Infosys offers full potential of cloud ecosystem with Infosys Cobalt to increase business value and speed to market. The client is a leading retail company. The client had opted for public cloud migration selecting AWS as their cloud service provider.
Infosys helped them in their cloud migration journey .
Key Challenges
- Infrastructure, data protection with various levels of native (AWS KMS) and third-party tools
- DDoS protection using AWS WAF enabled with AWS shield
- Deployment for non-production and production environments
- Remediation of various findings including server hardening, abnormal user authentication, access key rotation, establishing unique credentials for AWS resources etc.
- Managed vulnerability detection and response, managed network security and setting up of 24X7 virtual security operation center in AWS Cloud
Client has engaged Infosys cloud security practice for providing below transformational and managed security services:
The Solution
Deployment of third-party firewalls on AWS
- Secured the PureCloud tool based on Infosys S3 principle (Secure by Design, Secure by Scale and Secure the Future)
- Configuration management and operations of AWS WAF against application security threats (e.g. SQL injections, XSS etc.) with vulnerability remediation
- Network protection with the implementation of NGFW in-line and hub and spoke model using AWS transit gateway implementations
- Conducted security integration between Azure Mango DB and Kafka
- Encrypted data at rest and data at move with AWS KMS encryption mechanism
Benefits
Reduced threat surface for clients AWS cloud infrastructure
Provided transformational and managed security services and reduced total cost of ownership
Provided infra protection with various levels of tools involved for network protection, data protection
DDoS protection using WAF enabled AWS shield
Secured non-production and production environments from cyber-threats
Remediated various findings including server hardening, abnormal user authentication, access key rotation, establishing unique credentials for AWS resources etc.
Achieved 71% security score
