Request for Quote for Selection of MSP for Ministry of Housing and Urban Affairs (MoHUA)

S.No. CSP Managed Service Category Specifications UoM UoM UnitPrice Qty/Request Consolidated quantity Unit Public Price of proposed CSP On-Demand (Pay-as you go) (J) Total Public Price of the proposed CSP (Pay-as-you-go) (K) Unit Public Price of proposed CSP ( RI Price for 3 years) (L) Total Public Price of proposed CSP ( RI Price for 3 years) (M) Technical Compliance of the respective services along with SKU (N) Public pricing Calculator link (O) Active-Active Arch across physically distant MeitY sites Far DR Active-Active Pricing

1 API Gateway Networking CSP Managed API Gateway processing 5 million REST API calls per month - Should provide a fully managed production grade serverless service for publishing APIs to external and internal consumers. - Must not need any provisioning of underlying compute, external proxy, or external cache. Must support REST requests with support of rate limiting and in-built caching. - Should come with Autoscaling & Availability zone support (deployment across 3 physically distant MeitY empanelled sites ) - Should support security features ( protection from malicious clients & abuse) & analytics reporting ( response time, latency, error rate, cache hit count etc.) - Should be able to handle upto 10000 requests per seconds per API Gateway per month Requests 3.50000 110.698 24.000 Yes Yes

18 Backup Storage CSP managed centralized backup service supporting: - Single backup plan to configure centralized backup across multiple data stores (volumes, databases, Object Storage, network file storage) with flexible scheduling options (hourly, daily, weekly) - Data Redundancy across physically distant MeitY empanelled sites - Support policy based Centralized & automated data protection management with Write Once Read Many (WORM). - Support cross region backup replication per GB-month for warm backup storage for RDS 1,215.000

Storage per GB-month for warm backup storage for EBS 615.000

Storage per GB-month for warm backup storage for EFS GB-month 0.05500 2,037.19 2,340.77 Yes No

67 CloudFront Networking Cloud Managed CDN with minimum 40 PoPs in India: - Support for HTTP/2, HTTP/3, TLS 1.3 with security features including DDoS protection, CSP's WAF managed rulesets and SSL certificate management. - Native integration with CSP Object Storage and Services - Support for Realtime logging and monitoring (sub-minute delivery) - Supprt for Edge computing with custom code execution at PoPs. - Support to securely deliver audio, video, images, data, application, etc from single distribution - Private Link support for connecting to Origins like Load balancers per CDN serving 10,000 HTTPS Requests with 10 TB data transfer Out Requests 0.01200 178,811 8

367 CloudTrail Management & Governance Fully managed service for governance, compliance, and auditing of cloud account by tracking user activity and API usage - Support aggregation of Organization wide audit trails per data event recorded Events 0.00000 1000210710 1,381,099,541.00

376 CloudWatch Management & Governance CSP monitoring service for cloud resources & applications - Collect and track metrics, collect and monitor log files, and set alarms - Monitor resoucres like Virtual machines, Database instances. - Support Application Performance Monitoring (APM) covering application metrics, correlated trace spans, and a service map. - Must provide database observability built-in dashboars providing fleet level insights such as top sql, slow query analysis, OS processes, SQL locks analysis with 7 days data retenction - Support real user monitoring to collect and view client-side data of web application performance from actual user sessions in near real time per Dashboard per Month Dashboards 3.00000 71.00 72.00

393 CloudWatch Management & Governance per GB log data ingested in Standard log class - Asia Pacific (Mumbai) GB 0.67000 872 1,425.000

459 CloudWatch Management & Governance per alarm metric month (standard resolution) - Asia Pacific (Mumbai) Alarms 0.10000 817 1,220

469 CloudWatch Management & Governance per metric month - Asia Pacific (Mumbai) Metrics 0.30000 1,280.73 1,504

478 CloudWatch Management & Governance per GB-mo of log storage - Asia Pacific (Mumbai) GB-Mo 0.03000 17,338 8,425

491 CloudWatch Management & Governance per million Events for CW:ContributorInsightEvents in Asia Pacific (Mumbai) Events 0.02700 5,997 6,139

494 CloudWatch Management & Governance per vCPU-Hour monitored by Database Insights for RDS PostgreSQL provisioned databases vCPU-Hours 0.01250 7,440 13,392

549 Config Management & Governance Config Management DB service providing real-time notifications for any non-compliance in Cloud environment. - Should provide real-time inventory of all the Cloud resources including VMs, databases, networking, security configurations, storage etc. per Configuration Item recorded in Asia Pacific (Mumbai) region APS3-ConfigurationItemRecorded 0.00300 146,662 255,214

