Mainframe Cyber Resilience with AWS & BMC AMI Cloud

Evolve your mainframe to power modern digital business by deploying BMC AMI Cloud to extend data to Amazon S3 object storage — delivering cyber resilience, rapid recovery, and audit-ready compliance without disrupting operations or changing mainframe code. Secure your data and make it available and actionable for AI/ML analytics.

Why mainframe data cyber resilience matters now

While the mainframe remains the most reliable platform in the enterprise, handling 68% of global transactions with 99.9999% reliability1., the risk landscape around the mainframe has changed.

  • Ransomware increasingly targets backups and secondary storage, not just production systems. 
  • Regulators are demanding proof – not just a plan – of operational resilience. 
  • More than ever, organizations need a modern, efficient path to object storage in the cloud to make your data available and actionable for AI/ML analytics. 

Organizations successfully navigating this moment aren't ripping out their mainframes — instead, they are bringing their siloed mainframe data into their enterprise data strategies. BMC AMI Cloud and AWS provide a safe, incremental way to do just that,

247 days

183 is the time to identify, the time to identify and contain is 247 days

Cost of a Data Breach 2026, IBM Corporation, https://www.ibm.com/reports/data-breach

83%

of paying victims of ransomware attacks were attacked again

State of Ransomware Survey, Crowdstrike, 2025 https://www.crowdstrike.com/en-us/resources/reports/state-of-ransomware-survey/

$4.99M

global average costs of a data breach

Cost of a Data Breach 2026, IBM Corporation, https://www.ibm.com/reports/data-breach

Achieve mainframe data cyber resiliency with BMC AMI Cloud + AWS

A safe, incremental evolution — not a rip-and-replace 

BMC AMI Cloud works alongside your existing tape and VTL infrastructure, letting you selectively re-tier secondary mainframe data to Amazon S3 on your own timeline. No forced cutover. No application changes. No outages.

  • The mainframe stays the system of record, processing trillions of transactions with 99.9999% reliability

  • AWS and BMC become your resilience and innovation layer

  • You plan, test, and validate the transition on your own terms

BMC AMI Cloud Architecture with AWS

1. Capture Mainframe Data

The BMC AMI Cloud Agent reads any z/OS® dataset, backup image, archive file, or full database dump from mainframe applications, VSAM, files, tape, and image copies for cloud protection.

2. Enable Cloud-Native Access

Identify and access the required data for cloud processing and analytics. Alternatively, applications can write directly to an AMI Cloud virtual Cloud Data Set, providing transparent cloud integration.

3. Optimize and Secure Data

Use the BMC AMI Cloud Agent to securely transfer mainframe data to AWS over TCP/IP. The agent receives the data stream, segments it into optimized chunks, compresses it, encrypts it, and prepares objects for cloud storage.

4. Transform and Process Data

The agent performs parallel writes of encrypted data chunks as objects to Amazon S3, maximizing throughput and reducing backup windows. Run BMC AMI Cloud Data and Analytics on AWS EC2 to transform and prepare the mainframe data.

5. Manage Lifecycle and Capacity

The processed data is stored in Amazon S3 object storage for cloud-based access and analytics. The BMC AMI Cloud Management Server automatically manages retention policies, expiration, cataloging, and object storage capacity utilization.

6a. Prepare Data for Analytics

Use BMC AMI Cloud Analytics to organize and make the data available for downstream analytics.

6b. Restore Data on Demand When recovery is requir

When recovery is required, the Agent reads data directly from Amazon S3 object storage and restores it to mainframe DASD with full data integrity.

7. Query and Integrate Data

Use AWS Glue and Amazon Athena to catalog, integrate, and query the data stored in Amazon S3.

8. Analyze, Visualize, and Monitor

Use Amazon Redshift and Amazon QuickSight for analytics and visualization, with Amazon CloudWatch providing monitoring.

