Ship App Migrations to the Cloud in 4–8 Week Waves for IT Leaders

The fastest safe way to move your applications to the cloud is a wave-based program: assess your portfolio, prioritize workloads, and migrate in small, validated waves with built-in rollback plans. Start now with three moves: run a discovery pass across your estate, pick a low-risk pilot wave, and prove the pattern with a proof of concept before committing to full-scale cutovers. This sequencing reduces risk and gets you to measurable value faster than a single big-bang cutover.
TL;DR:
- Start migration with a discovery pass, a low-risk pilot wave, and proof of concept to verify the pattern before full-scale cutover.
- Prioritize rehost for initial waves to validate the pipeline, then consider modernization techniques like refactoring or replatforming based on workload needs.
- Collect detailed inventory data such as owner, SLAs, data gravity, and dependencies to inform wave sequencing and dependency mapping.
- Keep first wave under 10 servers and avoid exceeding 50 in any wave to maintain agility, with typical durations of four to eight weeks.
- Use near-zero-downtime methods like continuous replication for revenue-critical workloads, and ensure source systems remain live for several days post-cutover for safety.
Table of Contents
- Migration vs. Modernization: Which One Do You Need?
- The 6 Rs: Choosing the Right Migration Strategy per Workload
- Building the Application Portfolio Assessment
- Wave Planning: Sizing, Sequencing, and a Repeatable Runbook
- Choosing a Cutover Method: Downtime vs. Near-Zero Downtime
- Governance, Prioritization, and Cost Control
- Execution Checklist: From Governance to Retirement
- How We Run Migrations at Wve Labs
- What I’d Tell a Friend Before They Start
- Get Hands-On Help Executing Your Migration
- FAQ
- Sources
Migration vs. Modernization: Which One Do You Need?
Application migration moves a workload from one environment to another, typically from on-premises infrastructure to a cloud platform, with its architecture mostly intact. Modernization changes how the application is built or runs: breaking a monolith into services, replacing an aging database, or rewriting for containers. The two overlap often, but they answer different questions, and conflating them is a common source of blown timelines.
Your choice depends on a few concrete factors. A workload with a hard compliance deadline or a data center lease expiring in 90 days usually needs a straight migration first, with modernization deferred to a later phase. A workload carrying years of technical debt, where every change already takes weeks, is a stronger candidate for modernization, even if it costs more time up front.
A few patterns to use when scoping:
- Legacy monoliths with stable demand usually migrate first and modernize later, if at all.
- Customer-facing apps with scaling pain often justify refactoring during the move.
- Compliance-bound systems (health records, financial ledgers) migrate with minimal architectural change to limit audit scope.
- Internal tools with low usage are frequently candidates for retirement instead of either path.
The 6 Rs: Choosing the Right Migration Strategy per Workload
Every workload in your portfolio maps to one of six strategies, and picking the wrong one is what turns a routine migration into a budget problem.
- Rehost (lift and shift): move the app as-is to cloud infrastructure. Fastest option, minimal risk, but you carry forward existing inefficiencies.
- Replatform: make targeted changes, such as swapping a self-managed database for a managed service, without rearchitecting the app.
- Refactor: rebuild the application to take advantage of cloud-native services. Highest effort and cost, but the best long-term fit for apps that need to scale or evolve quickly.
- Repurchase: replace the app with a SaaS equivalent. Works well when the app is not a differentiator.
- Retire: decommission apps with no active business value. Often the most underused option in a portfolio review.
- Retain (or relocate): keep the workload where it is, or move it to a colocation facility without touching the cloud, usually due to latency, licensing, or compliance constraints.
Decision drivers are consistent across industries: cost pressure favors rehost, compliance and architecture debt favor replatform or refactor, and licensing complexity often points to repurchase. A ten-year-old internal reporting tool with three users is a retire candidate. A customer-facing booking engine with seasonal traffic spikes is a strong refactor candidate.
Pro Tip: Default to rehost for your pilot wave, even if a later refactor is planned. It proves the pipeline works before you add architectural risk.
Building the Application Portfolio Assessment
Wave planning only works if the underlying inventory is accurate, and most migration delays trace back to incomplete discovery rather than technical blockers. A high-fidelity application portfolio assessment captures the fields that actually drive sequencing decisions, not just a server list.
Core inventory fields to collect for every application:
- Owner and business criticality, including who signs off on downtime windows.
