Cloud providers have to migrate their own infrastructure and help customers migrate theirs at the same time. Under the shared responsibility model, you and your customers have to agree who does what. TLS termination at cloud scale is a different engineering problem from enterprise TLS. KMS and HSM fleet upgrades affect every customer at once, and FedRAMP adds its own post-quantum requirements.
Bring product managers to the overview as well. Customer-facing post-quantum capability will become a commitment on their roadmap. In the intensive, you plan your own migration and the capability your customers will ask for. We teach both courses from the Applied Quantum PQC Migration Framework. Instructors who run migration programs apply the framework to cloud platforms.