Choose the right cloud and region for RISE with SAP, and connect it to everything else.
Under RISE with SAP, SAP runs SAP Cloud ERP Private for you on a hyperscaler you choose. We help you pick the provider and region that suit users in Sri Lanka and India, make clear what SAP manages and what you still own, and connect the new landscape to your networks, identity and applications.
Why the cloud and region choice matters
RISE with SAP takes away the work of running SAP infrastructure, but it does not make every decision for you. SAP's private cloud runs on Microsoft Azure, AWS, Google Cloud or SAP's own data centres, and the choice shapes latency, data residency, integration with your other systems and where your own cloud spend goes. There is no AWS, Azure or Google Cloud region in Sri Lanka, so Sri Lankan companies serve users from India or Singapore. And under the RISE agreement, connecting your network to the SAP environment is your responsibility, not SAP's.
Latency for users
Finance, warehouse and shop floor users feel every round trip. The region and the network path from Colombo or your Indian sites decide how responsive SAP feels.
Data residency and law
Sri Lanka's Personal Data Protection Act No. 9 of 2022 brings its core obligations into force on 1 January 2027, including rules on cross-border processing. Region choice needs to fit your legal advice.
Your other workloads
Analytics, integration, AI, Databricks, Salesforce and HR systems work best close to SAP. Choosing the hyperscaler you already use, or plan to use, keeps data paths short.
Clear responsibilities
SAP manages the SAP environment in its own subscription or account. Your network, identity, interfaces, security monitoring and the systems around SAP stay with you.
What we do
We help you make the RISE infrastructure decisions with evidence, then build what sits around SAP.
Hyperscaler comparison
We compare AWS, Microsoft Azure and Google Cloud against your existing contracts, skills, integration needs and roadmap. You get a recommendation you can defend to the board.
Region selection
We check which regions SAP offers for your RISE scope and measure latency from your offices to candidate regions in India and Singapore. We also consider disaster recovery pairing.
Responsibility map
We set out, task by task, what SAP Enterprise Cloud Services does under your contract, what is optional, and what stays with you or with us. Nothing important falls between the gaps.
Network connectivity
We design and build the connection from your offices and cloud accounts to the SAP managed network, using peering, VPN or private circuits. Address ranges, routing, firewalls and DNS are planned up front.
Identity and access
We connect SAP Cloud ERP Private and SAP BTP to your identity provider for single sign-on and keep user access under your control.
Integration and data
We connect SAP to your other applications, data platforms and AI services through SAP Integration Suite and native cloud services in your own subscription.
How it works
- 1
Understand needs
We gather user locations, compliance needs, existing cloud contracts and integration lists. This sets the criteria for the decision.
1 to 2 weeks - 2
Compare and test
We compare providers and regions, and run latency tests from your sites. You get a written recommendation with trade-offs.
1 to 2 weeks - 3
Agree responsibilities
We review the RISE scope with you and SAP and write a responsibility map for operations, security and integration.
1 week - 4
Build connectivity
We build your side of the network, identity and security, then work with SAP to complete peering or private connectivity and test it.
3 to 6 weeks - 5
Connect the estate
We move interfaces, data flows and monitoring onto the new landscape and support you through go-live.
Alongside the RISE project
RISE with SAP on each cloud
Regions near Sri Lanka and the native services you use on your side of the connection; SAP confirms which regions are offered for your scope.