- SLA and compliance requirements, especially for regulated data.
- Technology stack and version, including unsupported or end-of-life components.
- Data gravity, meaning where the bulk of data lives and what depends on proximity to it.
- Integration points, including every upstream and downstream system it talks to.
Discovery, portfolio analysis, and continuous assessment are the foundation for confident wave plans, and most programs start with a discovery acceleration phase that produces a directional business case and an initial shortlist of three to five migration candidate applications to kick off mobilization.
Dependency mapping deserves particular attention because implicit network assumptions are a frequent hidden risk in migration planning. Teams often assume a database call that takes under five milliseconds on-premises will behave the same way in the cloud, then discover the real latency only after cutover. Automated discovery tooling is worth the investment once your portfolio exceeds a few dozen applications; below that, a structured manual inventory with owner interviews is usually sufficient.
Wave Planning: Sizing, Sequencing, and a Repeatable Runbook
Wave planning is where strategy turns into a schedule. Group applications into move groups based on shared dependencies, such as a common database or a shared authentication service, since splitting these across waves creates cutover conflicts you will not catch until go-live.
Sizing rules that hold up across most programs: keep your first wave under 10 servers, and avoid exceeding 50 servers in any single wave to stay agile enough to course-correct. Typical wave duration runs four to eight weeks, which gives teams enough runway for testing without losing momentum.
A default wave structure you can reuse as a runbook:
- Assessment: confirm the move group’s dependencies and readiness against the portfolio data.
- Readiness: resolve any skill, licensing, or access gaps identified during assessment.
- Infrastructure provisioning: stand up the target environment, networking, and security controls.
- Data transfer: begin replication or bulk transfer according to the chosen migration method.
- Cutover: switch production traffic, following a pre-agreed maintenance window or near-zero-downtime sequence.
- Validation: confirm functional and performance parity against baseline metrics.
- Closure: document lessons learned and feed them into the next wave’s runbook.
Move-group rules matter as much as sizing. Keep applications that share a database in the same wave. Confirm owner availability before scheduling a cutover window, since a missing approver can stall an otherwise ready wave. Build in a buffer before major business events or financial close periods, when change freezes often apply regardless of your own schedule.
Choosing a Cutover Method: Downtime vs. Near-Zero Downtime
Migration methods fall into two broad categories: migration with planned downtime, and near-zero-downtime methods built on continuous replication. The right choice depends on how much outage tolerance the business actually has, not how much the engineering team would prefer.
- Downtime migration: simplest to execute, lowest engineering overhead, appropriate for internal tools or workloads with a defined maintenance window.
- Continuous replication: keeps source and target systems in sync until cutover, minimizing downtime for customer-facing or revenue-critical systems.
- Blue/green cutover: runs both environments in parallel and switches traffic at the load balancer or DNS layer, allowing near-instant rollback.
- Canary cutover: shifts a small percentage of traffic first, useful when you want production signal before committing fully.
Continuous replication demands enough bandwidth to keep pace with your change rate, and architectures with high write volume need this tested well before cutover day, not assumed.
Rollback and failback planning deserve equal weight to the cutover plan itself. For critical databases, designing a failback path using reverse replication lets you route users back to the source system after cutover if problems surface, rather than relying on a rollback alone. This matters because a rollback often only reverses infrastructure changes, while a true failback preserves data written after cutover.

Pro Tip: Keep source systems live and in reverse replication for several days post-cutover on any workload with financial or regulatory consequence. A same-day decommission removes your only safety net.
Governance, Prioritization, and Cost Control
A prioritization matrix weighing business value against migration effort keeps programs from drifting toward whatever is technically easiest rather than what matters most. Pilot-first sequencing, starting with lower-risk, lower-complexity workloads, builds organizational confidence before you touch anything business-critical.
Several recurring pitfalls show up across migration programs: treating cloud infrastructure like an extension of the data center instead of redesigning for elasticity, letting costs sprawl without tagging or budget ownership, and becoming overly dependent on a single implementation partner without internal oversight.
Program assurance practices that catch these problems early:
- Design authority: a standing review board that approves architecture decisions before a wave starts.
- QA gating: no wave proceeds to cutover without passing defined functional and performance tests.
- Executive signoff: business owners confirm readiness before any customer-facing cutover.
- Cost governance: resource tagging and budget alerts from the first wave onward, not retrofitted later.