618 Data Transfer Data Transfer Data Transfer charges between physically distant MeitY empanelled sites per GB - regional data transfer - in/out/between Azs (physically distant MeitY empanelled sites) GB 0.01000 9,969.027 182,874.040

636 Data Transfer Data Transfer Data Transfer Out (Internet) from VMs, global load balancer, Regional Load balancer, API Gateway etc. per GB - next 40 TB / month data transfer out GB 0.08500 3,794.959 5655.874

701 Data Transfer Data Transfer Data Transfer Out (Internet) from VMs, global load balancer, Regional Load balancer, API Gateway etc. per GB - first 10 TB / month data transfer out beyond the global free tier GB 0.10930 2,365.879 6,864.148

732 DynamoDB Database Serverless NoSQL Database with automatic scaling for high volume of Read & Writes - Storage 360 Gigabyte (GB), Atomic request data size of 1 Kilobyte (KB), Writes 20 Million, Reads 80 Million - Should natively supports multiple data models including key-value pairs & documents. - Support for ACID transactions , Streaming & Zero ETL Integration with CSP DataWarehouse - Support for Point-in-Time Recovery log retention for upto 30 days - In built HA across physically distant MeitY empanelled sites per month per month 5 84

787 Elastic Compute Cloud Compute Burstable Virtual Machines: Enterprise Linux or CSP-backed Linux with Long term Support -Should support unlimited burstable peformance per On Demand Linux t3a.medium Instance Hour Hrs 0.02460 13,626.38 44,053.60

823 Elastic Compute Cloud Compute per On Demand Linux t3a.large Instance Hour Hrs 0.04930 2,283.96 11,321.74

980 Elastic Compute Cloud Compute per On Demand Linux t3a.2xlarge Instance Hour Hrs 0.19710 3,137.92 3,137.00

814 Elastic Compute Cloud Compute Non burstable Virtual Machine - Must offer the same instance family (General purppose, Compute optimized, Memory Optimized), compute capacity, OS, network bandwidth & processor arch as per the mentioned instance type. For OS mentioned as Linux , should offer either Enterprise Linux or CSP-backed Linux with Long term Support. OS pricing should be bundled. - Must support secure boot using Unified Extensible Firmware Interface (UEFI) or Trusted Platform Module 2.0 - Support Confidential Computing through isolated compute environments with memory isolation, no persistent storage and no external networking access, while offering resizable capacity. per On Demand Linux c6a.large Instance Hour Hrs 0.04675 7,602.34 84,311.16

899 Elastic Compute Cloud Compute per On Demand Linux c6g.xlarge Instance Hour Hrs 0.08520 3,720.000 5,967.388

922 Elastic Compute Cloud Compute per On Demand Linux c6a.xlarge Instance Hour Hrs 0.09350 24,604 49,973

969 Elastic Compute Cloud Compute per On Demand Linux r6a.xlarge Instance Hour Hrs 0.14300 11,140.591 19,956.451

976 Elastic Compute Cloud Compute per On Demand Linux c6a.2xlarge Instance Hour Hrs 0.18700 54,071.83 91,907.00

989 Elastic Compute Cloud Compute per On Demand Linux r6a.2xlarge Instance Hour Hrs 0.28600 2,232 3,464

979 Elastic Compute Cloud Compute per On Demand Linux m6a.xlarge Instance Hour Hrs 0.19200 22,264.17 24,681.46

990 Elastic Compute Cloud Compute per On Demand Red Hat Enterprise Linux with HA c5a.xlarge Instance Hour Hrs 0.29800 2,231 2,231

991 Elastic Compute Cloud Compute per On Demand Linux c5a.2xlarge Instance Hour Hrs 0.34000 750.083 750

998 Elastic Compute Cloud Compute per On Demand Linux r6g.4xlarge Instance Hour Hrs 0.52000 463 1,579

1002 Elastic Compute Cloud Compute per On Demand Red Hat Enterprise Linux with HA m6a.4xlarge Instance Hour Hrs 0.84120 1,488 1,488

1003 Elastic Compute Cloud Compute per On Demand Linux r6a.8xlarge Instance Hour Hrs 1.14400 738 738

Elastic Compute Cloud Compute per On Demand Linux c6a.4xlarge Instance Hour Hrs 0.37400 3,481 1,951

1009 Elastic Compute Cloud Compute Virtual Machine: Non burstable, high memory instances to run large in-memory databases. per On Demand Linux u-6tb1.56xlarge Instance Hour Hrs 47.87676 10 10

