A migration that was meant to take a weekend took the business offline for two days. The cutover ran long, the data would not reconcile, and there was no agreed point at which to abort and roll back. The cloud was not the problem; the migration plan was.
Downtime during cloud migration is rarely caused by the cloud platform. It is caused by an underscoped cutover, an untested rollback, and a data-sync window nobody measured in advance.
This guide debriefs where migrations cause outages and sets out the techniques that prevent them: blue-green and canary releases, tiered database cutover, a pre-planned rollback, and the Azure and AWS tooling that supports each. It also puts a real GBP figure on what downtime costs, because that number is what justifies doing the migration properly.
What downtime during cloud migration actually costs
Before the techniques, the stakes, because the cost of downtime is what funds doing it right. Industry research from EMA puts the average cost of unplanned IT downtime at around 14,000 US dollars a minute, rising above 23,000 for large enterprises, and ITIC's 2024 survey found 41 percent of enterprises lose between 1 million and 5 million US dollars for a single hour.
For a UK business the framing is what matters. A mid-sized firm trading online can lose tens of thousands of pounds an hour in revenue, staff productivity, and SLA penalties, and a regulated firm adds compliance exposure on top. Even a small business with 20 staff unable to work is losing real money for every hour systems are down.
Set against the public cloud market, which Gartner valued at around 723 billion US dollars in 2025, migration is not optional for most firms, so the goal is to do it without joining the downtime statistics. The strategies below are how.
Start with discovery: the dependency nobody mapped is what takes you down
Most downtime during cloud migration traces back to a dependency nobody knew existed. A reporting job that calls a database directly, a hardcoded address, an integration that has run quietly for years. You cannot keep online what you have not mapped.
So the work starts with discovery, not the move itself. Discovery tooling inventories your estate and surfaces the links between systems before you touch them. The result is a dependency map that tells you what breaks when a given system moves.
This is the part most teams underestimate. They worry about security and cost before a migration, then get caught by integration gaps and missing skills once it starts. In our experience the outages come from the connections nobody mapped, not the cloud platform.
Discovery also lets you rank workloads by business impact. The system that takes orders needs a near-zero-downtime cutover, while an internal archive can sit offline for an afternoon. Sorting workloads this way puts the careful engineering only where downtime actually costs you.
Once you know what depends on what, and which systems must stay online, you can decide how each one moves.
Choose the right migration approach: the 6 Rs
Not every system should move the same way, and the approach decides the downtime profile before any technique is applied. The 6 Rs framework, used by AWS and Azure practitioners, sorts each workload.
- Rehost lifts and shifts a system unchanged, the fastest move with a short cutover. Replatform makes minor optimisations during the move.
- Repurchase swaps to a SaaS product, removing the system entirely. Refactor rebuilds the application cloud-native, which carries the most migration work and the most downtime risk.
- Retire decommissions a system you no longer need, with zero migration downtime, and retain leaves a system where it is for now. The downtime lens is the useful one: retire and retain cost nothing to migrate, rehost is quick, and refactor needs the most careful zero-downtime engineering. Sorting workloads by R before you start is what keeps the risky migrations to the few that genuinely need it.
Big bang, phased, or parallel run: choose the cutover shape first
Before the technique comes the shape of the migration, and it sets your downtime ceiling. A big-bang cutover switches everything at once on a planned date. A phased cutover moves workloads in waves, so a problem hits one group, not the whole business.
A parallel run is the third option. You run the old and new systems side by side for a period, sending real work to both and comparing results before you commit. It costs more to operate two systems at once, but for a high-risk move it removes the single moment of truth a big-bang switch depends on.
Whichever shape you choose, schedule the cutover for your lowest-traffic window, never the working day. Big bang suits systems that duplicate cleanly and can be checked in advance. Phased and parallel suit high-traffic or high-risk systems where being wrong all at once is not an option.
One planning choice shapes every future move too. The more you build around a single provider's proprietary services, the harder and riskier the next migration becomes. Favour portable, standards-based components where you can, so changing platform later is a decision, not another outage.
Blue-green and canary releases are how you deliver these shapes in practice, starting with the cleanest switch of all.
Blue-green deployment: the headline zero-downtime technique
Blue-green is the technique most associated with zero-downtime migration, and for good reason. You run two identical environments: blue, the current live system, and green, the new cloud one, fully built and tested in parallel.
