Enhancing Security and Simplifying AWS Accounts for a Leading Global Appliances Player
A popular worldwide brand that offers a comprehensive range of solutions for spaces, including homes, offices, stores, and other commercial facilities specializes in creating appliances for multiple purposes, such as life solutions like electrical construction and housing materials, IoT-connected solutions for B2B, innovative devices and appliances for the auto industry, and a diverse range of products and services for the industrial sector.
Manufacturing Industry
Published Date : 19-May-2023
Better control over AWS accounts and security
The client had a crucial need to streamline their AWS accounts due to multiple isolated environments being used. These environments were in the form of different AWS accounts, which resulted in no centralized visibility and control. The appliances leader wanted to implement standardized AWS best practices and maintain their organization’s security standards, to take better control. The complexity of the situation meant that it was necessary to find a solution that would not only integrate these different AWS accounts but also provide centralized control and visibility to meet the client’s specific needs.
Their requirements primarily included:
- Centralized dashboard for continuous visibility into an AWS environment
- Centralized control for access policies over all accounts.
- Consolidated billing
- Centralized access control through Single Sign-on.
- Dedicated AWS accounts for a specific type of workload like security, Development, logging, etc.
Centralized Control & Cost Visibility for Appliances Leader
Umbrella Infocare proposed a solution for the global appliances giant that utilizes an AWS landing zone with AWS Control Tower. This allows for the automation of setup using best practices blueprints and the configuration of an account factory with pre-approved network configurations and region selections. This solution provides centralized control and visibility into multiple AWS accounts, ensuring standardized AWS best practices and security standards.
The setup helps the customer:
- Establish a configuration baseline using AWS CloudFormation
- Prevent configuration changes of the underlying implementation using service control policies (for preventive guardrails)
- Continuously detect configuration changes through AWS Config rules (for detective guardrails)
- Update guardrail status on the Control Tower dashboard
- Disallow access to unauthorized read\write access to log archive, S3 buckets.
- Mandating the encryption on EBS volumes.
AWS Services used:
- AWS Control Tower
- AWS Control Tower
- AWS Config
- AWS Organization
- AWS Single Sign-On
Architecture
Enhanced Security & Easy Management
Umbrella Infocare’s proposed solution provided several benefits to Panasonic. It streamlined and standardized their AWS accounts, enhanced security, and ensured compliance with organizational standards. The solution centralized control and visibility and disallowed unauthorized access to sensitive data. It also employed preventive and detective guardrails to stop configuration changes and continuously detect changes.
Key benefits include:
- Standardizing the provisioning of new accounts
- Billing management
- Standardized account level control using guard rails.
- Identity and access management using SSO
- Dedicated account for logs.
- Centralized network connectivity