Elastic Compute Cloud Storage Production grade Solid State Drive (SSD) offering single-digit millisecond latency. - Disk can be used as both OS Disk and Data Disk allowing 1 GB storage increments per 50 GB volume per month with 125 MB/s Throughput per month 150

per 100 GB volume per month with 250 MB/s Throughput per month 85

915 per 1000 GB volume per month with 500 MB/s Throughput per month 0.09120 50.000

Elastic Container Service Container Fully managed production grade container orchestration service to deploy, manage, and scale containerized applications. per Cluster per month 100.000

Elastic Container Registry Container Fully Managed Container Registry that natively - supports Open Container Initiative (OCI) standards and Docker Registry HTTP API V2 - supports container registry life cycle policies, cross region, cross-account Image replication - Data Redundancy across physically distant MeitY empanelled sites - encryption at rest with Customer Managed Keys - Automatically perform vulnerability scanning per GB per month 1,000.000

1011 Elastic Container Service Container Serverless worker node for Containerized application Ubuntu/Cent OS or any Linux supported by CSP AWS Fargate - vCPU - Asia Pacifi c (Mumbai) hours 0.04256 17912.135 18099.926

1013 Elastic Container Service Container AWS Fargate - Memory - Asia Pacifi c (Mumbai) hours 0.00466 36513.951 36889.533

1017 Elastic Container Service for Kubernetes Container Fully managed production grade Kubernetes service to deploy, manage, and scale containerized applications. Amazon EKS cluster usage in Asia Pacific (Mumbai) Hours 0.10000 2,232.00 4,380.00

1048 Elastic Load Balancing Networking CSP native Layer 4 load balancer processing 2 TB traffic per month - Should support TCP, UDP and TLS (Passthrough & Termination) protocols with cross-zone load balancing. - Autoscaling & zone redundancy across physically distant MeitY empanelled sites - Must provide static IP addresses per Availability Zone and preservation of client source IP. per Network load balancer per month 0.00600 49,814 53,802 73.70109041

1064 Elastic Load Balancing Networking CSP native layer 7 load balancers evaluating 50 rules per request & data processing of 2 TB per month - Supports SSL termination, cookie-based session affinity and round robin, weighted routing for load-balancing traffic. - Support for IPv4, IPv6, zone redundancy, autoscaling & association with CSP's Web Application Firewall - Support for redirects, fixed responses, header-based routing per Application load balancer per month 0.00800 26,863.72 30.00

Key Management System Security, Identity & Compliance Fully managed Key Management Service backed by CSP's HSM to create and control the keys used for cryptographic operations Compliance with FIPS 140-3 Level 3. per encryption key with 10,000 requests per month 26.00

1192 GuardDuty Security, Identity & Compliance AI/ML-powered continuous security monitoring service providing threat detection across cloud accounts, containers, and storage services without additional infrastructure deployment. - Support severity-based findings (Critical to Low), MITRE ATT&CK® framework correlation, and automated detection of reconnaissance activities, account compromises, and malware scanning of block storage & obect storage. - Support for Organization wide threat aggregation and integration with CSP's CSPM. per vCPU for the first 500 vCPU / month monitored in Asia Pacific (Mumbai) region vCPU-Months 1.81000 63.03 200.00

GuardDuty per GB EBS Data volume malware scanning per GB-month 1,000.00

1249 Inspector Security, Identity & Compliance CSP managed Vulnerability Assessment service : - Should support continuous scanning of compute resources, container images, serverless functions, application packages for common vulnerabilities and exposures (CVE) and contextual risk scoring - Automated SBOM generation in industry-standard formats and compliance assessment against CIS benchmarks. - Organization-wide(Multiple Accounts) coverage monitoring , automated resource discovery, environmental context-based risk scoring (network accessibility, exploit availability), per scanned VM per month 42.00

per scanned Serverless function per month 76.00

per scanned Container Image per month 0.11000 1,221.00 1,752.00

1323 MQ Application Integration Fully managed Rabbit MQ cluster with 3 brokers deployed across physically distant MeitY empanelled sites - Data Encryption of messages at rest with customer managed keys and transit with support for TLS 1.2 & 1.3 -Private networking with VPC/VNet Storage (Amazon EBS) used by RabbitMQ brokers (GB-months) in Asia Pacific (Mumbai) GB-Mo 0.11400 1,770 3,169

1326 MQ Application Integration 3-node cluster mq.m5.xlarge hour (or partial hour) running RabbitMQ in Asia Pacific (Mumbai) Hrs 1.81800 1,488 2,504

1325 MQ Application Integration 3-node cluster mq.m5.large hour (or partial hour) running RabbitMQ in Asia Pacific (Mumbai) Hrs 0.90900 702 744