Programs that adopt a factory approach, validating patterns with a minimum viable migration and then codifying a runbook for each workload pattern, tend to move through later waves faster than the first.
Execution Checklist: From Governance to Retirement
A migration program runs cleanly when the sequence is explicit and each step produces an artifact the next step depends on.
- Establish governance: name a design authority and executive sponsor before any technical work begins.
- Run discovery: build the application inventory and dependency map.
- Prioritize: score workloads on business value and effort to set wave order.
- Pilot and POC: validate your migration method on a low-risk move group.
- Build the landing zone: provision baseline networking, identity, and security controls.
- Automate: codify infrastructure-as-code templates and CI/CD pipelines for repeatable deployment.
- Write the wave runbook: document each step from assessment through closure.
- Execute cutover: follow the agreed method with rollback criteria defined in advance.
- Validate: confirm functional and performance parity before declaring the wave complete.
- Optimize: tune cost and performance once workloads stabilize in production.
- Retire: decommission source infrastructure only after failback windows close.
Track KPIs throughout: cutover success rate, unplanned rollback count, cost variance against forecast, and time from wave kickoff to validated closure. Before each wave, produce a readiness checklist, a dependency map for that move group, and a signed cutover plan, since skipping any of the three is where most wave delays originate.
How We Run Migrations at Wve Labs
We incorporate cloud architecture, DevOps pipelines, and modernization work into our engineering practice. On engagements like our Digital Watchdog and Good Pedals work, we apply the same wave-planning discipline covered above: discovery first, automated landing zones, and validated cutovers before we touch production traffic.
When working on a migration, we define roles and deliverables tied to each wave, from the dependency map to the final cutover runbook. Our approach is collaborative, working alongside your internal team to keep institutional knowledge in-house while managing the execution load.
What I’d Tell a Friend Before They Start
Treat your first wave as a test of your process, not a race. If a wave fails because of missing owner approval rather than a technical blocker, that is a governance gap, not a bad migration.
Bring in outside help when your team lacks hands-on cloud architecture experience or when the timeline forces parallel waves beyond your internal capacity. A good partner hands you working runbooks, not just a completed migration.
Measure ROI by comparing infrastructure cost, incident rate, and deployment frequency before and after, not by cutover speed alone.
— Brian
Get Hands-On Help Executing Your Migration
If your team has the plan but not the bandwidth, or the bandwidth but not the cloud architecture depth, we build the landing zone, automate your pipelines, and run wave cutovers alongside your engineers rather than instead of them.

We also handle what comes after: performance tuning, monitoring, and ongoing app and website maintenance once your workloads are stable in production. For modernization work that goes beyond a straight lift and shift, our enterprise solutions team scopes the architecture changes alongside the migration itself.
Start with a conversation about your portfolio at our services page, where we outline cloud architecture, DevOps, and modernization engagements in detail.
FAQ
How much does it cost to migrate to the cloud?
Cost depends heavily on portfolio size, chosen migration strategy, and how much modernization is bundled in, so there is no single industry figure that applies broadly. Wve Labs provides project-specific quotes after a discovery assessment rather than publishing fixed rates, since effort varies by workload complexity.
What is the fastest way to migrate applications to the cloud?
Rehosting (lift and shift) is generally the fastest strategy because it moves the application with minimal architectural change. Pairing rehost with a small pilot wave and a proof of concept, as outlined in Google Cloud’s migration guidance, lets you validate the approach before scaling to larger waves.
What are the 6 Rs of cloud migration?
The six common strategies are rehost, replatform, refactor, repurchase, retire, and retain (sometimes called relocate). Each workload in a portfolio typically maps to one based on cost, compliance needs, and how much modernization value justifies the added effort.
What are the typical steps in migrating to the cloud?
A standard sequence runs from governance and discovery through prioritization, pilot testing, landing zone setup, wave execution, validation, and post-migration optimization. Microsoft’s Cloud Adoption Framework frames this as translating strategy into tactical decisions on sequencing and data-transfer method.
How long does a typical migration wave take?
Wave durations typically run four to eight weeks, with early waves kept under 10 servers and later waves capped around 50 to preserve agility. Timelines vary with dependency complexity and how much automation is already in place.
Sources
- Plan your migration - Cloud Adoption Framework | Microsoft Learn
- Application portfolio assessment guide for AWS Cloud migration
- Cloud transformation without the risk — BCG (2024)