When green is verified, you switch traffic from blue to green in one move, usually at the load balancer, so users experience no interruption. If anything goes wrong, you switch straight back to blue, which is still running untouched. The cost is running two environments at once for the cutover period, but for any system where downtime is expensive, that overlap is cheap insurance.
Blue-green is the default for systems that can be duplicated cleanly, and it pairs with the data-sync strategy below to handle the one part that cannot simply be duplicated: the data.
Canary releases: migrate a slice before everyone
Where blue-green switches everyone at once, a canary release moves a small slice of traffic first, typically 5 to 10 percent, and watches it before ramping up. It is the safer choice when you cannot fully predict how the new environment behaves under real load.
You route a small percentage of users to the cloud environment, monitor error rates, latency, and business metrics such as completed orders, and increase the share only as each step proves stable. If the canary group hits problems, you have exposed a fraction of users, not all of them, and you roll that slice back.
Canary suits high-traffic consumer systems where a hidden issue under load would be expensive to discover all at once. It costs more in orchestration than a single cutover, but it converts a big-bang risk into a controlled ramp.
The data cutover: where the real downtime hides
In most migrations the only genuine downtime is the final data cutover, not the whole project, so this is where the effort belongs. Moving the application is easy; moving live, changing data without losing any is the hard part.
The strategies tier by how short a cutover window they achieve. A simple offline copy takes the system down while you move the data, acceptable only for small, low-criticality systems.
A master-with-read-replica approach keeps the old system live while replicating to the cloud, then promotes the replica. The shortest-downtime option is change data capture or bi-directional replication, which keeps both systems in sync continuously so the final switch takes seconds, at the cost of conflict-resolution complexity if both sides accept writes.
The practical goal is to shrink the cutover from hours to seconds by syncing continuously before the switch. Measure that window in a rehearsal, because an unmeasured data cutover is the single most common source of a migration overrun.
Pre-migrate what does not change, sync only what does
The fastest cloud migration cutover moves as little as possible at the moment of the switch. Most of your data does not change during the migration window, so there is no reason to move it then. Copy the static data across in advance and leave only the live, changing records for the cutover.
This is the static-versus-dynamic split, and it is the lever that turns an hours-long cutover into a minutes-long one. User accounts, historical records, and large attachments are static, so you migrate them days before. Only the delta, the records that changed since, syncs at the switch.
A read-only window is the other practical tactic. You set the source system to read-only for the final cutover, so users can still see their data while writes are frozen and the last delta moves. They lose the ability to change things for minutes, not access to the system for hours.
Pre-migrating the bulk and freezing writes briefly shrinks the risk, but you still need a plan for the moment something goes wrong.
Settle these questions before you touch production
Every smooth cloud migration answers a short list of questions before the cutover, not during it. Get them wrong on the night and a recoverable problem turns into an outage.
- Reversibility: at what point can you still roll back, and when does rolling back become as disruptive as carrying on?
- Downtime tolerance: how much downtime can each dataset take, in minutes, agreed with the business?
- Sign-off: who confirms the data reconciles and the new system is healthy enough to go live?
- Loss of function: what works on the old system that will not work on day one of the new one?
- Ownership: who makes the go or abort call, and how do they reach everyone at once?
Answer these and the rollback plan almost writes itself, because you have already agreed when to use it.
Rollback as a pre-planned decision, not a safety net
Most teams treat rollback as a vague fallback, and that is why it fails when needed. A migration that minimises downtime defines rollback as a time-boxed decision before the cutover begins.
Agree three things in advance: the trigger threshold that means abort, such as error rates above a set level or the cutover running past a set time; the point of no return, after which rolling back is itself disruptive; and the named person who owns the abort call. Write the rollback steps as a runbook, not an intention, and rehearse them.
With blue-green, rollback is simply switching back to the untouched blue environment, which is why the technique is so safe. The discipline is deciding, before you start, exactly when you would use it.
Rehearse the migration before the real one
The migrations that go wrong are almost always the ones run live for the first time. A dress rehearsal in a staging environment, using a copy of real data, surfaces the problems while they are cheap to fix.