1330 MQ Application Integration 3-node cluster mq.m5.2xlarge hour (or partial hour) running RabbitMQ in Asia Pacifi c (Mumbai) Hrs 3.63600 471.84 513.84

1336 Network Firewall Networking CSP managed Network Firewall with IPS capabilities, deployed across minimum two physically distant MeitY empanelled sites with 100 Gbps bandwidth per endpoint. • Should support TLS inspection Configuration: 1 Firewall endpoint with 1 TB data inspection per month per Network Firewall per month Hourly 0.39500 2,232.00 10.00

1339 OpenSearch Service Analytics CSP Managed OpenSearch cluster deployed across physically distant MeitY empanelledsites - Support for master and data node separation, warm/cold storage tiers,cross cluster replication and vector database capabilities for Gen AIworkloads. - Support private VPC/VNet connectivity, encryption at rest usingCustomer Managed Keys and encryption in transit. per m6g.large.search instance hour (or partial hour) - APS3 Hrs 0.08400 2,232.000 7,477.500

1342 OpenSearch Service Analytics per r6g.xlarge.search - Asia Pacific (Mumbai) Hrs 0.24900 2,232.000 15,338.250

1340 OpenSearch Service Analytics per r6g.large.search instance hour (or partial hour) - APS3 Hrs 0.10800 4,464.000 7,440.133

1353 OpenSearch Service Analytics per c6g.large.search instance hour (or partial hour) - APS3 Hrs 0.08200 714 5178.00

1387 Redshift Analytics - Should provide provisioned enterprise data warehouse (EDW) to run complex queries across petabytes of data. - Support zero-ETL integration with Relational & NoSQL database. - Supprt creation, auto refresh & querying of materialzed views, automatic workload management with concurrency scaling - Support HA cluster deployment & auto failover across physically distant MeitY empanelled sites - Support Data Governance features including Row level Security , Data Masking, and cluster encryption using Customer Managed Key per Redshift RA3.XLPLUS Compute Node-hour Hrs 1.23500 1,487 2,489

1484 Relational Database Service Database MySQL Database Engine ver8, MariaDB version 10.6 & PostgresSQL Database Engine ver16 and above. Should support - storage auto scaling based on the workload demand and per second billing for the actual compute used - HA and horizontal scaling by adding/ removing read replicas acrossphysically distant MeitY empanelled sites - automatic backup from standby to avoid IO activities suspension onprimary node - provision for local NVMe SSD attached instances for faster queryprocessing/ data cache. - performance insights with query analysis, encryption using customermanaged keys - Point In Time log retention as per the requirement (up to 30 days) - (native) Blue Green deployments for DB upgrades - Zero ETL Integration with CSP Datawarehouse (only for MySQL DB) per RDS db.t4g.large Single-AZ instance hour (or partial hour) running PostgreSQL Hrs 0.16700 744 1,783

1487 Relational Database Service Database per RDS db.m6g.xlarge Multi-AZ instance hour (or partial hour) running MariaDB Hrs 0.96400 1488 3860

1393 Relational Database Service Database per RDS db.m6g.large Multi-AZ instance hour (or partial hour) running PostgreSQL Hrs 0.47920 1,488.00 2,232.00

1437 Relational Database Service Database per RDS db.r6g.2xlarge Multi-AZ instance hour (or partial hour) running MySQL Hrs 2.16000 1,488 5,275

1463 Relational Database Service Database per RDS db.m6g.2xlarge Single-AZ instance hour (or partial hour) running PostgreSQL Hrs 0.90400 744 1488

1480 Relational Database Service Database per RDS db.t4g.xlarge Single-AZ instance hour (or partial hour) running MySQL Hrs 0.18600 1,488 12,438

1494 Relational Database Service Database per RDS db.m6g.2xlarge Multi-AZ instance hour (or partial hour) running MariaDB Hrs 1.71400 79.869 822.43

Virtual Private Cloud Networking Site to Site VPN with 2 tunnels across physically distant MeitY empanelled sites. Bandwidth:1.25 Gbps per tunnel per VPN per month Hourly 5.00

1758 Virtual Private Cloud Networking Point to Site VPN providing secure access to remote users supporting encrypted TLS connections, multi-platform clients (Windows, macOS, Linux) & centralized authentication (directory, certificate-based, SAML). per Client VPN Endpoint Association Hour Hourly 0.1500 2,232.00 8,184.00