| Need | AWS | Microsoft Azure | Google Cloud |
|---|---|---|---|
| Regions nearest Sri Lanka | Asia Pacific (Mumbai), Asia Pacific (Hyderabad), Asia Pacific (Singapore) | Central India (Pune), South India (Chennai), West India (Mumbai), India South Central (Hyderabad), Southeast Asia (Singapore) | asia-south1 (Mumbai), asia-south2 (Delhi), asia-southeast1 (Singapore) |
| Link your cloud to SAP's network | VPC peering or AWS Transit Gateway | Virtual network peering | VPC Network Peering through a transit VPC |
| Private line from your offices | AWS Direct Connect or AWS Site-to-Site VPN | Azure ExpressRoute or Azure VPN Gateway | Cloud Interconnect or HA VPN |
| Identity for users | AWS IAM Identity Center | Microsoft Entra ID | Cloud Identity |
| Data and analytics next to SAP | Amazon S3, Amazon Redshift | Microsoft Fabric, Azure Data Factory | BigQuery |
| Monitoring of your side | Amazon CloudWatch | Azure Monitor | Cloud Monitoring |
What SAP manages and what you still own
RISE with SAP bundles SAP Cloud ERP Private, the cloud infrastructure and technical managed services in one contract with SAP. SAP builds and runs the SAP environment in its own hyperscaler account or subscription, which only SAP can see and manage, so you do not manage the virtual machines, operating system or database. You keep full functional control of SAP, including access through SAP GUI and your own custom code. You also own everything outside SAP's boundary: the network connection into it, your cloud accounts, identity, interfaces, application management and the tasks your contract lists as excluded.
- SAP's private cloud can run on Microsoft Azure, AWS, Google Cloud or SAP data centres, with other providers available in some markets.
- Connecting your network to the RISE environment is the customer's responsibility under the RISE agreement.
- Support for resources inside SAP's subscription goes through SAP; your own cloud provider support covers only your own accounts.
- For the largest ECC estates, SAP also offers a time-bound SAP ERP, private edition, transition option under RISE, with conditions such as a move to SAP HANA before the end of 2030.
© 2026 Mawkish Technologies. This guide, its diagrams and illustrations are protected by copyright. You’re welcome to learn from it and to quote it with credit and a link. Reproducing it, by hand or through AI, and publishing it as your own is not allowed. Read our copyright notice
Deliverables
- Hyperscaler and region recommendation with latency results
- RISE responsibility map for SAP, customer and partner
- Network design with address plan, routing, firewall and DNS
- Built and tested connectivity to the SAP managed environment
- Single sign-on and identity integration
- Integration and monitoring plan for the wider estate
Frequently asked
Which clouds does RISE with SAP run on?
SAP's private cloud offering can run on Microsoft Azure, AWS, Google Cloud or SAP's own data centres, and Alibaba Cloud is also listed by SAP. In some markets additional providers are available, such as STACKIT in Europe. For customers in Sri Lanka and India, AWS, Azure and Google Cloud are the usual choices.
Is there a cloud region in Sri Lanka?
No. AWS, Microsoft Azure and Google Cloud do not have a region in Sri Lanka today. Sri Lankan customers usually use regions in India, such as Mumbai, Pune, Chennai, Hyderabad or Delhi, or Singapore. SAP confirms which of these it offers for your RISE scope.
Do we still need cloud skills if SAP runs the infrastructure?
Yes, but for different work. You own the connection to SAP's network, your identity provider, interfaces, security monitoring and the applications around SAP. Those run in your own cloud accounts, and we can build and run them for you.
Does the hyperscaler choice change what SAP delivers?
RISE with SAP is the same SAP offering whichever certified infrastructure provider you choose. What changes is how easily SAP connects to your other workloads, data platforms and existing cloud contracts, and which regions are available.
Can we change our mind later?
Moving a RISE landscape to another provider or region is a significant project that has to be agreed with SAP. That is why we recommend testing the decision properly before the contract is signed.
Often paired with this
Plan your move with people who know SAP.
One working session with our cloud and SAP architects. You leave with the options, the risks and a first plan.
- Your landscape reviewed
- The right cloud and region
- A first roadmap
Sources
- SAP Learning: Describing RISE with SAP
- AWS: Roles and responsibility for connectivity to RISE
- Microsoft Learn: Integrating Azure with SAP RISE managed workloads
- Google Cloud: Network connectivity to RISE with SAP
- Microsoft: India South Central region in Hyderabad goes live
- AWS: Second infrastructure region in India (Hyderabad)
- SAP: List of data centres for SAP cloud services
- SAP News: SAP ERP, private edition, transition option
- Daily FT: Data protection compliance regime from 1 January 2027
- Schwarz Digits: RISE with SAP on STACKIT
We call our approach to RISE with SAP: Cloud & Region Choice the Zelcombe Pledge: advice that stays on your side of the table.
AWS, Microsoft Azure, Google Cloud and SAP are trademarks of their respective owners.