Data Recovery, Built for the Mainframe

Recoverability is the new uptime

Resilience isn't defined by uptime alone — it's defined by whether you can prove recovery when it counts. BMC AMI Cloud creates immutable backups in Amazon S3 that ransomware cannot alter or delete.  

Paired with a validated recovery path, this joint solution can detect and isolate the intrusion, identify the gold backup,  remove malware, then restore and recover transactions.

180

million daily transactions

140,000

MIPS workloads

83%

decrease of recovery time (48 to 8 hours)

12-hour

Outperforming the 12-hour industry benchmark

Industry Use Cases

Proven Mainframe Resilience on AWS, Built for Your Industry

Up to 66%

reduction in unplanned downtime

80%

faster data recovery vs. traditional methods

90%

reduction in ransomware recovery time

50%

reduction in unplanned outages with BMC AMI Cloud + Control-M



Airlines & ALCS-Dependent Operations

Banking, Financial Services & Insurance

What's at Stake

Airlines & ALCS-Dependent Operations

Airline Control Systems cannot tolerate multi-hour recovery windows. Geopolitical instability, climate disruption, and infrastructure risk have made recoverability a board-level metric.

Banking, Financial Services & Insurance

Ransomware attacks against banks have risen 1,318% since 2021, costing an average of $6.08M per incident. Mainframes still process 90% of the world's credit card transactions.

How AWS + BMC AMI Cloud Help

Airlines & ALCS-Dependent Operations

Proven disaster recovery on AWS's global infrastructure, with geographic redundancy and workload migration off the mainframe to transform data for analytics.

Banking, Financial Services & Insurance

Modernized mainframe backup and recovery for real-time resilience, with up to 90% faster ransomware recovery.

Proof Point

Airlines & ALCS-Dependent Operations

Proven data recovery

Out-of-region performance validated at a carrier with a 100+ TB compressed footprint6.

Banking, Financial Services & Insurance

48 hours → 36 minutes

Nedbank reduced mainframe backup time by 98% after moving to BMC AMI Cloud.

Built for Regulatory Reality

Compliance without added complexity

The EU's Digital Operational Resilience Act (DORA), in force since January 2025, requires financial institutions and other critical infrastructure operators — mainframes included — to prove resilience against disaster and cyberattack through independent testing. The UK's PRA Supervisory Statement SS1/21 sets similar expectations. Non-compliance with DORA alone can cost up to 2% of global annual turnover.

BMC AMI Cloud + AWS build geographic redundancy and out-of-region recovery into your mainframe architecture, keeping your mainframe data under your control as it moves to Amazon S3 object storage in the cloud — helping you meet data residency and sovereignty requirements without re-architecting how data is stored and governed. AWS has been named a “Critical Third Party” for compliance and regulatory use cases in the UK and EMEA.

Ask yourself:  “How am I responding to regulatory pressures like DORA, ISO 20022, and NIST — and can my recovery strategy meet board-level requirements?”

How to make mainframe data available for AI and analytics

Turn protected data into a strategic asset

Once mainframe data is stored in Amazon S3, BMC AMI Cloud converts it into open formats, making it available to enterprise applications, AI and machine learning, and analytics use cases. The conversion does not consume mainframe MIPS and does not require application changes.

Why BMC + AWS

Together, BMC and AWS enable mainframe-dependent organizations with a proven, low-risk path to modern cyber resilience and data analytics — protecting and extending your mainframe investment rather than forcing a replacement. BMC AMI Cloud is available in the AWS Marketplace for customers looking to draw down on committed spend and is backed by multiple AWS Competencies.

 


Resources You Might Like

Demo

Store mainframe data in the hybrid cloud

BMC AMI Cloud replaces traditional tape backups with cloud-integrated storage, streamlining data protection, improving recovery speed, and reducing operational complexity.

See what recoverable really looks like

Get a mainframe environment assessment from a BMC resilience specialist, or view our webinar with AWS to see immutable, automated recovery in action.