Shield Security, Identity & Compliance Fully managed Distributed Denial of Service - Should provide DDoS protection for managed services endpoints - Can be used with CDN and provide comprehensive protection against all known infrastructure (Layer 3 and 4) attacks - Should provide always-on detection and automatic inline mitigations, minimize application downtime and latency. Per Public Resource/IP Deployed 1,200.00

Firewall Manager Security, Identity & Compliance Centralized security management service to configure and maintain security policies (Network Firewall, WAF, Security Groups, DNS Firewall) across multiple accounts and applications in the organization. - Support automated policy enforcement i.e. deployment of baseline WAF, Network Firewall, DNS Firewall rules, remediation and comprehensive compliance reporting. per policy per month 4.00

1833 WAF Security, Identity & Compliance Autoscalable, serverless Web Application Firewall with HA across physically distant MeitY empanelled sites - 10 rules processing 100MN hits & 10 TB data processing per month - Should provide CSP managed rules for Threat Intelligence for blocking requests based on IP repuation list (Tor nodes, Public Cloud IPs, VPNs, known malicious IPs) , bot protection with real time metrics - Support native Integration with Application Load Balancer, API Gateway and CDN per WAF per month 16

11 AppStream Compute Fully managed application streaming service enabling browser-based access to enterprise applications without client installations, featuring SAML 2.0 integration and granular data controls (file downloads, clipboard access, printing). Solution must provide automated application packaging & elastic fleet management with usage-based pricing user/month Multi-Session RDS SAL User fee in AWS region Asia Pacific (Mumbai) Month 6.42000 20 20

12 AppStream Compute per hour for stream.compute.xlarge-fl Multi-Session Fleet in Asia Pacific (Mumbai) hour 0.66000 347 347

711 Database Migration Service Database CSP native Database migration & replication service supporting both homogenous as well as heterogenous database migration with schema conversion & Change Data Capture (CDC) support. per On Demand DMS t3.medium Instance Hour Hrs 0.10600 744.00 744

720 DocumentDB (with MongoDB compatibility) Database Mongo compatible Document database service -supporting HA across physically distant MeitY empanelled sites, private connectivity from VPC/VNet, Role Based Access control, in-place major version upgrade and encryption at Rest and in-transit with support for TLS 1.2 & 1.3. - support to create automatic, continuous, incremental backups/ snapshot with ability to replicate snapshot to other region per db.t4g.medium instance hour (or partial hour) running Amazon DocumentDB Hrs 0.10961 5,952.000 5,952.000

730 DocumentDB (with MongoDB compatibility) Database per db.r6g.4xlarge instance hour (or partial hour) running Amazon DocumentDB Hrs 2.39400 5,505 5,825

1100 ElastiCache Database Redis/Valkey engine v7 and above. Should support clustering, replication and automatic failover across physically distant MeitY empanelled sites. - Should have Inbuilt capability to auto scale number of shards and read replicas based on scaling policy per Memory optimized r6g.2xlarge node hour running Redis/Valkey Hrs 0.89700 3297.00 5122.50

1101 ElastiCache Database per Gen Purpose m6g.xlarge node hour running Redis/Valkey Hrs 0.32900 1,488.00 3,720.00

1113 ElastiCache Database per T4G Medium Cache node-hour (or partial hour) running Redis/Valkey Hrs 0.08100 1644.00 6108.00

1314 Managed Streaming for Apache Kafka Application Integration Fully managed kafka cluster : - HA deployment across physically distant MeitY empanelled sites - Data Encryption of messages at rest with customer managed keys and transit with support for TLS 1.2 & 1.4 -Private networking with VPC/VNet per Kafka.t3.small broker hour in Asia Pacific (Mumbai) Hrs 0.04910 2,232.000 2,920.000

1317 Managed Workflows for Apache Airflow Application Integration Fully managed Apache Airflow service with automated provisioning and high availability across physically distant MeitY empanelled sites. -Private VPC/VNet networking, configurable worker nodes, object storage-based DAG deployment, and native integration with CSP services. per hour for Airflow small environment Hrs 0.51518 744 744

Athena Analytics Interactive Serverless Query service for Object storage using standard SQL per TB per month 52

1377 QuickSight Analytics Fully managed cloud-native, serverless business intelligence platform offering direct connectivity to enterprise data sources with automated data refresh capabilities and in-memory acceleration for fast query performance across large datasets. - Provide AI-driven analytics including automated anomaly detection, forecasting, and natural language interactions for buiding dashboards & data exploration - Support enterprise-grade features including row-level security, custom user permissions, SAML 2.0 integration, dashboard embedding in applications, and reader-only license options for cost-effective large-scale deployments QuickSight Enterprise Edition User User 24.00000 4 4

