Hybrid Multi-Cloud • Financial Services • AWS
Deployment of AWS Control Tower and migration of services to Openshift
A major bank needed to migrate its workloads to the cloud and decided to rely on Nubiral for the initial configuration in AWS, following best practices.
About the client
Argentine financial entity that provides a variety of services, including mortgage loans, personal loans, and banking services for individuals and businesses.
It stands out for its focus on technological innovation and the continuous improvement of its operations and customer services.
Needs
The financial institution was in the process of preparing its AWS environments for the upload of the first workloads at the production level, focused on a log management solution using AWS OpenSearch.
The institution needed to establish a solid foundation and follow recommended best practices to ensure a secure, scalable, and efficient infrastructure on AWS.
Solution
Nubiral proposed the implementation of a multi-account structure using AWS Control Tower.
The work plan included:
AWS Control Tower Configuration: Setup of the Landing Zone and AWS Organizations, including the configuration of Organizational Units (OU) and Service Control Policy (SCP).
Cloud Governance: Application of AWS best practices to ensure the security and efficiency of the infrastructure.
Networking Account Scheme Configuration: Configuration of S2S VPNs, AWS Transit Gateway, communication routes, and association with service accounts, as well as provisioning and configuring the VPC environment.
Results
The implementation of AWS Control Tower allowed the Bank to establish an AWS infrastructure following best practices, providing a solid foundation for future productive workloads.
The benefits obtained include:
Security and Governance: A well-organized account structure with Service Control Policies (SCP) that ensure compliance with security policies and best practices.
Operational Efficiency: An optimized configuration of networks and resources that facilitates the daily management and operation of the cloud infrastructure.
Future Readiness: A scalable and secure foundation that allows Banco Hipotecario to continue implementing additional solutions on AWS, including efficient log management with AWS OpenSearch.
Transparent Costs: Detailed estimates of the monthly and annual costs of the AWS infrastructure, providing clarity on the expenses associated with the project.
In summary, the implementation of AWS Control Tower not only resolved the Bank’s initial challenges but also established a robust and efficient foundation for its cloud infrastructure, aligned with best practices and prepared for future expansions.
