolidate an inconsistent estate. **Platforms and tooling:** AWS Organizations; AWS Control Tower; AWS Account Management; AWS Resource Access Manager; AWS Service Catalog; AWS Service Quotas; AWS Control Tower Account Factory; AWS Organizations resource control policies. **Kemet Tech deliverables:** Architecture and account hierarchy; landing zone deployed as code; ownership and governance runbook. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS management and governance](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/management-governance.html) ### Compute, operating systems & scale Infrastructure | Deploy and harden virtual machines, bare metal and GPU infrastructure with capacity and availability planning. **Platforms and tooling:** Amazon EC2; EC2 Auto Scaling; EC2 Image Builder; AWS Batch; Amazon Lightsail; EC2 Fleet; EC2 Spot Instances; EC2 Dedicated Hosts; EC2 Capacity Reservations; Amazon Linux. **Kemet Tech deliverables:** Hardened images; autoscaling configuration; patch baseline; capacity and operational handover. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS compute services](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/compute-services.html) ### Kubernetes & container platforms Infrastructure | Build container platforms with private connectivity, deployment controls and workload isolation. **Platforms and tooling:** Amazon EKS; Amazon ECS; AWS Fargate; Amazon ECR; Amazon EKS Anywhere; Amazon EKS Hybrid Nodes; Amazon ECS Anywhere; Amazon ECS Service Connect. **Kemet Tech deliverables:** Cluster and registry; workload policies; deployment pipeline; upgrade and recovery procedures. **Scope note:** AWS App Mesh ends support September 30, 2026. We scope migration to ECS Service Connect or an appropriate supported alternative. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS App Mesh end of support](https://docs.aws.amazon.com/app-mesh/latest/userguide/what-is-app-mesh.html) ### Serverless, APIs & integration Infrastructure | Implement APIs, event-driven workloads and application integration with authentication and reliable delivery. **Platforms and tooling:** AWS Lambda; Amazon API Gateway; Amazon EventBridge; AWS Step Functions; Amazon SQS; Amazon SNS; AWS Elastic Beanstalk; AWS AppConfig; Amazon MQ; Amazon Simple Email Service; Amazon EventBridge Scheduler; Amazon EventBridge Pipes. **Kemet Tech deliverables:** Deployed APIs and functions; integration flows; retry and failure handling; monitoring. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS compute services](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/compute-services.html) ### Cloud networking & connectivity Infrastructure | Design segmented networks and connect offices, data centers and cloud environments. **Platforms and tooling:** Amazon VPC; AWS Transit Gateway; AWS Cloud WAN; AWS Direct Connect; AWS Site-to-Site VPN; AWS PrivateLink; AWS Client VPN; Amazon VPC Lattice; AWS Cloud Map; VPC IP Address Manager; AWS Transit Gateway Connect. **Kemet Tech deliverables:** IP plan and routing design; deployed hub and spokes; private connectivity; connectivity validation. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS networking services](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/networking-services.html) ### Load balancing, DNS & application delivery Infrastructure | Make applications reachable and resilient with traffic distribution, name resolution and health checks. **Platforms and tooling:** Elastic Load Balancing; Amazon Route 53; Amazon CloudFront; AWS Global Accelerator. **Kemet Tech deliverables:** Load balancers and DNS; TLS termination; health checks; traffic failover configuration. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS networking services](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/networking-services.html) ### Storage, file services & archiving Infrastructure | Implement object, block and file storage with access controls, lifecycle policies and data migration. **Platforms and tooling:** Amazon S3; Amazon S3 Glacier storage classes; Amazon EBS; Amazon EFS; Amazon FSx; AWS Storage Gateway; Amazon S3 Access Grants; Amazon S3 Access Points; Amazon S3 replication; AWS Backup Gateway; Amazon FSx for Lustre; Amazon FSx for NetApp ONTAP; Amazon FSx for Windows File Server; Amazon FSx for OpenZFS. **Kemet Tech deliverables:** Storage architecture; encryption and access policies; retention rules; migration and restore validation. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS storage services](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/storage-services.html) ### Database platforms & modernization Infrastructure | Deploy and migrate relational and non-relational databases with availability, access and performance controls. **Platforms and tooling:** Amazon RDS; Amazon Aurora; Amazon DynamoDB; Amazon ElastiCache; Amazon DocumentDB; Amazon Neptune; Amazon Keyspaces; Amazon MemoryDB; Amazon RDS Custom; Amazon Timestream for InfluxDB. **Kemet Tech deliverables:** Database deployment; backup and access baseline; performance tuning; migration and rollback plan. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) ### Migration & hybrid cloud Infrastructure | Assess dependencies and move servers, databases and data using migration waves and rehearsed cutovers. **Platforms and tooling:** AWS Application Migration Service; AWS Database Migration Service; AWS Transform; AWS DataSync; AWS Transfer Family; AWS Schema Conversion Tool; AWS DMS Schema Conversion; AWS Mainframe Modernization (availability review). **Kemet Tech deliverables:** Discovery and dependency map; migration factory; test migration; cutover and rollback runbooks. **Scope note:** Migration Hub is closed to new customers. Mainframe modernization delivery requires an availability and runtime eligibility review. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [Migration Hub availability change](https://docs.aws.amazon.com/migrationhub/latest/ug/migrationhub-availability-change.html) ### Backup, disaster recovery & cyber recovery Infrastructure | Design recovery around business-defined recovery time and recovery point objectives, then rehearse it. **Platforms and tooling:** AWS Backup; AWS Elastic Disaster Recovery; Amazon S3 Object Lock; AWS Resilience Hub; AWS Backup Vault Lock; AWS Backup logically air-gapped vault; AWS Backup restore testing; Amazon Application Recovery Controller (ARC). **Kemet Tech deliverables:** Backup policies; protected recovery copies; failover automation; restore-test evidence; recovery runbook. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS storage services](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/storage-services.html) ### Infrastructure as code & DevSecOps Infrastructure | Make infrastructure and releases repeatable with review gates, policy checks and secure artifact handling. **Platforms and tooling:** AWS CloudFormation; AWS CDK; AWS CodeBuild; AWS CodePipeline; AWS Systems Manager; Terraform; AWS CodeDeploy; AWS CodeArtifact; AWS Systems Manager Automation; AWS CloudFormation StackSets. **Kemet Tech deliverables:** Versioned infrastructure modules; CI/CD pipelines; secrets integration; deployment and rollback procedures. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS management and governance](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/management-governance.html) ### Observability, patching & operations Infrastructure | Instrument services and establish operating procedures so teams can identify and resolve failures. **Platforms and tooling:** Amazon CloudWatch; AWS CloudTrail; AWS Systems Manager; Amazon Managed Service for Prometheus; Amazon Managed Grafana; AWS Health; AWS User Notifications; Amazon CloudWatch Application Signals; AWS Distro for OpenTelemetry; Amazon CloudWatch Synthetics. **Kemet Tech deliverables:** Dashboards and alerts; log routing; patch workflows; incident procedures; service ownership handover. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS management and governance](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/management-governance.html) ### Cost management & resource governance Infrastructure | Identify unused capacity and establish budgets, tagging and cost ownership across environments. **Platforms and tooling:** AWS Cost Explorer; AWS Budgets; AWS Compute Optimizer; AWS Cost and Usage Reports; AWS Trusted Advisor; AWS Cost Optimization Hub; AWS Cost Anomaly Detection; AWS License Manager; AWS Billing Conductor; AWS Data Exports; AWS Savings Plans planning; Reserved Instances planning. **Kemet Tech deliverables:** Cost baseline; prioritized optimization backlog; budget alerts; allocation and capacity recommendations. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS management and governance](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/management-governance.html) ### Identity, federation & privileged access Cybersecurity | Implement least privilege, single sign-on, multifactor authentication and controlled administrative access. **Platforms and tooling:** AWS IAM; AWS IAM Identity Center; IAM Access Analyzer; Amazon Cognito; AWS Directory Service; Amazon Verified Permissions; AWS IAM Roles Anywhere; AWS Security Token Service; IAM permissions boundaries; IAM service control policies. **Kemet Tech deliverables:** Role and access model; federation and MFA; privileged access controls; access review and break-glass procedures. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [IAM Roles Anywhere](https://aws.amazon.com/iam/roles-anywhere/) ### Network, web & API protection Cybersecurity | Reduce exposure with segmentation, firewall policies, web protection and protected application entry points. **Platforms and tooling:** AWS Network Firewall; AWS WAF; AWS Shield; AWS Firewall Manager; AWS Verified Access; security groups; Route 53 Resolver DNS Firewall; Route 53 Resolver; AWS WAF Bot Control; AWS WAF Fraud Control; VPC Block Public Access; Gateway Load Balancer. **Kemet Tech deliverables:** Firewall and WAF rules; controlled ingress and egress; traffic logging; validated application protection. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS security, identity and compliance](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/security-services.html) ### Encryption, keys, secrets & certificates Cybersecurity | Centralize encryption keys, application secrets and certificate lifecycles with controlled access and rotation. **Platforms and tooling:** AWS Key Management Service; AWS CloudHSM; AWS Secrets Manager; AWS Certificate Manager; AWS Private CA; AWS KMS external key stores; AWS KMS custom key stores; AWS Private CA Connector for Active Directory. **Kemet Tech deliverables:** Key hierarchy; secrets integration; certificate inventory; rotation and recovery procedures. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS security, identity and compliance](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/security-services.html) ### Security posture & compliance engineering Cybersecurity | Assess cloud configuration, prioritize risks and implement guardrails with evidence mapped to agreed controls. **Platforms and tooling:** AWS Security Hub CSPM; AWS Config; AWS Organizations service control policies; AWS Config conformance packs; AWS Artifact; AWS Security Hub central configuration; AWS Organizations declarative policies. **Kemet Tech deliverables:** Posture assessment; remediation backlog; preventive guardrails; control evidence and exception register. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS security, identity and compliance](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/security-services.html) ### Vulnerability & workload security Cybersecurity | Identify vulnerable hosts and container images and integrate remediation into delivery and patch workflows. **Platforms and tooling:** Amazon Inspector; Amazon GuardDuty runtime monitoring; Amazon ECR image scanning; Systems Manager Patch Manager; Amazon Inspector code scanning; Amazon GuardDuty Malware Protection for EC2; Amazon GuardDuty Malware Protection for S3. **Kemet Tech deliverables:** Scan coverage; prioritized findings; hardened baselines; patch plan; retest evidence. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS security, identity and compliance](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/security-services.html) ### Data protection & database security Cybersecurity | Protect sensitive data with discovery, access restrictions, auditing, masking and encryption. **Platforms and tooling:** Amazon Macie; AWS Lake Formation; Amazon RDS encryption and database activity streams; Amazon S3 access controls; Amazon S3 Block Public Access; Amazon S3 Object Ownership; AWS Glue Data Catalog permissions. **Kemet Tech deliverables:** Data risk assessment; access and audit policies; masking configuration; prioritized remediation. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS security, identity and compliance](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/security-services.html) ### Threat detection, SIEM & response automation Cybersecurity | Connect cloud telemetry to security operations, build detections and automate agreed triage and response actions. **Platforms and tooling:** Amazon GuardDuty; Amazon Detective; Amazon Security Lake; AWS Security Hub; Amazon OpenSearch Service; AWS CloudTrail; AWS Security Incident Response onboarding; GuardDuty Extended Threat Detection. **Kemet Tech deliverables:** Log onboarding; detection rules; alert routing; response playbooks; analyst handover and validation. **Scope note:** AWS Security Incident Response is a separate AWS subscription. Kemet Tech scopes onboarding and integration; AWS service coverage is defined by the customer subscription. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS Security Incident Response](https://aws.amazon.com/security-incident-response/) ### Security assessments & incident readiness Cybersecurity | Review architecture and attack paths, validate defenses and prepare teams for cloud incidents. **Platforms and tooling:** IAM Access Analyzer; AWS Config; VPC Reachability Analyzer; GuardDuty findings; CloudTrail evidence. **Kemet Tech deliverables:** Assessment report; authorized test plan; remediation verification; incident tabletop; response and evidence runbooks. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS security, identity and compliance](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/security-services.html) ### Hybrid, edge & distributed cloud Infrastructure | Extend cloud operating models to data centers and edge locations with local workload and connectivity requirements. **Platforms and tooling:** AWS Outposts; AWS Local Zones; AWS Wavelength; Amazon EKS Anywhere; Amazon ECS Anywhere. **Kemet Tech deliverables:** Deployment and dependency design; integrated identity and networking; workload deployment; operations handover **Scope note:** Hardware, carrier, region and provider arrangements are prerequisites; Kemet Tech scopes architecture, integration and workload deployment. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS compute services](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/compute-services.html) ### Virtual desktops & secure workspaces Infrastructure | Deliver centrally managed desktops, application sessions and developer workspaces with controlled access. **Platforms and tooling:** Amazon WorkSpaces Personal; Amazon WorkSpaces Pools; Amazon WorkSpaces Applications (formerly AppStream 2.0); Amazon WorkSpaces Secure Browser; Amazon WorkSpaces Core. **Kemet Tech deliverables:** Desktop or application pools; golden images; identity and device policies; user acceptance and support handover **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS end-user computing](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/end-user-computing.html) ### HPC, GPU & AI infrastructure Infrastructure | Build accelerated compute and training infrastructure with high-throughput storage, workload scheduling and cost controls. **Platforms and tooling:** AWS Parallel Computing Service; AWS ParallelCluster; EC2 GPU instances; AWS Trainium; AWS Inferentia; Elastic Fabric Adapter; Amazon FSx for Lustre. **Kemet Tech deliverables:** Cluster design and deployment; scheduler integration; storage and network tuning; workload benchmarks **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS Parallel Computing Service](https://docs.aws.amazon.com/pcs/latest/userguide/what-is-service.html) ### Data lakes, analytics & streaming platforms Infrastructure | Deploy the infrastructure for ingestion, processing, analytics and governed data sharing. **Platforms and tooling:** Amazon Redshift; Amazon Athena; Amazon EMR; AWS Glue; AWS Lake Formation; Amazon DataZone; Amazon Kinesis Data Streams; Amazon Data Firehose; Amazon Managed Service for Apache Flink; Amazon MSK; Amazon OpenSearch Service; AWS Clean Rooms; AWS Data Exchange; Amazon OpenSearch Serverless; Amazon Redshift Serverless. **Kemet Tech deliverables:** Platform architecture; ingestion and processing pipelines; access and catalog configuration; monitoring and handover **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS analytics services](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/analytics.html) ### Network visibility & connectivity assurance Infrastructure | Diagnose cloud connectivity, traffic paths and firewall behavior before and after infrastructure changes. **Platforms and tooling:** VPC Reachability Analyzer; VPC Network Access Analyzer; VPC Flow Logs; VPC Traffic Mirroring; CloudWatch Network Monitor; CloudWatch Internet Monitor. **Kemet Tech deliverables:** Traffic and route baseline; connectivity tests; flow-log analysis; monitoring dashboard; remediation report **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS networking services](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/networking-services.html) ### Identity governance & provider access controls Cybersecurity | Manage identity lifecycles, access reviews and sensitive administrative access across cloud and connected systems. **Platforms and tooling:** IAM Access Analyzer; IAM Identity Center; IAM Roles Anywhere; customer-selected identity governance integration. **Kemet Tech deliverables:** Joiner/mover/leaver workflows; entitlement review; privileged approval policies; access evidence and handover **Scope note:** AWS access controls are integrated with a customer-selected governance platform where full identity lifecycle or certification workflows are needed. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [IAM Roles Anywhere](https://aws.amazon.com/iam/roles-anywhere/) ### Zero trust access & microsegmentation Cybersecurity | Apply identity-aware access and workload segmentation with explicit communication policies. **Platforms and tooling:** AWS Verified Access; Amazon VPC Lattice; AWS Client VPN; IAM identity policies; customer-selected SSE integration. **Kemet Tech deliverables:** Access and segmentation design; deployed policies; permitted-flow validation; staged rollout and rollback plan **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS networking services](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/networking-services.html) ### Application & software supply-chain security Cybersecurity | Integrate source, dependency, secret and artifact checks into application delivery. **Platforms and tooling:** AWS Signer; Amazon Inspector; Amazon ECR scanning; AWS CodeArtifact; customer-selected SAST and DAST integration. **Kemet Tech deliverables:** Threat model; security gates; signed artifacts and verification; vulnerability triage; remediation handover **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [What is AWS Signer?](https://docs.aws.amazon.com/signer/latest/developerguide/Welcome.html) ### AI application, model & agent security Cybersecurity | Configure model access, prompt and response screening, data controls and least-privilege agent permissions. **Platforms and tooling:** Amazon Bedrock Guardrails; Amazon Bedrock AgentCore Identity; Amazon Bedrock AgentCore Policy; Amazon Bedrock AgentCore Gateway. **Kemet Tech deliverables:** AI threat model; configured guardrails; tool-access boundaries; adversarial evaluation; monitoring and handover **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AgentCore security best practices](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-security-best-practices.html) ### Threat intelligence & attack-surface management Cybersecurity | Connect threat context and external exposure discovery to security investigations and remediation workflows. **Platforms and tooling:** Amazon GuardDuty threat intelligence; Amazon Detective; Amazon Security Lake; customer-selected external attack-surface management. **Kemet Tech deliverables:** Indicator feeds and enrichment; exposed-asset inventory; risk prioritization; detection integrations; analyst handover **Scope note:** GuardDuty threat context is complemented by customer-selected external exposure discovery; product selection and feeds are scoped separately. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS security, identity and compliance](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/security-services.html) ### Endpoint, email & SaaS security integration Cybersecurity | Deploy and integrate the endpoint, email and SaaS controls selected for the customer environment. **Platforms and tooling:** AWS Marketplace endpoint and SaaS security products (third-party); Amazon Security Lake; AWS Security Hub integrations. **Kemet Tech deliverables:** Product onboarding; protection policies; identity and SIEM integration; alert validation; operational handover **Scope note:** Third-party product implementation and telemetry integration; AWS-native findings services are not a substitute for endpoint or email protection. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS security, identity and compliance](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/security-services.html) ### Sovereign cloud & regulated workload foundations Infrastructure | Design location, administrative access and data-protection controls around agreed residency and regulatory requirements. **Platforms and tooling:** AWS GovCloud (US); AWS European Sovereign Cloud; AWS Control Tower; AWS Organizations policies. **Kemet Tech deliverables:** Requirements and service eligibility map; residency design; access and key controls; deployment and evidence handover **Scope note:** Eligibility, country/region, service availability and contractual requirements are confirmed before design. Deployment of cloud controls does not itself confer regulatory certification. **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [Opening the AWS European Sovereign Cloud](https://aws.amazon.com/blogs/aws/opening-the-aws-european-sovereign-cloud/) ### Resilience engineering & recovery validation Infrastructure | Test application failure scenarios, restore paths and recovery objectives through controlled exercises. **Platforms and tooling:** AWS Fault Injection Service; AWS Resilience Hub; Amazon Application Recovery Controller (ARC); AWS Backup restore testing; AWS Well-Architected Tool. **Kemet Tech deliverables:** Failure-scenario plan; approved test execution; recovery measurements; improvement backlog; repeatable runbook **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS Fault Injection Service](https://aws.amazon.com/fis/) ### Confidential computing & workload isolation Cybersecurity | Protect sensitive processing using supported isolation, attestation and confidential-computing capabilities. **Platforms and tooling:** AWS Nitro Enclaves; AWS Nitro System; EC2 Dedicated Hosts; AWS KMS attestation integration. **Kemet Tech deliverables:** Workload suitability assessment; isolated execution deployment; attestation and key-release integration; verification evidence **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [AWS compute services](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/compute-services.html) ### IoT, OT & edge workload security Cybersecurity | Connect device and operational-technology environments to cloud platforms with identity, segmentation and telemetry controls. **Platforms and tooling:** AWS IoT Core; AWS IoT Device Management; AWS IoT Device Defender; AWS IoT Greengrass. **Kemet Tech deliverables:** Device identity design; secure ingestion; segmented connectivity; telemetry and alerts; operational handover **Official references:** [Amazon Web Services product inventory](https://aws.amazon.com/products/) | [IoT Device Defender FAQ](https://aws.amazon.com/iot-device-defender/faq/) ### AI strategy, readiness & solution architecture Artificial intelligence | Assess use cases, data readiness, platform options, costs and delivery requirements. **Platforms and tooling:** Amazon Bedrock; Amazon SageMaker AI. **Kemet Tech deliverables:** Use-case priorities; data and access assessment; target architecture; implementation roadmap **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [AWS AI services](https://aws.amazon.com/ai/services/) ### Generative AI applications & model integration Artificial intelligence | Build applications using foundation models for text, code and multimodal tasks. **Platforms and tooling:** Amazon Bedrock; Amazon Nova; Bedrock model catalog. **Kemet Tech deliverables:** Model selection and integration; prompt workflows; application APIs; quality and cost validation **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Bedrock and SageMaker AI selection guide](https://docs.aws.amazon.com/decision-guides/latest/decision-guides/bedrock-or-sagemaker.html) ### AI agents, orchestration & enterprise automation Artificial intelligence | Build agents that retrieve information and use approved business tools with controlled permissions. **Platforms and tooling:** Amazon Bedrock Agents; Amazon Bedrock AgentCore; Strands Agents SDK. **Kemet Tech deliverables:** Agent workflows; tool and API integrations; approval controls; agent testing and handover **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Bedrock and SageMaker AI selection guide](https://docs.aws.amazon.com/decision-guides/latest/decision-guides/bedrock-or-sagemaker.html) ### RAG, enterprise search & vector retrieval Artificial intelligence | Connect AI applications to governed business content through retrieval and search. **Platforms and tooling:** Amazon Bedrock Knowledge Bases; Amazon OpenSearch Service. **Kemet Tech deliverables:** Content ingestion; embedding and vector indexes; access-aware retrieval; retrieval evaluation **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Bedrock and SageMaker AI selection guide](https://docs.aws.amazon.com/decision-guides/latest/decision-guides/bedrock-or-sagemaker.html) ### Custom ML, AutoML & model customization Artificial intelligence | Develop and tune models for business datasets and agreed prediction or generation tasks. **Platforms and tooling:** Amazon SageMaker AI; SageMaker Autopilot; SageMaker JumpStart; Bedrock model customization. **Kemet Tech deliverables:** Training datasets; training and tuning workflows; model evaluation; deployment artifacts **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Bedrock and SageMaker AI selection guide](https://docs.aws.amazon.com/decision-guides/latest/decision-guides/bedrock-or-sagemaker.html) ### MLOps, model serving & lifecycle management Artificial intelligence | Operationalize model training, deployment, monitoring and controlled updates. **Platforms and tooling:** SageMaker Pipelines; SageMaker Model Registry; SageMaker endpoints; SageMaker Model Monitor. **Kemet Tech deliverables:** Model registry and pipelines; serving endpoints; performance monitoring; rollback and retraining procedures **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Bedrock and SageMaker AI selection guide](https://docs.aws.amazon.com/decision-guides/latest/decision-guides/bedrock-or-sagemaker.html) ### AI data preparation, labeling & feature engineering Artificial intelligence | Prepare governed training and retrieval data with repeatable processing and quality checks. **Platforms and tooling:** SageMaker Ground Truth; SageMaker Feature Store; AWS Glue. **Kemet Tech deliverables:** Data preparation pipelines; labeling workflow; feature engineering; quality and lineage controls **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Bedrock and SageMaker AI selection guide](https://docs.aws.amazon.com/decision-guides/latest/decision-guides/bedrock-or-sagemaker.html) ### Document AI & intelligent data extraction Artificial intelligence | Extract, classify and validate information from business documents. **Platforms and tooling:** Amazon Textract; Amazon Bedrock Data Automation. **Kemet Tech deliverables:** Document ingestion; extraction schemas; validation and review workflow; business-system integration **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [AWS AI services](https://aws.amazon.com/ai/services/) ### Speech AI, transcription & voice applications Artificial intelligence | Build speech-enabled applications with transcription and supported voice-generation capabilities. **Platforms and tooling:** Amazon Transcribe; Amazon Polly; Amazon Nova speech models. **Kemet Tech deliverables:** Audio ingestion; speech API integration; language and accuracy testing; voice application handover **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [AWS AI services](https://aws.amazon.com/ai/services/) ### Language AI, translation & text analytics Artificial intelligence | Analyze text, extract entities and integrate multilingual application workflows. **Platforms and tooling:** Amazon Comprehend; Amazon Translate. **Kemet Tech deliverables:** Language processing APIs; classification and extraction; translation workflow; quality evaluation **Scope note:** Comprehend topic modeling, event detection and prompt safety classification are closed to new customers from April 30, 2026; other supported NLP features are scoped individually. **Official references:** [Amazon Comprehend feature availability](https://aws.amazon.com/comprehend/features/) | [AWS AI services](https://aws.amazon.com/ai/services/) ### Computer vision & video understanding Artificial intelligence | Build image and video analysis workflows with supported models and human review where required. **Platforms and tooling:** Amazon Rekognition; Amazon Bedrock Data Automation. **Kemet Tech deliverables:** Image or video ingestion; model integration; task-specific evaluation; application integration **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [AWS AI services](https://aws.amazon.com/ai/services/) ### Multimodal content & media generation Artificial intelligence | Integrate supported image, audio and video generation into business applications. **Platforms and tooling:** Amazon Nova models; Amazon Bedrock image and video models. **Kemet Tech deliverables:** Model and rights assessment; generation workflow; review controls; application integration **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [AWS AI services](https://aws.amazon.com/ai/services/) ### Forecasting, anomaly detection & predictive analytics Artificial intelligence | Develop models for planning, risk indicators and operational analysis. **Platforms and tooling:** Amazon SageMaker AI forecasting and anomaly models. **Kemet Tech deliverables:** Prediction objective and baseline; model pipeline; backtesting; decision-support integration **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Bedrock and SageMaker AI selection guide](https://docs.aws.amazon.com/decision-guides/latest/decision-guides/bedrock-or-sagemaker.html) ### Recommendations, ranking & personalization Artificial intelligence | Build recommendation and ranking workflows around customer-approved data and objectives. **Platforms and tooling:** Amazon Personalize; Amazon SageMaker AI. **Kemet Tech deliverables:** Recommendation design; training or retrieval pipeline; relevance evaluation; application integration **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Amazon Personalize overview](https://docs.aws.amazon.com/personalize/latest/dg/what-is-personalize.html) | [Bedrock and SageMaker AI selection guide](https://docs.aws.amazon.com/decision-guides/latest/decision-guides/bedrock-or-sagemaker.html) ### Conversational AI & customer-service integration Artificial intelligence | Implement virtual assistants and connect conversations to knowledge, workflows and human teams. **Platforms and tooling:** Amazon Lex; Amazon Connect; Amazon Bedrock. **Kemet Tech deliverables:** Conversation design; knowledge and tool integration; handoff workflow; conversation testing **Scope note:** Adjacent SaaS, developer tools and contact-center products require separate subscriptions and eligibility. Integration scope is agreed per customer. **Official references:** [AWS AI services](https://aws.amazon.com/ai/services/) ### Enterprise copilots & business AI integration Artificial intelligence | Configure enterprise AI assistants and connect them to approved business content and applications. **Platforms and tooling:** Amazon Quick (Quick Suite); Amazon Q Business (existing environments). **Kemet Tech deliverables:** Readiness and access assessment; connectors and policies; workflow configuration; user enablement **Scope note:** Amazon Q Business is closed to new customers; scope existing-environment support or migration to Amazon Quick. Separate subscription and regional eligibility apply. **Official references:** [AWS AI services](https://aws.amazon.com/ai/services/) | [Amazon Q Business new-customer availability](https://aws.amazon.com/q/business/) ### AI-assisted engineering & operations Artificial intelligence | Integrate AI assistance into development, modernization and operational workflows. **Platforms and tooling:** Kiro; AWS Transform; AWS DevOps Agent; AWS Security Agent. **Kemet Tech deliverables:** Tool onboarding; repository and access configuration; workflow evaluation; operational controls **Scope note:** Adjacent SaaS, developer tools and contact-center products require separate subscriptions and eligibility. Integration scope is agreed per customer. **Official references:** [AWS AI services](https://aws.amazon.com/ai/services/) ### AI evaluation, governance & responsible deployment Artificial intelligence | Establish evaluation, monitoring, data controls and release criteria for AI solutions. **Platforms and tooling:** Amazon Bedrock model evaluation; Amazon Bedrock Guardrails; SageMaker Clarify. **Kemet Tech deliverables:** Evaluation datasets; quality and safety checks; usage and cost monitoring; governance documentation **Scope note:** Controls and evaluations reduce identified risks; they do not guarantee factual accuracy, regulatory certification or prevention of every attack. **Official references:** [AWS AI services](https://aws.amazon.com/ai/services/) ## Google Cloud (GCP) Product reference: https://docs.cloud.google.com/docs/product-list ### Cloud strategy & landing zones Infrastructure | Establish a governed cloud foundation for new workloads or consolidate an inconsistent estate. **Platforms and tooling:** Resource Manager; Organization Policy Service; Cloud Billing; Cloud Asset Inventory; Cloud Quotas; Service Usage; Service Catalog. **Kemet Tech deliverables:** Architecture and account hierarchy; landing zone deployed as code; ownership and governance runbook. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) ### Compute, operating systems & scale Infrastructure | Deploy and harden virtual machines, bare metal and GPU infrastructure with capacity and availability planning. **Platforms and tooling:** Compute Engine; Managed Instance Groups; Batch; sole-tenant nodes; GPU VMs; Capacity Planner; Spot VMs; instance templates. **Kemet Tech deliverables:** Hardened images; autoscaling configuration; patch baseline; capacity and operational handover. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) ### Kubernetes & container platforms Infrastructure | Build container platforms with private connectivity, deployment controls and workload isolation. **Platforms and tooling:** Google Kubernetes Engine (GKE); Artifact Registry; Cloud Run; Cloud Service Mesh; Config Sync; Policy Controller. **Kemet Tech deliverables:** Cluster and registry; workload policies; deployment pipeline; upgrade and recovery procedures. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) ### Serverless, APIs & integration Infrastructure | Implement APIs, event-driven workloads and application integration with authentication and reliable delivery. **Platforms and tooling:** Cloud Run functions; API Gateway; Apigee; Workflows; Pub/Sub; Eventarc; App Engine; Cloud Scheduler; Cloud Tasks; Application Integration; Integration Connectors. **Kemet Tech deliverables:** Deployed APIs and functions; integration flows; retry and failure handling; monitoring. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) ### Cloud networking & connectivity Infrastructure | Design segmented networks and connect offices, data centers and cloud environments. **Platforms and tooling:** Virtual Private Cloud; Shared VPC; Cloud Router; Cloud NAT; Cloud VPN; Cloud Interconnect; Network Connectivity Center; Private Service Connect; Cloud Interconnect cross-cloud connectivity; IPv6 networking. **Kemet Tech deliverables:** IP plan and routing design; deployed hub and spokes; private connectivity; connectivity validation. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) | [Network Intelligence Center](https://docs.cloud.google.com/network-intelligence-center/docs) ### Load balancing, DNS & application delivery Infrastructure | Make applications reachable and resilient with traffic distribution, name resolution and health checks. **Platforms and tooling:** Cloud Load Balancing; Cloud DNS; Cloud CDN; Media CDN; Cloud Domains; Service Directory; Service Extensions. **Kemet Tech deliverables:** Load balancers and DNS; TLS termination; health checks; traffic failover configuration. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) ### Storage, file services & archiving Infrastructure | Implement object, block and file storage with access controls, lifecycle policies and data migration. **Platforms and tooling:** Cloud Storage; Persistent Disk; Hyperdisk; Filestore; Google Cloud NetApp Volumes; Managed Lustre; Cloud Storage FUSE; Cloud Storage Anywhere Cache. **Kemet Tech deliverables:** Storage architecture; encryption and access policies; retention rules; migration and restore validation. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) | [Managed Lustre overview](https://docs.cloud.google.com/managed-lustre/docs/overview) ### Database platforms & modernization Infrastructure | Deploy and migrate relational and non-relational databases with availability, access and performance controls. **Platforms and tooling:** Cloud SQL; AlloyDB for PostgreSQL; Spanner; Firestore; Bigtable; Memorystore; AlloyDB Omni; Firestore with MongoDB compatibility; Memorystore for Valkey; Memorystore for Redis Cluster. **Kemet Tech deliverables:** Database deployment; backup and access baseline; performance tuning; migration and rollback plan. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) ### Migration & hybrid cloud Infrastructure | Assess dependencies and move servers, databases and data using migration waves and rehearsed cutovers. **Platforms and tooling:** Migration Center; Migrate to Virtual Machines; Database Migration Service; Storage Transfer Service; Google Distributed Cloud; Google Cloud VMware Engine; Migrate to Containers; Mainframe Assessment Tool; Mainframe Connector; Dual Run. **Kemet Tech deliverables:** Discovery and dependency map; migration factory; test migration; cutover and rollback runbooks. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) ### Backup, disaster recovery & cyber recovery Infrastructure | Design recovery around business-defined recovery time and recovery point objectives, then rehearse it. **Platforms and tooling:** Backup and DR Service; Backup for GKE; Cloud Storage Bucket Lock; database backup and replication; Backup and DR backup vaults; Backup and DR enforced retention. **Kemet Tech deliverables:** Backup policies; protected recovery copies; failover automation; restore-test evidence; recovery runbook. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) ### Infrastructure as code & DevSecOps Infrastructure | Make infrastructure and releases repeatable with review gates, policy checks and secure artifact handling. **Platforms and tooling:** Infrastructure Manager; Cloud Build; Cloud Deploy; Artifact Registry; Terraform; Config Connector; Config Controller; Secure Source Manager; Developer Connect; Assured OSS. **Kemet Tech deliverables:** Versioned infrastructure modules; CI/CD pipelines; secrets integration; deployment and rollback procedures. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) ### Observability, patching & operations Infrastructure | Instrument services and establish operating procedures so teams can identify and resolve failures. **Platforms and tooling:** Cloud Monitoring; Cloud Logging; Cloud Trace; Error Reporting; VM Manager; Managed Service for Prometheus; Cloud Profiler; App Hub; Service Health; Unified Maintenance. **Kemet Tech deliverables:** Dashboards and alerts; log routing; patch workflows; incident procedures; service ownership handover. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) ### Cost management & resource governance Infrastructure | Identify unused capacity and establish budgets, tagging and cost ownership across environments. **Platforms and tooling:** Cloud Billing; FinOps hub; Recommender; budgets and alerts; billing export to BigQuery; Committed use discounts planning; Cloud Billing cost allocation. **Kemet Tech deliverables:** Cost baseline; prioritized optimization backlog; budget alerts; allocation and capacity recommendations. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) ### Identity, federation & privileged access Cybersecurity | Implement least privilege, single sign-on, multifactor authentication and controlled administrative access. **Platforms and tooling:** Identity and Access Management; Cloud Identity; Workforce Identity Federation; Workload Identity Federation; Identity-Aware Proxy; Privileged Access Manager; Identity Platform; Managed Microsoft AD; Access Context Manager. **Kemet Tech deliverables:** Role and access model; federation and MFA; privileged access controls; access review and break-glass procedures. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) ### Network, web & API protection Cybersecurity | Reduce exposure with segmentation, firewall policies, web protection and protected application entry points. **Platforms and tooling:** Cloud NGFW; Cloud Armor; VPC firewall policies; Cloud IDS; reCAPTCHA; VPC Service Controls; Secure Web Proxy; Network Security Integration; Google Cloud Fraud Defense (including reCAPTCHA); Web Risk; Apigee Advanced API Security. **Kemet Tech deliverables:** Firewall and WAF rules; controlled ingress and egress; traffic logging; validated application protection. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) | [Google security and identity portfolio](https://cloud.google.com/security/products/security-and-identity) ### Encryption, keys, secrets & certificates Cybersecurity | Centralize encryption keys, application secrets and certificate lifecycles with controlled access and rotation. **Platforms and tooling:** Cloud Key Management Service; Cloud HSM; Cloud External Key Manager; Secret Manager; Certificate Authority Service; Certificate Manager; Cloud KMS Autokey; Key Access Justifications. **Kemet Tech deliverables:** Key hierarchy; secrets integration; certificate inventory; rotation and recovery procedures. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) ### Security posture & compliance engineering Cybersecurity | Assess cloud configuration, prioritize risks and implement guardrails with evidence mapped to agreed controls. **Platforms and tooling:** Security Command Center; Organization Policy Service; Cloud Asset Inventory; Assured Workloads; Security Health Analytics; Security Command Center security posture service; Compliance Manager; Google Cloud Audit Manager; Advisory Notifications; Security Command Center CIEM; Security Command Center data security posture management. **Kemet Tech deliverables:** Posture assessment; remediation backlog; preventive guardrails; control evidence and exception register. **Scope note:** Security Command Center capabilities depend on tier and activation. Enterprise is deprecated with shutdown scheduled May 21, 2027; confirm the supported Premium migration path. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) | [Security Command Center overview](https://docs.cloud.google.com/security-command-center/docs/security-command-center-overview) ### Vulnerability & workload security Cybersecurity | Identify vulnerable hosts and container images and integrate remediation into delivery and patch workflows. **Platforms and tooling:** Security Command Center; Artifact Analysis; VM Manager; Binary Authorization; Shielded VM; Confidential VM; Security Command Center vulnerability assessment; Web Security Scanner; Event Threat Detection; VM Threat Detection; Container Threat Detection. **Kemet Tech deliverables:** Scan coverage; prioritized findings; hardened baselines; patch plan; retest evidence. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) | [Security Command Center overview](https://docs.cloud.google.com/security-command-center/docs/security-command-center-overview) ### Data protection & database security Cybersecurity | Protect sensitive data with discovery, access restrictions, auditing, masking and encryption. **Platforms and tooling:** Sensitive Data Protection; BigQuery data policies; VPC Service Controls; Cloud SQL audit logging; Knowledge Catalog (formerly Dataplex Universal Catalog); BigQuery policy tags; Sensitive Data Protection discovery. **Kemet Tech deliverables:** Data risk assessment; access and audit policies; masking configuration; prioritized remediation. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) | [Knowledge Catalog overview](https://docs.cloud.google.com/dataplex/docs/introduction) ### Threat detection, SIEM & response automation Cybersecurity | Connect cloud telemetry to security operations, build detections and automate agreed triage and response actions. **Platforms and tooling:** Google Security Operations (SIEM and SOAR); Security Command Center; Cloud Audit Logs; Cloud Logging; Google Security Operations detection engineering and response playbooks; Security Command Center AI Protection. **Kemet Tech deliverables:** Log onboarding; detection rules; alert routing; response playbooks; analyst handover and validation. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) | [Security Command Center overview](https://docs.cloud.google.com/security-command-center/docs/security-command-center-overview) ### Security assessments & incident readiness Cybersecurity | Review architecture and attack paths, validate defenses and prepare teams for cloud incidents. **Platforms and tooling:** Security Command Center findings; Policy Intelligence; Connectivity Tests; Cloud Audit Logs; Mandiant Security Validation; Mandiant Attack Surface Management. **Kemet Tech deliverables:** Assessment report; authorized test plan; remediation verification; incident tabletop; response and evidence runbooks. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) | [Google security and identity portfolio](https://cloud.google.com/security/products/security-and-identity) ### Hybrid, edge & distributed cloud Infrastructure | Extend cloud operating models to data centers and edge locations with local workload and connectivity requirements. **Platforms and tooling:** Google Distributed Cloud connected; Google Distributed Cloud air-gapped; Google Distributed Cloud software-only; Google Cloud VMware Engine. **Kemet Tech deliverables:** Deployment and dependency design; integrated identity and networking; workload deployment; operations handover **Scope note:** Connected and air-gapped offerings require provider and hardware eligibility. Hardware supply and certified-SI responsibilities are confirmed with Google. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) | [Google Distributed Cloud](https://docs.cloud.google.com/distributed-cloud/docs) ### Virtual desktops & secure workspaces Infrastructure | Deliver centrally managed desktops, application sessions and developer workspaces with controlled access. **Platforms and tooling:** Cloud Workstations; Cameyo application delivery; Citrix or Dizzion on Google Cloud (third-party integration). **Kemet Tech deliverables:** Desktop or application pools; golden images; identity and device policies; user acceptance and support handover **Scope note:** Cloud Workstations is for development; Cameyo is application delivery. Citrix and Dizzion are third-party VDI products with separate licensing. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) | [Virtual desktops on Google Cloud](https://cloud.google.com/solutions/virtual-desktops) ### HPC, GPU & AI infrastructure Infrastructure | Build accelerated compute and training infrastructure with high-throughput storage, workload scheduling and cost controls. **Platforms and tooling:** AI Hypercomputer; Cloud TPU; Cluster Toolkit; Compute Engine GPU VMs; Managed Lustre; GKE accelerated workloads. **Kemet Tech deliverables:** Cluster design and deployment; scheduler integration; storage and network tuning; workload benchmarks **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) | [Managed Lustre overview](https://docs.cloud.google.com/managed-lustre/docs/overview) ### Data lakes, analytics & streaming platforms Infrastructure | Deploy the infrastructure for ingestion, processing, analytics and governed data sharing. **Platforms and tooling:** BigQuery; Dataflow; Cloud Data Fusion; Datastream; Dataform; Managed Service for Apache Kafka; Managed Service for Apache Airflow (formerly Cloud Composer); Managed Service for Apache Spark; Lakehouse; Dataproc Metastore. **Kemet Tech deliverables:** Platform architecture; ingestion and processing pipelines; access and catalog configuration; monitoring and handover **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) | [Managed Service for Apache Airflow](https://docs.cloud.google.com/composer/docs) ### Network visibility & connectivity assurance Infrastructure | Diagnose cloud connectivity, traffic paths and firewall behavior before and after infrastructure changes. **Platforms and tooling:** Network Intelligence Center; Connectivity Tests; Network Analyzer; Firewall Insights; Flow Analyzer; Network Topology; Performance Dashboard; Cloud Network Insights. **Kemet Tech deliverables:** Traffic and route baseline; connectivity tests; flow-log analysis; monitoring dashboard; remediation report **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) | [Network Intelligence Center](https://docs.cloud.google.com/network-intelligence-center/docs) ### Identity governance & provider access controls Cybersecurity | Manage identity lifecycles, access reviews and sensitive administrative access across cloud and connected systems. **Platforms and tooling:** Privileged Access Manager; Access Approval; Access Transparency; Cloud Identity; Workforce Identity Federation. **Kemet Tech deliverables:** Joiner/mover/leaver workflows; entitlement review; privileged approval policies; access evidence and handover **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) ### Zero trust access & microsegmentation Cybersecurity | Apply identity-aware access and workload segmentation with explicit communication policies. **Platforms and tooling:** Identity-Aware Proxy; Access Context Manager; Chrome Enterprise Premium; Secure Web Proxy; Secure Access Connect. **Kemet Tech deliverables:** Access and segmentation design; deployed policies; permitted-flow validation; staged rollout and rollback plan **Scope note:** Chrome Enterprise Premium is an adjacent browser security service. Secure Access Connect integrates with separately selected SSE products. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) | [Chrome Enterprise Premium](https://docs.cloud.google.com/chrome-enterprise-premium/docs) ### Application & software supply-chain security Cybersecurity | Integrate source, dependency, secret and artifact checks into application delivery. **Platforms and tooling:** Binary Authorization; Artifact Analysis; Assured OSS; Secure Source Manager; Policy Controller; Web Security Scanner. **Kemet Tech deliverables:** Threat model; security gates; signed artifacts and verification; vulnerability triage; remediation handover **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) | [Google security and identity portfolio](https://cloud.google.com/security/products/security-and-identity) ### AI application, model & agent security Cybersecurity | Configure model access, prompt and response screening, data controls and least-privilege agent permissions. **Platforms and tooling:** Model Armor; Security Command Center AI Protection; Sensitive Data Protection; model endpoint IAM and network controls. **Kemet Tech deliverables:** AI threat model; configured guardrails; tool-access boundaries; adversarial evaluation; monitoring and handover **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) | [Model Armor overview](https://docs.cloud.google.com/model-armor/overview) ### Threat intelligence & attack-surface management Cybersecurity | Connect threat context and external exposure discovery to security investigations and remediation workflows. **Platforms and tooling:** Google Threat Intelligence; Mandiant Attack Surface Management; Google Security Operations; Web Risk. **Kemet Tech deliverables:** Indicator feeds and enrichment; exposed-asset inventory; risk prioritization; detection integrations; analyst handover **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) | [Google security and identity portfolio](https://cloud.google.com/security/products/security-and-identity) ### Endpoint, email & SaaS security integration Cybersecurity | Deploy and integrate the endpoint, email and SaaS controls selected for the customer environment. **Platforms and tooling:** Chrome Enterprise Premium; Google Workspace security controls; Google Security Operations integrations; customer-selected EDR. **Kemet Tech deliverables:** Product onboarding; protection policies; identity and SIEM integration; alert validation; operational handover **Scope note:** Workspace and Chrome are adjacent subscriptions; full EDR and specialist SaaS controls use separately selected products. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) | [Chrome Enterprise Premium](https://docs.cloud.google.com/chrome-enterprise-premium/docs) ### Sovereign cloud & regulated workload foundations Infrastructure | Design location, administrative access and data-protection controls around agreed residency and regulatory requirements. **Platforms and tooling:** Assured Workloads; Sovereign Controls by Partners; Google Distributed Cloud air-gapped; Access Approval; Key Access Justifications. **Kemet Tech deliverables:** Requirements and service eligibility map; residency design; access and key controls; deployment and evidence handover **Scope note:** Eligibility, country/region, service availability and contractual requirements are confirmed before design. Deployment of cloud controls does not itself confer regulatory certification. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) | [Google Distributed Cloud](https://docs.cloud.google.com/distributed-cloud/docs) ### Resilience engineering & recovery validation Infrastructure | Test application failure scenarios, restore paths and recovery objectives through controlled exercises. **Platforms and tooling:** Backup and DR restore workflows; Cloud Monitoring; GKE workload recovery tests; customer-selected chaos testing. **Kemet Tech deliverables:** Failure-scenario plan; approved test execution; recovery measurements; improvement backlog; repeatable runbook **Scope note:** Fault simulation uses workload-specific or customer-selected tooling; no native FIS-equivalent service is implied. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) ### Confidential computing & workload isolation Cybersecurity | Protect sensitive processing using supported isolation, attestation and confidential-computing capabilities. **Platforms and tooling:** Confidential VM; Confidential GKE; Confidential Space; Google Cloud Attestation. **Kemet Tech deliverables:** Workload suitability assessment; isolated execution deployment; attestation and key-release integration; verification evidence **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) | [Confidential Computing overview](https://docs.cloud.google.com/confidential-computing/docs/confidential-computing-overview) ### IoT, OT & edge workload security Cybersecurity | Connect device and operational-technology environments to cloud platforms with identity, segmentation and telemetry controls. **Platforms and tooling:** Partner IoT platforms on Google Cloud; Pub/Sub; Google Distributed Cloud; customer-selected OT security. **Kemet Tech deliverables:** Device identity design; secure ingestion; segmented connectivity; telemetry and alerts; operational handover **Scope note:** Cloud IoT Core is retired. Device-platform and OT controls use supported partner products; Pub/Sub supplies cloud ingestion, not complete device management. **Official references:** [Google Cloud (GCP) product inventory](https://docs.cloud.google.com/docs/product-list) | [Google Distributed Cloud](https://docs.cloud.google.com/distributed-cloud/docs) ### AI strategy, readiness & solution architecture Artificial intelligence | Assess use cases, data readiness, platform options, costs and delivery requirements. **Platforms and tooling:** Gemini Enterprise Agent Platform (formerly Vertex AI); BigQuery AI. **Kemet Tech deliverables:** Use-case priorities; data and access assessment; target architecture; implementation roadmap **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Google Cloud AI and ML products](https://cloud.google.com/products/ai) ### Generative AI applications & model integration Artificial intelligence | Build applications using foundation models for text, code and multimodal tasks. **Platforms and tooling:** Gemini models; Gemini Enterprise Agent Platform Model Garden; Agent Studio. **Kemet Tech deliverables:** Model selection and integration; prompt workflows; application APIs; quality and cost validation **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Gemini Enterprise platform evolution](https://cloud.google.com/blog/products/ai-machine-learning/the-new-gemini-enterprise-one-platform-for-agent-development) | [Google Cloud AI and ML products](https://cloud.google.com/products/ai) ### AI agents, orchestration & enterprise automation Artificial intelligence | Build agents that retrieve information and use approved business tools with controlled permissions. **Platforms and tooling:** Agent Development Kit (ADK); Gemini Enterprise Agent Platform; Agent Studio. **Kemet Tech deliverables:** Agent workflows; tool and API integrations; approval controls; agent testing and handover **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Gemini Enterprise platform evolution](https://cloud.google.com/blog/products/ai-machine-learning/the-new-gemini-enterprise-one-platform-for-agent-development) | [Google Cloud AI and ML products](https://cloud.google.com/products/ai) ### RAG, enterprise search & vector retrieval Artificial intelligence | Connect AI applications to governed business content through retrieval and search. **Platforms and tooling:** Agent Search; Vector Search on Gemini Enterprise Agent Platform; BigQuery vector search; AlloyDB vector search. **Kemet Tech deliverables:** Content ingestion; embedding and vector indexes; access-aware retrieval; retrieval evaluation **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Gemini Enterprise platform evolution](https://cloud.google.com/blog/products/ai-machine-learning/the-new-gemini-enterprise-one-platform-for-agent-development) | [Google Cloud AI and ML products](https://cloud.google.com/products/ai) ### Custom ML, AutoML & model customization Artificial intelligence | Develop and tune models for business datasets and agreed prediction or generation tasks. **Platforms and tooling:** Gemini Enterprise Agent Platform custom training; AutoML; model tuning; Colab Enterprise. **Kemet Tech deliverables:** Training datasets; training and tuning workflows; model evaluation; deployment artifacts **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Google Cloud AI and ML products](https://cloud.google.com/products/ai) ### MLOps, model serving & lifecycle management Artificial intelligence | Operationalize model training, deployment, monitoring and controlled updates. **Platforms and tooling:** Gemini Enterprise Agent Platform Pipelines; Model Registry; Prediction; Model Monitoring. **Kemet Tech deliverables:** Model registry and pipelines; serving endpoints; performance monitoring; rollback and retraining procedures **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Google Cloud AI and ML products](https://cloud.google.com/products/ai) ### AI data preparation, labeling & feature engineering Artificial intelligence | Prepare governed training and retrieval data with repeatable processing and quality checks. **Platforms and tooling:** BigQuery; Knowledge Catalog; Dataflow; custom annotation workflow. **Kemet Tech deliverables:** Data preparation pipelines; labeling workflow; feature engineering; quality and lineage controls **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Google Cloud AI and ML products](https://cloud.google.com/products/ai) ### Document AI & intelligent data extraction Artificial intelligence | Extract, classify and validate information from business documents. **Platforms and tooling:** Document AI; Gemini document processing. **Kemet Tech deliverables:** Document ingestion; extraction schemas; validation and review workflow; business-system integration **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Google Cloud AI and ML products](https://cloud.google.com/products/ai) ### Speech AI, transcription & voice applications Artificial intelligence | Build speech-enabled applications with transcription and supported voice-generation capabilities. **Platforms and tooling:** Speech-to-Text; Text-to-Speech; Gemini Live API. **Kemet Tech deliverables:** Audio ingestion; speech API integration; language and accuracy testing; voice application handover **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Google Cloud AI and ML products](https://cloud.google.com/products/ai) ### Language AI, translation & text analytics Artificial intelligence | Analyze text, extract entities and integrate multilingual application workflows. **Platforms and tooling:** Natural Language AI; Translation AI. **Kemet Tech deliverables:** Language processing APIs; classification and extraction; translation workflow; quality evaluation **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Google Cloud AI and ML products](https://cloud.google.com/products/ai) ### Computer vision & video understanding Artificial intelligence | Build image and video analysis workflows with supported models and human review where required. **Platforms and tooling:** Vision AI; Video Intelligence API; Gemini multimodal models. **Kemet Tech deliverables:** Image or video ingestion; model integration; task-specific evaluation; application integration **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Google Cloud AI and ML products](https://cloud.google.com/products/ai) ### Multimodal content & media generation Artificial intelligence | Integrate supported image, audio and video generation into business applications. **Platforms and tooling:** Imagen; Veo; Gemini multimodal models. **Kemet Tech deliverables:** Model and rights assessment; generation workflow; review controls; application integration **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Google Cloud AI and ML products](https://cloud.google.com/products/ai) ### Forecasting, anomaly detection & predictive analytics Artificial intelligence | Develop models for planning, risk indicators and operational analysis. **Platforms and tooling:** BigQuery ML; Gemini Enterprise Agent Platform custom models. **Kemet Tech deliverables:** Prediction objective and baseline; model pipeline; backtesting; decision-support integration **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Google Cloud AI and ML products](https://cloud.google.com/products/ai) ### Recommendations, ranking & personalization Artificial intelligence | Build recommendation and ranking workflows around customer-approved data and objectives. **Platforms and tooling:** Agent Search recommendations; BigQuery ML. **Kemet Tech deliverables:** Recommendation design; training or retrieval pipeline; relevance evaluation; application integration **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Google Cloud AI and ML products](https://cloud.google.com/products/ai) ### Conversational AI & customer-service integration Artificial intelligence | Implement virtual assistants and connect conversations to knowledge, workflows and human teams. **Platforms and tooling:** CX Agent Studio; Gemini Enterprise for Customer Experience. **Kemet Tech deliverables:** Conversation design; knowledge and tool integration; handoff workflow; conversation testing **Scope note:** Adjacent SaaS, developer tools and contact-center products require separate subscriptions and eligibility. Integration scope is agreed per customer. **Official references:** [Google Cloud AI and ML products](https://cloud.google.com/products/ai) ### Enterprise copilots & business AI integration Artificial intelligence | Configure enterprise AI assistants and connect them to approved business content and applications. **Platforms and tooling:** Gemini Enterprise app; Google Workspace with Gemini integration. **Kemet Tech deliverables:** Readiness and access assessment; connectors and policies; workflow configuration; user enablement **Scope note:** Adjacent SaaS, developer tools and contact-center products require separate subscriptions and eligibility. Integration scope is agreed per customer. **Official references:** [Google Cloud AI and ML products](https://cloud.google.com/products/ai) ### AI-assisted engineering & operations Artificial intelligence | Integrate AI assistance into development, modernization and operational workflows. **Platforms and tooling:** Gemini Code Assist Standard and Enterprise; Gemini Cloud Assist. **Kemet Tech deliverables:** Tool onboarding; repository and access configuration; workflow evaluation; operational controls **Scope note:** Adjacent SaaS, developer tools and contact-center products require separate subscriptions and eligibility. Integration scope is agreed per customer. **Official references:** [Google Cloud AI and ML products](https://cloud.google.com/products/ai) | [Gemini Code Assist Standard and Enterprise](https://docs.cloud.google.com/gemini/docs/codeassist/overview) ### AI evaluation, governance & responsible deployment Artificial intelligence | Establish evaluation, monitoring, data controls and release criteria for AI solutions. **Platforms and tooling:** Gemini Enterprise Agent Platform evaluation; Model Armor; AI model monitoring. **Kemet Tech deliverables:** Evaluation datasets; quality and safety checks; usage and cost monitoring; governance documentation **Scope note:** Controls and evaluations reduce identified risks; they do not guarantee factual accuracy, regulatory certification or prevention of every attack. **Official references:** [Google Cloud AI and ML products](https://cloud.google.com/products/ai) ## Microsoft Azure Product reference: https://azure.microsoft.com/en-us/products/ ### Cloud strategy & landing zones Infrastructure | Establish a governed cloud foundation for new workloads or consolidate an inconsistent estate. **Platforms and tooling:** Azure landing zones; Management Groups; Azure Policy; Azure Resource Manager; Azure Lighthouse; Azure Resource Graph; Azure Deployment Environments. **Kemet Tech deliverables:** Architecture and account hierarchy; landing zone deployed as code; ownership and governance runbook. **Scope note:** Existing Azure Blueprints are assessed for migration to supported Template Specs and Deployment Stacks; the catalog does not propose new Blueprint deployments. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### Compute, operating systems & scale Infrastructure | Deploy and harden virtual machines, bare metal and GPU infrastructure with capacity and availability planning. **Platforms and tooling:** Azure Virtual Machines; Virtual Machine Scale Sets; Azure Batch; Azure Compute Gallery; Azure Dedicated Host; Azure Spot Virtual Machines; Azure Compute Fleet; Azure Linux. **Kemet Tech deliverables:** Hardened images; autoscaling configuration; patch baseline; capacity and operational handover. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### Kubernetes & container platforms Infrastructure | Build container platforms with private connectivity, deployment controls and workload isolation. **Platforms and tooling:** Azure Kubernetes Service (AKS); Azure Container Apps; Azure Container Instances; Azure Container Registry; Azure Kubernetes Fleet Manager; Azure Container Storage; AKS enabled by Azure Arc. **Kemet Tech deliverables:** Cluster and registry; workload policies; deployment pipeline; upgrade and recovery procedures. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### Serverless, APIs & integration Infrastructure | Implement APIs, event-driven workloads and application integration with authentication and reliable delivery. **Platforms and tooling:** Azure Functions; Azure App Service; Azure API Management; Azure Logic Apps; Azure Service Bus; Azure Event Grid; Azure App Configuration; Azure Event Hubs; Azure Relay; Azure Web PubSub; Azure SignalR Service; Azure Static Web Apps; Azure Communication Services. **Kemet Tech deliverables:** Deployed APIs and functions; integration flows; retry and failure handling; monitoring. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### Cloud networking & connectivity Infrastructure | Design segmented networks and connect offices, data centers and cloud environments. **Platforms and tooling:** Azure Virtual Network; Azure Virtual WAN; Azure ExpressRoute; Azure VPN Gateway; Azure Private Link; Azure NAT Gateway; Azure Route Server; Azure Virtual Network Manager; Azure DNS Private Resolver; Azure Private DNS. **Kemet Tech deliverables:** IP plan and routing design; deployed hub and spokes; private connectivity; connectivity validation. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### Load balancing, DNS & application delivery Infrastructure | Make applications reachable and resilient with traffic distribution, name resolution and health checks. **Platforms and tooling:** Azure Load Balancer; Azure Application Gateway; Azure Front Door; Azure DNS; Azure Traffic Manager. **Kemet Tech deliverables:** Load balancers and DNS; TLS termination; health checks; traffic failover configuration. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### Storage, file services & archiving Infrastructure | Implement object, block and file storage with access controls, lifecycle policies and data migration. **Platforms and tooling:** Azure Blob Storage; Azure Files; Azure Managed Disks; Azure NetApp Files; Azure Data Lake Storage; Azure Elastic SAN; Azure Managed Lustre; Azure Storage Mover; Azure File Sync; Azure Queue Storage; Azure Table Storage; Azure Storage Actions. **Kemet Tech deliverables:** Storage architecture; encryption and access policies; retention rules; migration and restore validation. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### Database platforms & modernization Infrastructure | Deploy and migrate relational and non-relational databases with availability, access and performance controls. **Platforms and tooling:** Azure SQL Database; Azure SQL Managed Instance; Azure Database for PostgreSQL; Azure Database for MySQL; Azure Cosmos DB; SQL Server on Azure Virtual Machines; Azure Managed Redis; Azure AI Search. **Kemet Tech deliverables:** Database deployment; backup and access baseline; performance tuning; migration and rollback plan. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) | [Azure Cache for Redis retirement FAQ](https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/retirement-faq) ### Migration & hybrid cloud Infrastructure | Assess dependencies and move servers, databases and data using migration waves and rehearsed cutovers. **Platforms and tooling:** Azure Migrate; Azure Database Migration Service; Azure Data Box; Azure Arc; Azure Local; Azure VMware Solution; Azure Storage Mover; Azure File Sync. **Kemet Tech deliverables:** Discovery and dependency map; migration factory; test migration; cutover and rollback runbooks. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### Backup, disaster recovery & cyber recovery Infrastructure | Design recovery around business-defined recovery time and recovery point objectives, then rehearse it. **Platforms and tooling:** Azure Backup; Azure Site Recovery; Resiliency in Azure (formerly Azure Business Continuity Center); immutable Blob Storage; Azure Backup immutable vaults; Azure Backup multi-user authorization; Azure Backup soft delete. **Kemet Tech deliverables:** Backup policies; protected recovery copies; failover automation; restore-test evidence; recovery runbook. **Scope note:** Resiliency in Azure is the current name for Azure Business Continuity Center. Preview resilience features are evaluated separately. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) | [Resiliency in Azure](https://learn.microsoft.com/en-us/azure/resiliency/) ### Infrastructure as code & DevSecOps Infrastructure | Make infrastructure and releases repeatable with review gates, policy checks and secure artifact handling. **Platforms and tooling:** Azure Bicep; Azure Resource Manager templates; Azure DevOps; GitHub Actions; Azure Automation; Terraform; Azure Deployment Stacks; Azure Template Specs; Azure Machine Configuration. **Kemet Tech deliverables:** Versioned infrastructure modules; CI/CD pipelines; secrets integration; deployment and rollback procedures. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### Observability, patching & operations Infrastructure | Instrument services and establish operating procedures so teams can identify and resolve failures. **Platforms and tooling:** Azure Monitor; Log Analytics; Application Insights; Azure Update Manager; Azure Managed Grafana; Azure Service Health; Azure Resource Health; Azure Monitor managed service for Prometheus; Azure Monitor Agent; Azure Network Watcher. **Kemet Tech deliverables:** Dashboards and alerts; log routing; patch workflows; incident procedures; service ownership handover. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### Cost management & resource governance Infrastructure | Identify unused capacity and establish budgets, tagging and cost ownership across environments. **Platforms and tooling:** Microsoft Cost Management; Azure Advisor; Azure budgets; Azure tags; Azure reservations planning; Azure savings plan planning; Azure Hybrid Benefit assessment. **Kemet Tech deliverables:** Cost baseline; prioritized optimization backlog; budget alerts; allocation and capacity recommendations. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### Identity, federation & privileged access Cybersecurity | Implement least privilege, single sign-on, multifactor authentication and controlled administrative access. **Platforms and tooling:** Microsoft Entra ID; Conditional Access; Privileged Identity Management; Microsoft Entra ID Governance; Managed Identities; Azure Bastion; Microsoft Entra Domain Services; Microsoft Entra External ID; Microsoft Entra Workload ID; Microsoft Entra ID Protection; Microsoft Entra Verified ID. **Kemet Tech deliverables:** Role and access model; federation and MFA; privileged access controls; access review and break-glass procedures. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) | [What is Global Secure Access?](https://learn.microsoft.com/en-us/entra/global-secure-access/overview-what-is-global-secure-access) ### Network, web & API protection Cybersecurity | Reduce exposure with segmentation, firewall policies, web protection and protected application entry points. **Platforms and tooling:** Azure Firewall; Azure Web Application Firewall; Azure DDoS Protection; Network Security Groups; Azure Firewall Manager; Azure Network Security Perimeter; Azure Firewall Premium; Azure WAF bot protection; Azure DDoS IP Protection. **Kemet Tech deliverables:** Firewall and WAF rules; controlled ingress and egress; traffic logging; validated application protection. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### Encryption, keys, secrets & certificates Cybersecurity | Centralize encryption keys, application secrets and certificate lifecycles with controlled access and rotation. **Platforms and tooling:** Azure Key Vault; Azure Managed HSM; Key Vault certificates; Azure encryption at host; Azure Cloud HSM; Azure Key Vault rotation policies. **Kemet Tech deliverables:** Key hierarchy; secrets integration; certificate inventory; rotation and recovery procedures. **Scope note:** Azure Cloud HSM, Managed HSM and Key Vault serve different integration needs. Dedicated HSM is closed to new customers and retires July 31, 2028. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) | [Azure Dedicated HSM overview](https://learn.microsoft.com/en-us/azure/dedicated-hsm/overview) ### Security posture & compliance engineering Cybersecurity | Assess cloud configuration, prioritize risks and implement guardrails with evidence mapped to agreed controls. **Platforms and tooling:** Microsoft Defender for Cloud; Azure Policy; Microsoft cloud security benchmark; Azure Resource Graph; Microsoft Defender CSPM; Microsoft Defender for Cloud attack path analysis; Microsoft Security Exposure Management. **Kemet Tech deliverables:** Posture assessment; remediation backlog; preventive guardrails; control evidence and exception register. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### Vulnerability & workload security Cybersecurity | Identify vulnerable hosts and container images and integrate remediation into delivery and patch workflows. **Platforms and tooling:** Microsoft Defender for Servers; Microsoft Defender for Containers; Azure Update Manager; Trusted Launch; Azure confidential computing; Microsoft Defender for Storage malware scanning; Microsoft Defender for App Service; Microsoft Defender for Key Vault; Microsoft Defender for Resource Manager; Microsoft Defender for open-source relational databases. **Kemet Tech deliverables:** Scan coverage; prioritized findings; hardened baselines; patch plan; retest evidence. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### Data protection & database security Cybersecurity | Protect sensitive data with discovery, access restrictions, auditing, masking and encryption. **Platforms and tooling:** Microsoft Purview; Microsoft Defender for SQL; Azure SQL auditing; Dynamic Data Masking; Always Encrypted; Microsoft Purview Data Loss Prevention; Microsoft Purview Information Protection; Microsoft Purview Data Security Posture Management; Microsoft Purview Data Map. **Kemet Tech deliverables:** Data risk assessment; access and audit policies; masking configuration; prioritized remediation. **Scope note:** Purview capabilities and data-source coverage depend on product licensing and supported connectors. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### Threat detection, SIEM & response automation Cybersecurity | Connect cloud telemetry to security operations, build detections and automate agreed triage and response actions. **Platforms and tooling:** Microsoft Sentinel; Microsoft Defender XDR; Microsoft Defender for Cloud; Azure Logic Apps; Azure Monitor; Microsoft Defender for Endpoint; Microsoft Defender for Identity; Microsoft Defender for Cloud Apps; Microsoft Defender for Office 365. **Kemet Tech deliverables:** Log onboarding; detection rules; alert routing; response playbooks; analyst handover and validation. **Scope note:** Defender XDR, Endpoint, Identity, Office 365 and Cloud Apps are separately licensed Microsoft security products; scope their entitlements and integrations explicitly. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### Security assessments & incident readiness Cybersecurity | Review architecture and attack paths, validate defenses and prepare teams for cloud incidents. **Platforms and tooling:** Microsoft Defender for Cloud recommendations; Microsoft Sentinel hunting; Azure Network Watcher; Entra audit logs. **Kemet Tech deliverables:** Assessment report; authorized test plan; remediation verification; incident tabletop; response and evidence runbooks. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### Hybrid, edge & distributed cloud Infrastructure | Extend cloud operating models to data centers and edge locations with local workload and connectivity requirements. **Platforms and tooling:** Azure Arc; Azure Local; Azure Stack Hub; Azure Stack Edge; Azure VMware Solution; Nutanix Cloud Clusters on Azure. **Kemet Tech deliverables:** Deployment and dependency design; integrated identity and networking; workload deployment; operations handover **Scope note:** Hardware lifecycle, supported deployment models and vendor subscriptions are validated before selecting Stack, Local or third-party infrastructure. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### Virtual desktops & secure workspaces Infrastructure | Deliver centrally managed desktops, application sessions and developer workspaces with controlled access. **Platforms and tooling:** Azure Virtual Desktop; Windows 365; FSLogix; Microsoft Intune integration. **Kemet Tech deliverables:** Desktop or application pools; golden images; identity and device policies; user acceptance and support handover **Scope note:** Windows 365 and Intune are separately licensed Microsoft services. Desktop and application licensing are confirmed before deployment. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### HPC, GPU & AI infrastructure Infrastructure | Build accelerated compute and training infrastructure with high-throughput storage, workload scheduling and cost controls. **Platforms and tooling:** Azure HPC VMs; Azure GPU VMs; Azure CycleCloud; Azure Batch; Azure Managed Lustre; Azure Machine Learning infrastructure. **Kemet Tech deliverables:** Cluster design and deployment; scheduler integration; storage and network tuning; workload benchmarks **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### Data lakes, analytics & streaming platforms Infrastructure | Deploy the infrastructure for ingestion, processing, analytics and governed data sharing. **Platforms and tooling:** Azure Data Factory; Azure Synapse Analytics; Azure Databricks; Azure Data Explorer; Azure Event Hubs; Azure Stream Analytics; Microsoft Fabric. **Kemet Tech deliverables:** Platform architecture; ingestion and processing pipelines; access and catalog configuration; monitoring and handover **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### Network visibility & connectivity assurance Infrastructure | Diagnose cloud connectivity, traffic paths and firewall behavior before and after infrastructure changes. **Platforms and tooling:** Azure Network Watcher; Connection Monitor; Virtual Network flow logs; Azure Virtual Network Manager. **Kemet Tech deliverables:** Traffic and route baseline; connectivity tests; flow-log analysis; monitoring dashboard; remediation report **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### Identity governance & provider access controls Cybersecurity | Manage identity lifecycles, access reviews and sensitive administrative access across cloud and connected systems. **Platforms and tooling:** Microsoft Entra ID Governance; Lifecycle Workflows; Access Reviews; Entitlement Management; Privileged Identity Management; Customer Lockbox for Azure. **Kemet Tech deliverables:** Joiner/mover/leaver workflows; entitlement review; privileged approval policies; access evidence and handover **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) | [Customer Lockbox for Azure](https://learn.microsoft.com/en-us/azure/security/fundamentals/customer-lockbox-overview) ### Zero trust access & microsegmentation Cybersecurity | Apply identity-aware access and workload segmentation with explicit communication policies. **Platforms and tooling:** Microsoft Entra Private Access; Microsoft Entra Internet Access; Conditional Access; Azure Network Security Perimeter. **Kemet Tech deliverables:** Access and segmentation design; deployed policies; permitted-flow validation; staged rollout and rollback plan **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) | [What is Global Secure Access?](https://learn.microsoft.com/en-us/entra/global-secure-access/overview-what-is-global-secure-access) ### Application & software supply-chain security Cybersecurity | Integrate source, dependency, secret and artifact checks into application delivery. **Platforms and tooling:** GitHub Advanced Security; GitHub Advanced Security for Azure DevOps; Artifact Signing; Azure Container Registry; Microsoft Defender for DevOps. **Kemet Tech deliverables:** Threat model; security gates; signed artifacts and verification; vulnerability triage; remediation handover **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### AI application, model & agent security Cybersecurity | Configure model access, prompt and response screening, data controls and least-privilege agent permissions. **Platforms and tooling:** Azure AI Content Safety; Prompt Shields; Microsoft Defender for Cloud AI security posture; Microsoft Foundry network and identity controls. **Kemet Tech deliverables:** AI threat model; configured guardrails; tool-access boundaries; adversarial evaluation; monitoring and handover **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) | [Azure AI Content Safety overview](https://learn.microsoft.com/en-us/azure/ai-services/content-safety/overview) ### Threat intelligence & attack-surface management Cybersecurity | Connect threat context and external exposure discovery to security investigations and remediation workflows. **Platforms and tooling:** Microsoft Defender External Attack Surface Management; Microsoft Sentinel threat intelligence; Microsoft Security Exposure Management. **Kemet Tech deliverables:** Indicator feeds and enrichment; exposed-asset inventory; risk prioritization; detection integrations; analyst handover **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### Endpoint, email & SaaS security integration Cybersecurity | Deploy and integrate the endpoint, email and SaaS controls selected for the customer environment. **Platforms and tooling:** Microsoft Defender for Endpoint; Microsoft Defender for Office 365; Microsoft Defender for Cloud Apps; Microsoft Defender for Identity; Microsoft Intune; Microsoft Purview. **Kemet Tech deliverables:** Product onboarding; protection policies; identity and SIEM integration; alert validation; operational handover **Scope note:** Microsoft 365, Intune and Defender entitlements are separate from ordinary Azure consumption. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### Sovereign cloud & regulated workload foundations Infrastructure | Design location, administrative access and data-protection controls around agreed residency and regulatory requirements. **Platforms and tooling:** Azure Government; Microsoft Cloud for Sovereignty controls; Azure Policy; Customer Lockbox; Azure Local. **Kemet Tech deliverables:** Requirements and service eligibility map; residency design; access and key controls; deployment and evidence handover **Scope note:** Eligibility, country/region, service availability and contractual requirements are confirmed before design. Deployment of cloud controls does not itself confer regulatory certification. **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) | [Customer Lockbox for Azure](https://learn.microsoft.com/en-us/azure/security/fundamentals/customer-lockbox-overview) ### Resilience engineering & recovery validation Infrastructure | Test application failure scenarios, restore paths and recovery objectives through controlled exercises. **Platforms and tooling:** Azure Chaos Studio; Azure Load Testing; Resiliency in Azure; Azure Backup restore workflows; Azure Site Recovery test failover. **Kemet Tech deliverables:** Failure-scenario plan; approved test execution; recovery measurements; improvement backlog; repeatable runbook **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) | [Resiliency in Azure](https://learn.microsoft.com/en-us/azure/resiliency/) ### Confidential computing & workload isolation Cybersecurity | Protect sensitive processing using supported isolation, attestation and confidential-computing capabilities. **Platforms and tooling:** Azure confidential VMs; Azure confidential containers; Azure Attestation; Azure Key Vault secure key release. **Kemet Tech deliverables:** Workload suitability assessment; isolated execution deployment; attestation and key-release integration; verification evidence **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) ### IoT, OT & edge workload security Cybersecurity | Connect device and operational-technology environments to cloud platforms with identity, segmentation and telemetry controls. **Platforms and tooling:** Azure IoT Hub; Azure IoT Edge; Azure IoT Operations; Microsoft Defender for IoT; Azure Device Provisioning Service. **Kemet Tech deliverables:** Device identity design; secure ingestion; segmented connectivity; telemetry and alerts; operational handover **Official references:** [Microsoft Azure product inventory](https://azure.microsoft.com/en-us/products/) | [Defender for IoT overview](https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/overview) ### AI strategy, readiness & solution architecture Artificial intelligence | Assess use cases, data readiness, platform options, costs and delivery requirements. **Platforms and tooling:** Microsoft Foundry; Azure Machine Learning. **Kemet Tech deliverables:** Use-case priorities; data and access assessment; target architecture; implementation roadmap **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Foundry Tools service inventory](https://learn.microsoft.com/en-us/azure/ai-services/what-are-ai-services) ### Generative AI applications & model integration Artificial intelligence | Build applications using foundation models for text, code and multimodal tasks. **Platforms and tooling:** Microsoft Foundry; Azure OpenAI; Foundry model catalog. **Kemet Tech deliverables:** Model selection and integration; prompt workflows; application APIs; quality and cost validation **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Foundry Tools service inventory](https://learn.microsoft.com/en-us/azure/ai-services/what-are-ai-services) ### AI agents, orchestration & enterprise automation Artificial intelligence | Build agents that retrieve information and use approved business tools with controlled permissions. **Platforms and tooling:** Foundry Agent Service; Microsoft Agent Framework. **Kemet Tech deliverables:** Agent workflows; tool and API integrations; approval controls; agent testing and handover **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Foundry Tools service inventory](https://learn.microsoft.com/en-us/azure/ai-services/what-are-ai-services) ### RAG, enterprise search & vector retrieval Artificial intelligence | Connect AI applications to governed business content through retrieval and search. **Platforms and tooling:** Azure AI Search; Foundry retrieval integrations. **Kemet Tech deliverables:** Content ingestion; embedding and vector indexes; access-aware retrieval; retrieval evaluation **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Foundry Tools service inventory](https://learn.microsoft.com/en-us/azure/ai-services/what-are-ai-services) ### Custom ML, AutoML & model customization Artificial intelligence | Develop and tune models for business datasets and agreed prediction or generation tasks. **Platforms and tooling:** Azure Machine Learning; automated ML; Foundry model fine-tuning. **Kemet Tech deliverables:** Training datasets; training and tuning workflows; model evaluation; deployment artifacts **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [AI and machine learning architecture guide](https://learn.microsoft.com/en-us/azure/architecture/ai-ml/guide/data-science-and-machine-learning) ### MLOps, model serving & lifecycle management Artificial intelligence | Operationalize model training, deployment, monitoring and controlled updates. **Platforms and tooling:** Azure Machine Learning pipelines; model registry; managed endpoints; MLflow integration. **Kemet Tech deliverables:** Model registry and pipelines; serving endpoints; performance monitoring; rollback and retraining procedures **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [AI and machine learning architecture guide](https://learn.microsoft.com/en-us/azure/architecture/ai-ml/guide/data-science-and-machine-learning) ### AI data preparation, labeling & feature engineering Artificial intelligence | Prepare governed training and retrieval data with repeatable processing and quality checks. **Platforms and tooling:** Azure Machine Learning data labeling; data preparation pipelines; Microsoft Fabric integration. **Kemet Tech deliverables:** Data preparation pipelines; labeling workflow; feature engineering; quality and lineage controls **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [AI and machine learning architecture guide](https://learn.microsoft.com/en-us/azure/architecture/ai-ml/guide/data-science-and-machine-learning) ### Document AI & intelligent data extraction Artificial intelligence | Extract, classify and validate information from business documents. **Platforms and tooling:** Azure Document Intelligence; Azure Content Understanding. **Kemet Tech deliverables:** Document ingestion; extraction schemas; validation and review workflow; business-system integration **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Foundry Tools service inventory](https://learn.microsoft.com/en-us/azure/ai-services/what-are-ai-services) ### Speech AI, transcription & voice applications Artificial intelligence | Build speech-enabled applications with transcription and supported voice-generation capabilities. **Platforms and tooling:** Azure Speech; Azure OpenAI realtime models. **Kemet Tech deliverables:** Audio ingestion; speech API integration; language and accuracy testing; voice application handover **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Foundry Tools service inventory](https://learn.microsoft.com/en-us/azure/ai-services/what-are-ai-services) ### Language AI, translation & text analytics Artificial intelligence | Analyze text, extract entities and integrate multilingual application workflows. **Platforms and tooling:** Azure Language; Azure Translator. **Kemet Tech deliverables:** Language processing APIs; classification and extraction; translation workflow; quality evaluation **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Foundry Tools service inventory](https://learn.microsoft.com/en-us/azure/ai-services/what-are-ai-services) ### Computer vision & video understanding Artificial intelligence | Build image and video analysis workflows with supported models and human review where required. **Platforms and tooling:** Azure Content Understanding; Azure Vision (availability review); Azure Video Indexer; Azure Machine Learning vision models. **Kemet Tech deliverables:** Image or video ingestion; model integration; task-specific evaluation; application integration **Scope note:** Use supported APIs and confirm restricted feature access. Custom Vision migration is scoped separately ahead of its September 2028 retirement. **Official references:** [Foundry Tools service inventory](https://learn.microsoft.com/en-us/azure/ai-services/what-are-ai-services) | [Custom Vision migration guidance](https://learn.microsoft.com/en-us/azure/ai-services/custom-vision-service/migration-options) ### Multimodal content & media generation Artificial intelligence | Integrate supported image, audio and video generation into business applications. **Platforms and tooling:** Foundry image and video model integrations; Azure OpenAI image models. **Kemet Tech deliverables:** Model and rights assessment; generation workflow; review controls; application integration **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Foundry Tools service inventory](https://learn.microsoft.com/en-us/azure/ai-services/what-are-ai-services) ### Forecasting, anomaly detection & predictive analytics Artificial intelligence | Develop models for planning, risk indicators and operational analysis. **Platforms and tooling:** Azure Machine Learning forecasting and anomaly models; Microsoft Fabric data science. **Kemet Tech deliverables:** Prediction objective and baseline; model pipeline; backtesting; decision-support integration **Scope note:** New work uses supported custom ML platforms; legacy Anomaly Detector, Metrics Advisor and Personalizer migration is assessed ahead of October 1, 2026 retirement. **Official references:** [AI and machine learning architecture guide](https://learn.microsoft.com/en-us/azure/architecture/ai-ml/guide/data-science-and-machine-learning) | [Microsoft service retirements in 2026](https://learn.microsoft.com/en-us/lifecycle/end-of-support/end-of-support-2026) ### Recommendations, ranking & personalization Artificial intelligence | Build recommendation and ranking workflows around customer-approved data and objectives. **Platforms and tooling:** Azure Machine Learning recommendation models; Azure AI Search ranking. **Kemet Tech deliverables:** Recommendation design; training or retrieval pipeline; relevance evaluation; application integration **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [AI and machine learning architecture guide](https://learn.microsoft.com/en-us/azure/architecture/ai-ml/guide/data-science-and-machine-learning) ### Conversational AI & customer-service integration Artificial intelligence | Implement virtual assistants and connect conversations to knowledge, workflows and human teams. **Platforms and tooling:** Foundry Agent Service; Copilot Studio integration; Azure Communication Services. **Kemet Tech deliverables:** Conversation design; knowledge and tool integration; handoff workflow; conversation testing **Scope note:** Adjacent SaaS, developer tools and contact-center products require separate subscriptions and eligibility. Integration scope is agreed per customer. **Official references:** [Foundry Tools service inventory](https://learn.microsoft.com/en-us/azure/ai-services/what-are-ai-services) ### Enterprise copilots & business AI integration Artificial intelligence | Configure enterprise AI assistants and connect them to approved business content and applications. **Platforms and tooling:** Microsoft 365 Copilot integration; Copilot Studio; Microsoft Fabric Copilot integration. **Kemet Tech deliverables:** Readiness and access assessment; connectors and policies; workflow configuration; user enablement **Scope note:** Adjacent SaaS, developer tools and contact-center products require separate subscriptions and eligibility. Integration scope is agreed per customer. **Official references:** [Foundry Tools service inventory](https://learn.microsoft.com/en-us/azure/ai-services/what-are-ai-services) | [Microsoft Copilot Studio documentation](https://learn.microsoft.com/en-us/microsoft-copilot-studio/) ### AI-assisted engineering & operations Artificial intelligence | Integrate AI assistance into development, modernization and operational workflows. **Platforms and tooling:** GitHub Copilot integration; Azure AI-assisted operations integration. **Kemet Tech deliverables:** Tool onboarding; repository and access configuration; workflow evaluation; operational controls **Scope note:** Adjacent SaaS, developer tools and contact-center products require separate subscriptions and eligibility. Integration scope is agreed per customer. **Official references:** [Foundry Tools service inventory](https://learn.microsoft.com/en-us/azure/ai-services/what-are-ai-services) ### AI evaluation, governance & responsible deployment Artificial intelligence | Establish evaluation, monitoring, data controls and release criteria for AI solutions. **Platforms and tooling:** Foundry evaluations; Azure AI Content Safety; Azure Machine Learning responsible AI tooling. **Kemet Tech deliverables:** Evaluation datasets; quality and safety checks; usage and cost monitoring; governance documentation **Scope note:** Controls and evaluations reduce identified risks; they do not guarantee factual accuracy, regulatory certification or prevention of every attack. **Official references:** [Foundry Tools service inventory](https://learn.microsoft.com/en-us/azure/ai-services/what-are-ai-services) ## Oracle Cloud Infrastructure (OCI) Product reference: https://www.oracle.com/cloud/ ### Cloud strategy & landing zones Infrastructure | Establish a governed cloud foundation for new workloads or consolidate an inconsistent estate. **Platforms and tooling:** OCI tenancies and compartments; OCI IAM policies; OCI Landing Zones; OCI Resource Manager; OCI Organization Management; OCI Service Catalog; OCI Resource Search; OCI License Manager. **Kemet Tech deliverables:** Architecture and account hierarchy; landing zone deployed as code; ownership and governance runbook. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) ### Compute, operating systems & scale Infrastructure | Deploy and harden virtual machines, bare metal and GPU infrastructure with capacity and availability planning. **Platforms and tooling:** OCI Compute; flexible VM shapes; bare metal instances; GPU instances; instance pools; autoscaling; OCI Dedicated Virtual Machine Hosts; OCI capacity reservations; preemptible instances; Oracle Autonomous Linux. **Kemet Tech deliverables:** Hardened images; autoscaling configuration; patch baseline; capacity and operational handover. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [OCI Confidential Computing](https://docs.oracle.com/en-us/iaas/Content/Compute/References/confidential_compute.htm) ### Kubernetes & container platforms Infrastructure | Build container platforms with private connectivity, deployment controls and workload isolation. **Platforms and tooling:** OCI Kubernetes Engine (OKE); OCI Container Instances; OCI Container Registry; OKE virtual nodes; OKE workload identity; Istio on OKE (open-source integration). **Kemet Tech deliverables:** Cluster and registry; workload policies; deployment pipeline; upgrade and recovery procedures. **Scope note:** OCI Service Mesh reached end of life May 31, 2025. Service-mesh delivery uses a supported alternative such as customer-managed Istio on OKE. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [OCI Service Mesh EOL notice](https://docs.oracle.com/en-us/iaas/Content/service-mesh/mesh-move.htm) ### Serverless, APIs & integration Infrastructure | Implement APIs, event-driven workloads and application integration with authentication and reliable delivery. **Platforms and tooling:** OCI Functions; OCI API Gateway; OCI Events; OCI Queue; OCI Streaming; Oracle Integration; OCI Notifications; OCI Email Delivery; OCI Streaming with Apache Kafka; Oracle SOA Suite on OCI; Oracle WebLogic Server for OCI. **Kemet Tech deliverables:** Deployed APIs and functions; integration flows; retry and failure handling; monitoring. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) ### Cloud networking & connectivity Infrastructure | Design segmented networks and connect offices, data centers and cloud environments. **Platforms and tooling:** OCI Virtual Cloud Network (VCN); Dynamic Routing Gateway (DRG); OCI FastConnect; Site-to-Site VPN; Service Gateway; NAT Gateway; OCI Private Service Access; OCI Private Endpoint; OCI local and remote VCN peering; Oracle Interconnect for Azure; Oracle Interconnect for Google Cloud; OCI IPv6 networking. **Kemet Tech deliverables:** IP plan and routing design; deployed hub and spokes; private connectivity; connectivity validation. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [OCI networking](https://www.oracle.com/cloud/networking/) ### Load balancing, DNS & application delivery Infrastructure | Make applications reachable and resilient with traffic distribution, name resolution and health checks. **Platforms and tooling:** OCI Load Balancer; OCI Network Load Balancer; OCI DNS; Traffic Management; OCI Health Checks; OCI Web Application Acceleration. **Kemet Tech deliverables:** Load balancers and DNS; TLS termination; health checks; traffic failover configuration. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [OCI networking](https://www.oracle.com/cloud/networking/) ### Storage, file services & archiving Infrastructure | Implement object, block and file storage with access controls, lifecycle policies and data migration. **Platforms and tooling:** OCI Object Storage; OCI Archive Storage; OCI Block Volume; OCI File Storage; OCI File Storage with Lustre; OCI File Storage replication; OCI Block Volume replication; OCI Object Storage replication. **Kemet Tech deliverables:** Storage architecture; encryption and access policies; retention rules; migration and restore validation. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [OCI storage](https://www.oracle.com/cloud/storage/) | [OCI File Storage with Lustre](https://docs.oracle.com/en-us/iaas/Content/lustre/file-system-create.htm) ### Database platforms & modernization Infrastructure | Deploy and migrate relational and non-relational databases with availability, access and performance controls. **Platforms and tooling:** Oracle Autonomous AI Database; Oracle Base Database Service; Oracle Exadata Database Service; HeatWave MySQL; OCI Database with PostgreSQL; Oracle NoSQL Database; OCI Cache; OCI Search with OpenSearch; Oracle Globally Distributed Autonomous AI Database; Oracle Database Tools. **Kemet Tech deliverables:** Database deployment; backup and access baseline; performance tuning; migration and rollback plan. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) ### Migration & hybrid cloud Infrastructure | Assess dependencies and move servers, databases and data using migration waves and rehearsed cutovers. **Platforms and tooling:** Oracle Cloud Migrations; OCI Database Migration; Oracle Zero Downtime Migration; Oracle GoldenGate; Oracle Cloud VMware Solution; OCI Dedicated Region; Oracle Compute Cloud@Customer; Oracle Exadata Cloud@Customer; Oracle Autonomous AI Database on Exadata Cloud@Customer; Oracle Multicloud Hub. **Kemet Tech deliverables:** Discovery and dependency map; migration factory; test migration; cutover and rollback runbooks. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [Oracle multicloud](https://www.oracle.com/cloud/multicloud/) ### Backup, disaster recovery & cyber recovery Infrastructure | Design recovery around business-defined recovery time and recovery point objectives, then rehearse it. **Platforms and tooling:** OCI Full Stack Disaster Recovery; OCI volume backups; Object Storage retention rules; Oracle Data Guard; Oracle Autonomous Recovery Service; Oracle Database Zero Data Loss Cloud Protect; Oracle Autonomous Data Guard. **Kemet Tech deliverables:** Backup policies; protected recovery copies; failover automation; restore-test evidence; recovery runbook. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [Full Stack Disaster Recovery](https://www.oracle.com/cloud/full-stack-disaster-recovery/) ### Infrastructure as code & DevSecOps Infrastructure | Make infrastructure and releases repeatable with review gates, policy checks and secure artifact handling. **Platforms and tooling:** OCI Resource Manager; OCI DevOps; OCI CLI and SDKs; Terraform; Ansible; OCI DevOps code repositories; OCI DevOps build and deployment pipelines. **Kemet Tech deliverables:** Versioned infrastructure modules; CI/CD pipelines; secrets integration; deployment and rollback procedures. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) ### Observability, patching & operations Infrastructure | Instrument services and establish operating procedures so teams can identify and resolve failures. **Platforms and tooling:** OCI Monitoring; OCI Logging; Oracle Log Analytics; OCI Application Performance Monitoring; OCI OS Management Hub; OCI Management Agent; OCI Database Management; OCI Ops Insights; OCI Stack Monitoring; OCI Fleet Application Management; Oracle Java Management Service; OCI Management Dashboard. **Kemet Tech deliverables:** Dashboards and alerts; log routing; patch workflows; incident procedures; service ownership handover. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [Oracle observability and management](https://www.oracle.com/manageability/) | [Fleet Application Management](https://www.oracle.com/cloud/fleet-application-management/) ### Cost management & resource governance Infrastructure | Identify unused capacity and establish budgets, tagging and cost ownership across environments. **Platforms and tooling:** OCI Cost Analysis; OCI Budgets; OCI Cloud Advisor; usage reports; defined tags; compartment quotas; OCI License Manager; OCI Resource Scheduler; OCI usage and cost reports. **Kemet Tech deliverables:** Cost baseline; prioritized optimization backlog; budget alerts; allocation and capacity recommendations. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) ### Identity, federation & privileged access Cybersecurity | Implement least privilege, single sign-on, multifactor authentication and controlled administrative access. **Platforms and tooling:** OCI IAM Identity Domains; OCI IAM policies; dynamic groups; federation; MFA; OCI Bastion; OCI network sources; OCI resource principals; OCI workload identity; Oracle API Access Control. **Kemet Tech deliverables:** Role and access model; federation and MFA; privileged access controls; access review and break-glass procedures. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [Oracle API Access Control](https://docs.oracle.com/en-us/iaas/oracle-api-access-control/index.html) ### Network, web & API protection Cybersecurity | Reduce exposure with segmentation, firewall policies, web protection and protected application entry points. **Platforms and tooling:** OCI Network Firewall; OCI Web Application Firewall (WAF); network security groups; security lists; OCI native DDoS protection; OCI WAF bot management; OCI WAF access controls; OCI Network Firewall intrusion detection and prevention. **Kemet Tech deliverables:** Firewall and WAF rules; controlled ingress and egress; traffic logging; validated application protection. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [OCI networking](https://www.oracle.com/cloud/networking/) ### Encryption, keys, secrets & certificates Cybersecurity | Centralize encryption keys, application secrets and certificate lifecycles with controlled access and rotation. **Platforms and tooling:** OCI Vault; OCI Key Management; OCI Secret Management; OCI Certificates; OCI Dedicated Key Management; OCI External Key Management; OCI Vault key rotation. **Kemet Tech deliverables:** Key hierarchy; secrets integration; certificate inventory; rotation and recovery procedures. **Scope note:** Dedicated KMS, External KMS and Vault have distinct key-custody and integration models; selection depends on workload support. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [External Key Management](https://docs.oracle.com/en-us/iaas/Content/KeyManagement/Tasks/external_key_management.htm) | [Dedicated KMS](https://docs.oracle.com/en-us/iaas/Content/KeyManagement/Tasks/dedicated_kms.htm) ### Security posture & compliance engineering Cybersecurity | Assess cloud configuration, prioritize risks and implement guardrails with evidence mapped to agreed controls. **Platforms and tooling:** OCI Cloud Guard; OCI Security Zones; OCI IAM policies; OCI Audit; Cloud Guard detector and responder recipes; OCI Security Advisor; OCI Cloud Guard security assessments. **Kemet Tech deliverables:** Posture assessment; remediation backlog; preventive guardrails; control evidence and exception register. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [Oracle cloud security](https://www.oracle.com/security/cloud-security/) ### Vulnerability & workload security Cybersecurity | Identify vulnerable hosts and container images and integrate remediation into delivery and patch workflows. **Platforms and tooling:** OCI Vulnerability Scanning; OCI Container Registry scanning; OCI OS Management Hub; OCI Cloud Guard; Oracle Linux Ksplice; OCI Shielded Instances; OCI Cloud Guard Instance Security; Oracle Autonomous Linux; Oracle Linux security hardening. **Kemet Tech deliverables:** Scan coverage; prioritized findings; hardened baselines; patch plan; retest evidence. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [Oracle cloud security](https://www.oracle.com/security/cloud-security/) ### Data protection & database security Cybersecurity | Protect sensitive data with discovery, access restrictions, auditing, masking and encryption. **Platforms and tooling:** Oracle Data Safe; Oracle Database Vault; Oracle Audit Vault and Database Firewall; Transparent Data Encryption; Oracle Key Vault; Oracle Data Redaction; Oracle Data Masking and Subsetting; Oracle Data Safe SQL Firewall; Oracle Database SQL Firewall. **Kemet Tech deliverables:** Data risk assessment; access and audit policies; masking configuration; prioritized remediation. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [Oracle database security](https://www.oracle.com/security/database-security/) ### Threat detection, SIEM & response automation Cybersecurity | Connect cloud telemetry to security operations, build detections and automate agreed triage and response actions. **Platforms and tooling:** OCI Cloud Guard; OCI Audit; OCI Logging; OCI Connector Hub; OCI Events; OCI Functions; external SIEM integration; OCI Cloud Guard Threat Detector; OCI Threat Intelligence. **Kemet Tech deliverables:** Log onboarding; detection rules; alert routing; response playbooks; analyst handover and validation. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [OCI Threat Intelligence](https://www.oracle.com/security/cloud-security/threat-intelligence-service/) ### Security assessments & incident readiness Cybersecurity | Review architecture and attack paths, validate defenses and prepare teams for cloud incidents. **Platforms and tooling:** OCI Cloud Guard findings; OCI Vulnerability Scanning; Oracle Data Safe assessments; Network Path Analyzer; OCI Audit. **Kemet Tech deliverables:** Assessment report; authorized test plan; remediation verification; incident tabletop; response and evidence runbooks. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [Oracle cloud security](https://www.oracle.com/security/cloud-security/) ### Hybrid, edge & distributed cloud Infrastructure | Extend cloud operating models to data centers and edge locations with local workload and connectivity requirements. **Platforms and tooling:** Oracle Roving Edge Infrastructure; Oracle Compute Cloud@Customer; Oracle Exadata Cloud@Customer; OCI Dedicated Region; Oracle Alloy. **Kemet Tech deliverables:** Deployment and dependency design; integrated identity and networking; workload deployment; operations handover **Scope note:** Alloy, Dedicated Region and Cloud@Customer depend on Oracle commercial and hardware agreements; delivery scope covers customer implementation responsibilities. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) ### Virtual desktops & secure workspaces Infrastructure | Deliver centrally managed desktops, application sessions and developer workspaces with controlled access. **Platforms and tooling:** OCI Secure Desktops; OCI Compute desktop images; OCI IAM Identity Domains. **Kemet Tech deliverables:** Desktop or application pools; golden images; identity and device policies; user acceptance and support handover **Scope note:** Secure Desktops requires supported regions, shapes, images and desktop licensing. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [Secure Desktops overview](https://docs.oracle.com/en-us/iaas/secure-desktops/overview-secure-desktops.htm) ### HPC, GPU & AI infrastructure Infrastructure | Build accelerated compute and training infrastructure with high-throughput storage, workload scheduling and cost controls. **Platforms and tooling:** OCI HPC Compute; OCI GPU Compute; OCI Supercluster; OCI cluster networking; OCI File Storage with Lustre; OCI Data Science infrastructure. **Kemet Tech deliverables:** Cluster design and deployment; scheduler integration; storage and network tuning; workload benchmarks **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [OCI File Storage with Lustre](https://docs.oracle.com/en-us/iaas/Content/lustre/file-system-create.htm) ### Data lakes, analytics & streaming platforms Infrastructure | Deploy the infrastructure for ingestion, processing, analytics and governed data sharing. **Platforms and tooling:** OCI Big Data Service; OCI Data Flow; OCI Data Integration; OCI Data Catalog; OCI Streaming with Apache Kafka; Oracle GoldenGate; HeatWave Lakehouse; Oracle Analytics Cloud platform. **Kemet Tech deliverables:** Platform architecture; ingestion and processing pipelines; access and catalog configuration; monitoring and handover **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) ### Network visibility & connectivity assurance Infrastructure | Diagnose cloud connectivity, traffic paths and firewall behavior before and after infrastructure changes. **Platforms and tooling:** OCI Network Path Analyzer; OCI Network Visualizer; OCI VCN Flow Logs; OCI VTAP; OCI IP Address Insights; OCI Network Command Center. **Kemet Tech deliverables:** Traffic and route baseline; connectivity tests; flow-log analysis; monitoring dashboard; remediation report **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [OCI networking](https://www.oracle.com/cloud/networking/) ### Identity governance & provider access controls Cybersecurity | Manage identity lifecycles, access reviews and sensitive administrative access across cloud and connected systems. **Platforms and tooling:** Oracle Access Governance; Oracle Identity Governance integration; Oracle Operator Access Control; Oracle API Access Control. **Kemet Tech deliverables:** Joiner/mover/leaver workflows; entitlement review; privileged approval policies; access evidence and handover **Scope note:** Operator Access Control and Oracle API Access Control apply to supported services and approval operations; they are not general-purpose control over every OCI administrator action. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [Oracle Access Governance](https://www.oracle.com/security/cloud-security/access-governance/) | [Operator Access Control overview](https://docs.oracle.com/en/cloud/paas/operator-access-control/exops/overview-of-operator-access-control.html) | [Oracle API Access Control](https://docs.oracle.com/en-us/iaas/oracle-api-access-control/index.html) ### Zero trust access & microsegmentation Cybersecurity | Apply identity-aware access and workload segmentation with explicit communication policies. **Platforms and tooling:** OCI Zero Trust Packet Routing (ZPR); OCI security attributes; OCI network security groups; OCI Bastion; OCI IAM policies. **Kemet Tech deliverables:** Access and segmentation design; deployed policies; permitted-flow validation; staged rollout and rollback plan **Scope note:** ZPR supplements routing, security lists and NSGs for supported OCI traffic. It does not enforce policy on traffic from the internet or on-premises networks. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [Zero Trust Packet Routing](https://docs.oracle.com/en-us/iaas/Content/zero-trust-packet-routing/overview.htm) ### Application & software supply-chain security Cybersecurity | Integrate source, dependency, secret and artifact checks into application delivery. **Platforms and tooling:** OCI DevOps; OCI Container Registry image scanning and signing; OKE admission policies; customer-selected SAST, DAST and dependency scanning. **Kemet Tech deliverables:** Threat model; security gates; signed artifacts and verification; vulnerability triage; remediation handover **Scope note:** Source, dependency and dynamic application testing use customer-selected tools. OCI registry scanning does not replace a complete application-security program. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) ### AI application, model & agent security Cybersecurity | Configure model access, prompt and response screening, data controls and least-privilege agent permissions. **Platforms and tooling:** OCI Generative AI Guardrails; OCI Generative AI private endpoints; OCI IAM; OCI Vault; OCI Audit. **Kemet Tech deliverables:** AI threat model; configured guardrails; tool-access boundaries; adversarial evaluation; monitoring and handover **Scope note:** Guardrails must be configured and tested. Model, endpoint, mode and region support determine coverage; screening is not a guarantee of blocking every attack. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [Guardrails for OCI Generative AI](https://docs.oracle.com/en-us/iaas/Content/generative-ai/guardrails.htm) ### Threat intelligence & attack-surface management Cybersecurity | Connect threat context and external exposure discovery to security investigations and remediation workflows. **Platforms and tooling:** OCI Threat Intelligence; OCI Cloud Guard Threat Detector; OCI Logging; customer-selected external attack-surface discovery. **Kemet Tech deliverables:** Indicator feeds and enrichment; exposed-asset inventory; risk prioritization; detection integrations; analyst handover **Scope note:** OCI provides threat context and detections; external attack-surface discovery uses a separately selected tool. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [OCI Threat Intelligence](https://www.oracle.com/security/cloud-security/threat-intelligence-service/) ### Endpoint, email & SaaS security integration Cybersecurity | Deploy and integrate the endpoint, email and SaaS controls selected for the customer environment. **Platforms and tooling:** Customer-selected EDR and email security; OCI IAM federation; OCI Connector Hub; external SIEM integration. **Kemet Tech deliverables:** Product onboarding; protection policies; identity and SIEM integration; alert validation; operational handover **Scope note:** Integration offering using separately licensed third-party products; OCI does not supply a native equivalent for every EDR, email-security or CASB capability. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [Oracle cloud security](https://www.oracle.com/security/cloud-security/) ### Sovereign cloud & regulated workload foundations Infrastructure | Design location, administrative access and data-protection controls around agreed residency and regulatory requirements. **Platforms and tooling:** Oracle EU Sovereign Cloud; OCI government regions; OCI Dedicated Region; Oracle Operator Access Control; OCI External Key Management. **Kemet Tech deliverables:** Requirements and service eligibility map; residency design; access and key controls; deployment and evidence handover **Scope note:** Eligibility, country/region, service availability and contractual requirements are confirmed before design. Deployment of cloud controls does not itself confer regulatory certification. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [Operator Access Control overview](https://docs.oracle.com/en/cloud/paas/operator-access-control/exops/overview-of-operator-access-control.html) ### Resilience engineering & recovery validation Infrastructure | Test application failure scenarios, restore paths and recovery objectives through controlled exercises. **Platforms and tooling:** OCI Full Stack Disaster Recovery drills; Oracle Data Guard; OCI Monitoring; backup restore testing; customer-approved fault simulations. **Kemet Tech deliverables:** Failure-scenario plan; approved test execution; recovery measurements; improvement backlog; repeatable runbook **Scope note:** Chaos and fault simulation are customer-approved engineering exercises, not an OCI managed chaos-testing product. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [Full Stack Disaster Recovery](https://www.oracle.com/cloud/full-stack-disaster-recovery/) ### Confidential computing & workload isolation Cybersecurity | Protect sensitive processing using supported isolation, attestation and confidential-computing capabilities. **Platforms and tooling:** OCI Confidential Computing; OCI Shielded Instances; OCI dedicated hosts; OCI bare metal isolation. **Kemet Tech deliverables:** Workload suitability assessment; isolated execution deployment; attestation and key-release integration; verification evidence **Scope note:** Supported shapes have different isolation and attestation capabilities. Dedicated tenancy and Shielded Instances alone do not provide all confidential-computing guarantees. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [OCI Confidential Computing](https://docs.oracle.com/en-us/iaas/Content/Compute/References/confidential_compute.htm) ### IoT, OT & edge workload security Cybersecurity | Connect device and operational-technology environments to cloud platforms with identity, segmentation and telemetry controls. **Platforms and tooling:** OCI IoT Platform; Oracle Roving Edge Infrastructure; OCI Network Firewall; OCI IAM; customer-selected OT security integration. **Kemet Tech deliverables:** Device identity design; secure ingestion; segmented connectivity; telemetry and alerts; operational handover **Scope note:** OCI connectivity and IoT platform controls are integrated with specialist OT tools where needed; industrial protocol coverage is confirmed in discovery. **Official references:** [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) | [OCI IoT Platform overview](https://docs.oracle.com/en-us/iaas/Content/internet-of-things/overview.htm) ### AI strategy, readiness & solution architecture Artificial intelligence | Assess use cases, data readiness, platform options, costs and delivery requirements. **Platforms and tooling:** OCI Generative AI; OCI Data Science; Oracle AI Data Platform. **Kemet Tech deliverables:** Use-case priorities; data and access assessment; target architecture; implementation roadmap **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Oracle AI services](https://www.oracle.com/artificial-intelligence/ai-services/) ### Generative AI applications & model integration Artificial intelligence | Build applications using foundation models for text, code and multimodal tasks. **Platforms and tooling:** OCI Generative AI; OCI Generative AI model endpoints; dedicated AI clusters. **Kemet Tech deliverables:** Model selection and integration; prompt workflows; application APIs; quality and cost validation **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [OCI Generative AI documentation](https://docs.oracle.com/en-us/iaas/Content/generative-ai/) | [OCI AI Agent Platform architecture](https://docs.oracle.com/en/solutions/deploy-agentic-ai-agent-platform/index.html) ### AI agents, orchestration & enterprise automation Artificial intelligence | Build agents that retrieve information and use approved business tools with controlled permissions. **Platforms and tooling:** OCI AI Agent Platform (Generative AI Agents); Oracle Digital Assistant; Oracle Integration. **Kemet Tech deliverables:** Agent workflows; tool and API integrations; approval controls; agent testing and handover **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [OCI Generative AI documentation](https://docs.oracle.com/en-us/iaas/Content/generative-ai/) | [OCI AI Agent Platform architecture](https://docs.oracle.com/en/solutions/deploy-agentic-ai-agent-platform/index.html) ### RAG, enterprise search & vector retrieval Artificial intelligence | Connect AI applications to governed business content through retrieval and search. **Platforms and tooling:** Oracle AI Vector Search; OCI AI Agent Platform knowledge bases; OCI Search with OpenSearch. **Kemet Tech deliverables:** Content ingestion; embedding and vector indexes; access-aware retrieval; retrieval evaluation **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [OCI Generative AI documentation](https://docs.oracle.com/en-us/iaas/Content/generative-ai/) | [OCI AI Agent Platform architecture](https://docs.oracle.com/en/solutions/deploy-agentic-ai-agent-platform/index.html) ### Custom ML, AutoML & model customization Artificial intelligence | Develop and tune models for business datasets and agreed prediction or generation tasks. **Platforms and tooling:** OCI Data Science; Oracle Machine Learning; OCI Generative AI fine-tuning. **Kemet Tech deliverables:** Training datasets; training and tuning workflows; model evaluation; deployment artifacts **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [OCI Data Science capabilities](https://www.oracle.com/artificial-intelligence/data-science/features/) | [OCI and database AI functionality reference](https://docs.oracle.com/en-us/iaas/Content/General/oci-db-ai-functionality-reference.htm) ### MLOps, model serving & lifecycle management Artificial intelligence | Operationalize model training, deployment, monitoring and controlled updates. **Platforms and tooling:** OCI Data Science Pipelines; OCI Data Science Jobs; model catalog; model deployments; ML applications. **Kemet Tech deliverables:** Model registry and pipelines; serving endpoints; performance monitoring; rollback and retraining procedures **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [OCI Data Science capabilities](https://www.oracle.com/artificial-intelligence/data-science/features/) | [OCI and database AI functionality reference](https://docs.oracle.com/en-us/iaas/Content/General/oci-db-ai-functionality-reference.htm) ### AI data preparation, labeling & feature engineering Artificial intelligence | Prepare governed training and retrieval data with repeatable processing and quality checks. **Platforms and tooling:** OCI Data Science; Oracle AI Data Platform; OCI Data Integration; custom annotation workflow. **Kemet Tech deliverables:** Data preparation pipelines; labeling workflow; feature engineering; quality and lineage controls **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [OCI Data Science capabilities](https://www.oracle.com/artificial-intelligence/data-science/features/) | [OCI and database AI functionality reference](https://docs.oracle.com/en-us/iaas/Content/General/oci-db-ai-functionality-reference.htm) ### Document AI & intelligent data extraction Artificial intelligence | Extract, classify and validate information from business documents. **Platforms and tooling:** OCI Document Understanding; OCI Generative AI document workflows. **Kemet Tech deliverables:** Document ingestion; extraction schemas; validation and review workflow; business-system integration **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Oracle AI services](https://www.oracle.com/artificial-intelligence/ai-services/) ### Speech AI, transcription & voice applications Artificial intelligence | Build speech-enabled applications with transcription and supported voice-generation capabilities. **Platforms and tooling:** OCI Speech; Oracle Digital Assistant voice integration; customer-selected speech synthesis integration. **Kemet Tech deliverables:** Audio ingestion; speech API integration; language and accuracy testing; voice application handover **Scope note:** OCI Speech covers supported transcription features. Voice output and contact-center capabilities may use Digital Assistant or separately selected integrations. **Official references:** [Oracle AI services](https://www.oracle.com/artificial-intelligence/ai-services/) ### Language AI, translation & text analytics Artificial intelligence | Analyze text, extract entities and integrate multilingual application workflows. **Platforms and tooling:** OCI Language; OCI Generative AI multilingual workflows. **Kemet Tech deliverables:** Language processing APIs; classification and extraction; translation workflow; quality evaluation **Scope note:** Translation is a custom generative AI workflow or selected integration; OCI Language is not presented as a dedicated translation service. **Official references:** [Oracle AI services](https://www.oracle.com/artificial-intelligence/ai-services/) ### Computer vision & video understanding Artificial intelligence | Build image and video analysis workflows with supported models and human review where required. **Platforms and tooling:** OCI Vision; OCI Data Science custom vision models. **Kemet Tech deliverables:** Image or video ingestion; model integration; task-specific evaluation; application integration **Scope note:** Model, region, access and licensing availability are confirmed during discovery. **Official references:** [Oracle AI services](https://www.oracle.com/artificial-intelligence/ai-services/) ### Multimodal content & media generation Artificial intelligence | Integrate supported image, audio and video generation into business applications. **Platforms and tooling:** Customer-selected multimodal models on OCI GPU infrastructure; OCI Generative AI supported models. **Kemet Tech deliverables:** Model and rights assessment; generation workflow; review controls; application integration **Scope note:** Custom model engineering or selected third-party integration on OCI; no equivalent standalone Oracle managed service is implied. **Official references:** [Oracle AI services](https://www.oracle.com/artificial-intelligence/ai-services/) ### Forecasting, anomaly detection & predictive analytics Artificial intelligence | Develop models for planning, risk indicators and operational analysis. **Platforms and tooling:** Oracle Machine Learning; OCI Data Science; Oracle Analytics Cloud. **Kemet Tech deliverables:** Prediction objective and baseline; model pipeline; backtesting; decision-support integration **Scope note:** Custom model engineering or selected third-party integration on OCI; no equivalent standalone Oracle managed service is implied. **Official references:** [OCI Data Science capabilities](https://www.oracle.com/artificial-intelligence/data-science/features/) | [OCI and database AI functionality reference](https://docs.oracle.com/en-us/iaas/Content/General/oci-db-ai-functionality-reference.htm) ### Recommendations, ranking & personalization Artificial intelligence | Build recommendation and ranking workflows around customer-approved data and objectives. **Platforms and tooling:** Oracle Machine Learning; OCI Data Science recommendation models. **Kemet Tech deliverables:** Recommendation design; training or retrieval pipeline; relevance evaluation; application integration **Scope note:** Custom model engineering or selected third-party integration on OCI; no equivalent standalone Oracle managed service is implied. **Official references:** [OCI Data Science capabilities](https://www.oracle.com/artificial-intelligence/data-science/features/) | [OCI and database AI functionality reference](https://docs.oracle.com/en-us/iaas/Content/General/oci-db-ai-functionality-reference.htm) ### Conversational AI & customer-service integration Artificial intelligence | Implement virtual assistants and connect conversations to knowledge, workflows and human teams. **Platforms and tooling:** Oracle Digital Assistant; OCI AI Agent Platform; customer-selected contact-center integration. **Kemet Tech deliverables:** Conversation design; knowledge and tool integration; handoff workflow; conversation testing **Scope note:** Adjacent SaaS, developer tools and contact-center products require separate subscriptions and eligibility. Integration scope is agreed per customer. **Official references:** [Oracle AI services](https://www.oracle.com/artificial-intelligence/ai-services/) ### Enterprise copilots & business AI integration Artificial intelligence | Configure enterprise AI assistants and connect them to approved business content and applications. **Platforms and tooling:** Oracle AI Agent Studio for Fusion Applications integration; Oracle Analytics Cloud AI; Oracle AI Data Platform. **Kemet Tech deliverables:** Readiness and access assessment; connectors and policies; workflow configuration; user enablement **Scope note:** Adjacent SaaS, developer tools and contact-center products require separate subscriptions and eligibility. Integration scope is agreed per customer. **Official references:** [Oracle AI services](https://www.oracle.com/artificial-intelligence/ai-services/) | [Oracle AI Agent Studio for Fusion Applications](https://docs.oracle.com/en/cloud/saas/fusion-ai/26b/aiaas/overview.html) ### AI-assisted engineering & operations Artificial intelligence | Integrate AI assistance into development, modernization and operational workflows. **Platforms and tooling:** Oracle Code Assist integration; OCI Generative AI development workflows. **Kemet Tech deliverables:** Tool onboarding; repository and access configuration; workflow evaluation; operational controls **Scope note:** Adjacent SaaS, developer tools and contact-center products require separate subscriptions and eligibility. Integration scope is agreed per customer. **Official references:** [Oracle AI services](https://www.oracle.com/artificial-intelligence/ai-services/) | [Oracle Code Assist developer overview](https://blogs.oracle.com/ai-and-datascience/ai-application-development-and-oracle-part-1) ### AI evaluation, governance & responsible deployment Artificial intelligence | Establish evaluation, monitoring, data controls and release criteria for AI solutions. **Platforms and tooling:** OCI Generative AI Guardrails; OCI Data Science evaluation workflows; OCI IAM; OCI Audit. **Kemet Tech deliverables:** Evaluation datasets; quality and safety checks; usage and cost monitoring; governance documentation **Scope note:** Controls and evaluations reduce identified risks; they do not guarantee factual accuracy, regulatory certification or prevention of every attack. **Official references:** [Oracle AI services](https://www.oracle.com/artificial-intelligence/ai-services/) ## Oracle multicloud Oracle AI Database@AWS, Oracle AI Database@Azure and Oracle AI Database@Google Cloud: deployment planning, private connectivity, identity integration and operational handover, subject to region, edition and subscription requirements. Product reference: https://www.oracle.com/cloud/multicloud/ ## Research and lifecycle notes AWS Audit Manager is restricted for new accounts from April 30, 2026; use AWS Config conformance packs for new compliance implementations and assess existing deployments separately. Reference: https://docs.aws.amazon.com/audit-manager/latest/userguide/audit-manager-availability-change.html AWS Migration Hub stopped accepting new customers November 7, 2025. New migration scope uses supported migration services and AWS Transform as applicable. Reference: https://docs.aws.amazon.com/migrationhub/latest/ug/migrationhub-availability-change.html AWS service categories: https://docs.aws.amazon.com/whitepapers/latest/aws-overview/security-services.html Google Cloud security products: https://cloud.google.com/security/products/security-and-identity Oracle references: - [Oracle Cloud Infrastructure (OCI) product inventory](https://www.oracle.com/cloud/) - [Oracle cloud security](https://www.oracle.com/security/cloud-security/) - [OCI networking](https://www.oracle.com/cloud/networking/) - [OCI storage](https://www.oracle.com/cloud/storage/) - [Oracle observability and management](https://www.oracle.com/manageability/) - [Fleet Application Management](https://www.oracle.com/cloud/fleet-application-management/) - [Oracle Access Governance](https://www.oracle.com/security/cloud-security/access-governance/) - [OCI Threat Intelligence](https://www.oracle.com/security/cloud-security/threat-intelligence-service/) - [Zero Trust Packet Routing](https://docs.oracle.com/en-us/iaas/Content/zero-trust-packet-routing/overview.htm) - [Secure Desktops overview](https://docs.oracle.com/en-us/iaas/secure-desktops/overview-secure-desktops.htm) - [Dedicated KMS](https://docs.oracle.com/en-us/iaas/Content/KeyManagement/Tasks/dedicated_kms.htm) - [External Key Management](https://docs.oracle.com/en-us/iaas/Content/KeyManagement/Tasks/external_key_management.htm) - [Operator Access Control overview](https://docs.oracle.com/en/cloud/paas/operator-access-control/exops/overview-of-operator-access-control.html) - [Oracle API Access Control](https://docs.oracle.com/en-us/iaas/oracle-api-access-control/index.html) - [Guardrails for OCI Generative AI](https://docs.oracle.com/en-us/iaas/Content/generative-ai/guardrails.htm) - [OCI File Storage with Lustre](https://docs.oracle.com/en-us/iaas/Content/lustre/file-system-create.htm) - [OCI Confidential Computing](https://docs.oracle.com/en-us/iaas/Content/Compute/References/confidential_compute.htm) - [OCI IoT Platform overview](https://docs.oracle.com/en-us/iaas/Content/internet-of-things/overview.htm) - [OCI Service Mesh EOL notice](https://docs.oracle.com/en-us/iaas/Content/service-mesh/mesh-move.htm) - [Oracle database security](https://www.oracle.com/security/database-security/) - [Full Stack Disaster Recovery](https://www.oracle.com/cloud/full-stack-disaster-recovery/) - [Oracle multicloud](https://www.oracle.com/cloud/multicloud/) - [Oracle AI services](https://www.oracle.com/artificial-intelligence/ai-services/) - [OCI and database AI functionality reference](https://docs.oracle.com/en-us/iaas/Content/General/oci-db-ai-functionality-reference.htm) - [OCI Data Science capabilities](https://www.oracle.com/artificial-intelligence/data-science/features/) - [OCI Generative AI documentation](https://docs.oracle.com/en-us/iaas/Content/generative-ai/) - [OCI AI Agent Platform architecture](https://docs.oracle.com/en/solutions/deploy-agentic-ai-agent-platform/index.html) - [Oracle AI Agent Studio for Fusion Applications](https://docs.oracle.com/en/cloud/saas/fusion-ai/26b/aiaas/overview.html) - [Oracle Code Assist developer overview](https://blogs.oracle.com/ai-and-datascience/ai-application-development-and-oracle-part-1)