1379 QuickSight Analytics QuickSight Enterprise Edition Author Pro - Asia Pacific (Mumbai) (ap-south-1) User 50.00000 3 3

AI/ML AI/ML Serverless Computer Vision service for automated image and video analysis. - Must provide pre-trained APIs for face detection, analysis, text extraction, object/scene detection and content moderation. - Support face search (1:N) , face comparison (1:1) & liveness detection. per face macth API call per month requests 112,422.00

1509 Route 53 Networking CSP managed DNS security solution offering VPC-level custom domainfiltering and outbound query inspection - Should include pre-configured managed domain lists for known threats,comprehensive query logging to cloud storage, and DNS exfiltrationprevention through flexible allowlist/ blocklist management. - Association with VPC/VNet processing 1 million queries per month - Should support DNS tunnelling detection & DGA protection per 1,000,000 queries inspected by the firewall for the first 1 Billion queries Queries 0.60000 144 144

Simple Storage Service Storage Managed Object Storage - Data redundancy across 3 physically distant MeitY empanelled data canters including data replication cost - Automatic tiering of objects across mentioned storage tiers based onobjects access frequency; (Hot Tier-> Cool Tier-> Cold Tier) with no retrieval and early object deletion charges per GB-Month of storage used in Intelligent-Tiering, Frequent Access Tier GB-Mo 2,120 2,120

per GB-Month of storage used in Intelligent-Tiering, Infrequent Access Tier GB-Mo 0.0138 4,380.00 4,380.00

1699 per GB-Month of storage used in Intelligent-Tiering, Archive Instant Access Tier GB-Mo 980 980

Far DR site Components

1 Simple Storage Service Storage Managed Object Storage per GB-Month of storage used in Glacier Deep Archive 2000

2 Backup Storage CSP managed centralized backup service supporting: - Single backup plan to configure centralized backup across multiple data stores (volumes, databases, Object Storage, network file storage) with flexible scheduling options (hourly, daily, weekly) - Support policy based Centralized & automated data protection management with Write Once Read Many (WORM). - Support cross region backup replication per GB-month for warm backup storage for RDS 1,000.000

per GB-month for cold backup storage for EBS 400.000

per GB-month for cold backup storage for EFS GB-month 0.05500 2,037.19 1,200.00

3 Elastic Container Registry Container Fully Managed Container Registry that natively - supports Open Container Initiative (OCI) standards and Docker Registry HTTP API V2 - supports container registry life cycle policies, cross region, cross-account Image replication - encryption at rest with Customer Managed Keys - Automatically perform vulnerability scanning per GB per month 1,000.000

4 Data Transfer Data Transfer Data Transfer charges to Far DR site per GB per month GB 0.01000 9,969.027 2,000.000

Table A: Financial Format

S. No. Description Ref.

I. On-Demand Items BoM Total of Respective columns in INR

1 Total Monthly Cloud Billing at the CSP List Price & published Est. Quantities in INR (H)

2 Discount percentage offered on the Public Price in Percentage (H1) %

3 Total Discounted offered price (H2) =H*(1-H1)

II. Reserved Instances and Databases (RI) for 1 year

4 Monthly Cloud Billing at the CSP List Price & published Est. Quantities in INR (J)

5 Discount percentage offered on CSP List Price for RI for 1 year (J1) %

6 Overall Discount – RI AND Other Commitment Pricings Broad category J2=J*(1-J1)

III. Reserved Instances and Databases (RI) for 3 years

7 Monthly Cloud Billing at the CSP List Price & published Est. Quantities in INR (L)

8 Discount percentage offered on CSP List Price for RI for 3 years (L1) %

9 Overall Discount – RI AND Other Commitment Pricings Broad category L2=L*(1-L1)

10 Total Combined Offered price (On-Demand + RI for 1 Year and 3 Years) Total (N) = H2+J2+L2

11 Total Financial Quote including Discount & GST (N) = N * (1+GST%)

Annexure -1 Technical BOM

S.No. (A) CSP Managed Service Category (B) Technical Specifications & Configuration (C) UoM ( D ) Consolidated quantity (E) No. of Hours/ month (F) Unit Public Price of proposed CSP On-Demand in USD (Pay-as you go) (G) Total Public Price of the proposed CSP and Public pricing Calculator link for pay -as-you-go) (H) =(E)*(F)*(G) Unit Public Price of proposed CSP in USD ( RI Price for 1 year) (I) Total Public Price of the proposed CSP and Public pricing Calculator link for 1 year RI (J) =( E)*(F)*(I) Unit Public Price the of proposed CSP in USD ( RI Price for 3 years) (K) Total Public Price of the proposed CSP and Public pricing Calculator link for 3 years RI (L)=(E)*(F)*(K) Technical Compliance of the respective services along with SKU (M) Active-Active Arch across physically distant MeitY sites (N) - YES or NO