The rehearsal validates three things: that the cutover steps work in order, that the data reconciles between old and new, and that the rollback actually returns you to a working state. It also produces the one number that matters most, the real data-sync cutover window, which tells you whether your maintenance slot is long enough. A migration plan that has never been rehearsed is a hypothesis, and running it live is testing in production.
The Azure and AWS tooling that supports a clean migration
The cloud platforms provide tools for each stage, and naming them turns a plan into a process. For discovery and assessment, Azure Migrate and AWS Application Discovery Service map your estate and dependencies before you move anything.
For the move itself, AWS Migration Hub coordinates the migration, and both Azure Database Migration Service and AWS Database Migration Service handle the database cutover with replication support that shortens the downtime window. For verification and the live switch, monitoring tools such as Azure Monitor, Amazon CloudWatch, Datadog, or New Relic watch error rates and latency so you can prove the new environment is healthy before and after cutover. As a Microsoft Partner, our experience is that the discovery phase, run properly with these tools, prevents more downtime than any single cutover technique, because the outages come from the dependencies nobody mapped.
The human cutover: change management and comms
Downtime is not only technical. It is also users unable to work because nobody told them the URL changed, the support desk overwhelmed because no one warned them of the switch, and staff locked out because access was not migrated.
A migration that minimises real disruption plans the human side as carefully as the technical one. Communicate the change window to users in advance, brief the support desk so they can field the questions, freeze non-essential changes during the cutover, and confirm access and training for the new environment before the switch, not after. The smoothest technical cutover still causes lost productivity if the people using the system were not ready.
After the cutover: optimise and decommission
The migration is not finished at the switch. The post-cutover phase is where you confirm stability, optimise cost, and remove the old system, and skipping it leaves you paying for two environments and carrying unresolved risk.
Monitor the new environment closely for the first days, right-size the infrastructure now that you can see real usage, and decommission the legacy system only once you are confident the cloud one is stable and the data is fully reconciled. A blameless post-mortem after any migration, smooth or not, captures what to do better next time. This phase is also where the cloud cost savings that justified the migration actually start to land.
How to run a migration that stays online
Minimising downtime during cloud migration comes down to discipline, not luck. Sort workloads with the 6 Rs, use blue-green or canary to switch without interrupting users, shrink the data cutover to seconds with continuous sync, pre-plan a time-boxed rollback, and rehearse the whole thing before you run it live.
Add the human cutover and a proper post-migration phase, and the migration that was going to take the business offline for two days takes it offline for minutes, or not at all. If you want a partner to plan and run a low-downtime migration, our IT infrastructure team handles cloud migrations for UK businesses across Azure and AWS, and our Microsoft services cover Azure-specific delivery.
Frequently Asked Questions
How do you minimise downtime during a cloud migration?
Sort workloads with the 6 Rs, use blue-green deployment or canary releases to switch traffic without interrupting users, keep data in continuous sync so the final cutover takes seconds, pre-plan a time-boxed rollback, and rehearse the full migration on a staging copy before running it live. Most real downtime is the data cutover, so that is where the effort belongs.
What is blue-green deployment in cloud migration?
Blue-green runs two identical environments, the current live one and the new cloud one, fully built and tested in parallel. When the new environment is verified, you switch all traffic to it in one move, and if anything goes wrong you switch straight back to the untouched original. It is the headline zero-downtime technique for systems that can be cleanly duplicated.
How much does cloud migration downtime cost?
Industry research puts average unplanned IT downtime at around 14,000 US dollars a minute, and 41 percent of enterprises lose 1 million to 5 million US dollars per hour. For a UK mid-sized firm trading online, that translates to tens of thousands of pounds an hour in lost revenue, productivity, and SLA penalties, which is what justifies investing in a low-downtime migration.
What is the hardest part of a zero-downtime migration?
The data cutover. Moving the application is straightforward, but moving live, changing data without losing any is the real challenge. Change data capture or bi-directional replication keeps both systems in sync continuously so the final switch takes seconds, at the cost of conflict-resolution complexity, and the cutover window should always be measured in a rehearsal first.
Which tools help reduce cloud migration downtime?
Azure Migrate and AWS Application Discovery Service map your estate before you move, Azure and AWS Database Migration Services handle the database cutover with replication, and monitoring tools such as Azure Monitor, CloudWatch, Datadog, and New Relic verify the new environment is healthy. The discovery phase prevents more downtime than any single cutover technique by catching unmapped dependencies.