1 Application Gateway Web Application Firewall V2 tier, 730 Fixed gateway Hours, 1 compute units and 1,000 persistent connections with 1 mb/s throughput, 5 GB Data transfer Hourly 1 N/A

2 IP Addresses Standard (ARM), 2 Static IP Addresses X 730 Hours, 0 Public IP Prefixes X 730 Hours Per Public IP per hour 2 N/A

3 DNS Zone 1, DNS, Public; 0 hosted DNS zones, 1 DNS query Per Month 1 N/A

4 VPN Gateway VPN Gateways, VpnGw2AZ tier, 200 gateway hour(s), 0 additional S2S tunnels (beyond included amount), 0 additional P2S connections (beyond included amount), 0 GB, Inter-VNET VPN gateway type per hour 1 200

5 Load Balancer Standard Tier: 5 Rules, 1,000 GB Data Processed per LB per hour 1 730

6 Bandwidth Inter Region transfer type, 400 GB outbound data transfer from to East Asia per GB per day 1 730

7 Virtual Network (Virtual Network 1): 100 GB Outbound Data Transfer; South India (Virtual Network 2): 100 GB Outbound Data Transfer per GB per day 1 730

8 Bastion Basic Tier, 200 Hours, 5 GB Outbound Data Transfer Hourly 1 200

9 Microsoft Sentinel Logs ingested - 10 GB per day of Analytics tier and 0 GB per day of Data lake tier; Data Processing - 0 GB per day in Data Lake tier to be processed; Retention - 3 months of Analytics Retention, 3 months of Total Retention, 0 months of Data lake Retention; Advanced Data Insights – 0 Hours ; Data lake queries – 0 queries per month, 0 GB data scanned per query of Queries, 0 queries per month, 0 GB data scanned per query of Search Jobs; Entity Analyzer – 0 Security compute units per hour x 730 Hours, 0 Overage Security compute units per hour x 730 Hours; Graph – 0 Hours per GB per day 1 N/A

10 Microsoft Defender for Cloud Microsoft Defender for Cloud Workload Protection: 0 Plan 1 servers x 730 Hours, 10 Plan 2 servers x 730 Hours, 0 Container vCores x 730 Hours, 0 additional container image scans, 0 App Service nodes x 730 Hours, 0 SQL Database servers on , 0 SQL Database servers outside x 730 Hours, 0 MySQL Instances, 0 PostgreSQL Instances, Cosmos DB 0 x100 RUs x 730 Hours, 0 Storage accounts x 730 Hours with 0 million total overage of transactions across each storage account and 0 GB storage scanned for malware, 0 x1,000 total tokens for AI Services, Defender for APIs – Plan 1 with 0 estimated API monthly transactions, 0 Key Vault(s), 0 Subscription(s) Monthly 11 N/A

11 Virtual Machines 2 D2as v4 (2 vCPUs, 8 GB RAM) x 730 Hours (Pay as you go), Windows (License included), OS Only; 0 managed disks – S4; Inter Region transfer type, 5 GB outbound data transfer from to East Asia Hourly 2 N/A

12 Virtual Machines 2 D4as v5 (4 vCPUs, 16 GB RAM) x 730 Hours (Pay as you go), Windows (License included), OS Only; 0 managed disks – S4; Inter Region transfer type, 5 GB outbound data transfer from to East Asia Hourly 2 N/A

13 Virtual Machines 4 E4as v5 (4 vCPUs, 32 GB RAM) x 730 Hours (Pay as you go), Linux, (Pay as you go); 0 managed disks – S4; Inter Region transfer type, 5 GB outbound data transfer from to East Asia Hourly 4 N/A

14 Managed Disks Managed Disks, Standard HDD, S30 Disk Type 2 Disks, 100 Storage transactions; Pay as you go Hourly 2 730

15 Managed Disks Managed Disks, Standard HDD, S20 Disk Type 3 Disks, 100 Storage transactions; Pay as you go Hourly 3 730

16 Managed Disks Managed Disks, Standard HDD, S10 Disk Type 2 Disks, 100 Storage transactions; Pay as you go Hourly 2 730

17 Managed Disks Managed Disks, Standard HDD, S15 Disk Type 2 Disks, 100 Storage transactions; Pay as you go Hourly 2 730

18 Managed Disks Managed Disks, Standard SSD, LRS Redundancy, E20 Disk Type 2 Disks, 100 Storage transactions; Pay as you go Hourly 2 730

19 Managed Disks Managed Disks, Standard SSD, LRS Redundancy, E15 Disk Type 2 Disks, 100 Storage transactions; Pay as you go Hourly 2 730

20 Managed Disks Managed Disks, Standard SSD, LRS Redundancy, E10 Disk Type 2 Disks, 100 Storage transactions; Pay as you go Hourly 2 730

21 Managed Disks Managed Disks, Standard SSD, LRS Redundancy, E4 Disk Type 1 Disks, 100 Storage transactions; Pay as you go Hourly 1 730

22 Managed Disks Managed Disks, Standard SSD, LRS Redundancy, E6 Disk Type 1 Disks, 100 Storage transactions; Pay as you go Hourly 1 730

23 Storage Accounts Block Blob Storage, General Purpose V2, Flat Namespace, LRS Redundancy, Hot Access Tier, 2 TB Capacity - Pay as you go, 10 x 10,000 Write operations, 10 x 10,000 List and Create Container Operations, 10 x 10,000 Read operations, 1 x 10,000 Other operations. 1,000 GB Data Retrieval, 1,000 GB Data Write, SFTP disabled, Object Replication disabled Hourly 1 730

24 Files HDD (Standard) Media tier, LRS Redundancy, Pay-as-you-go Billing model, Transaction Optimized Access tier, Used capacity – 100 GiB Used capacity, Pay As You Go, 1,000 GiB Used file system metadata, 1 x 10,000 Write Transactions, 1 x 10,000 List Transactions, 1 x 10,000 Read Transactions, 1 x 10,000 Other Operations, Data Retrieval unavailable, Geo-replication unavailable, 0 File sync servers Hourly 7 730

25 Database for MySQL Flexible Server Deployment, General Purpose Tier, 1 D8DS v4 (8 vCores) x 730 Hours, 20 GB Storage with ZRS redundancy, 0 million Paid IO, 0 GB Additional Backup storage with LRS, without High availability, without Reader Endpoint, without Extended Support Hourly 1 N/A

26 NLP (Natural Language Processing) Text classification, entity extraction, summarization, chatbot, etc. Per 1,000 (input+output+ Cache) tokens 1 730

27 Computer Vision Services Image recognition, object detection, OCR, or video analytics Per 1,000 transaction 1 730

28 Conversational AI / Chatbot Platform Services AI-driven chatbot for user engagement or internal support Per Month / Per 1000 messages 1 730

29 AI/ML Data Preparation and Labeling Service Cleaning, transformation, annotation, and preprocessing of structured/unstructured data 8vCPU 32GB RAM per month 1 730

30 Azure CDN from Microsoft - Standard - Zone 5 Zone 1: 0 GB, Zone 2: 0 GB, Zone 3: 0 GB, Zone 4: 0 GB, Zone 5: 100 GB Globally distributed content delivery network service for accelerating web content and files to users with low latency. It caches content on a large network of edge nodes around the world and automatically routes user requests to the best location via an intelligent routing mechanism. The CDN supports both static and dynamic content: it can compress and optimize assets on the fly and uses techniques like TCP/UDP optimizations and connection reuse to speed up even cache-miss responses (dynamic site acceleration). It provides advanced content rules, including geo-filtering to restrict or allow content delivery based on the user’s geographical location (helpful for compliance with content localization laws) and cache-key customization for fine control of caching behavior. Custom domains and TLS/SSL certificates are supported for secure content delivery, with automatic certificate renewal. The service integrates with the cloud’s monitoring, offering real-time metrics on bandwidth, hits/misses, and regional performance, as well as alerts for unusual traffic surges (potential attacks). It can also work in tandem with the cloud’s web application firewall and DDoS protection at the edge for a secure CDN solution. The CDN’s infrastructure and processes meet major cloud security certifications, and it enables enterprises to deliver content globally while respecting local regulations (e.g. options to honor Cache-Control and data privacy headers for GDPR compliance). Per unit Per month 1 730

Total monthly Public Price as per the CSP Portal for above BOM in USD

Total monthly Public Price as per the CSP Portal for above BOM in INR - Dollar Conversion(1 USD = 96.00 INR)

Note: 1. All offered services must meet or exceed the SLAs of current CSP's services in use, including availability, durability, and performance metrics 2.CSP TO INDICATE AGAINST EACH LINE ITEM WHETHER ACTIVE-ACTIVE ARCHITECTURE IS SUPPORTED 3. All proposed services and solutions must be in Generally Available (GA) status . 4. No quoted services should be in Preview/beta mode or approaching End-of-Life (EOL), or announced for deprecation