success story

Secured AWS cloud architecture with DevSecOps approach

An automated and secured cloud infrastructure, rapid delivery of compliant changes, and smooth operations.
challenge_icon
challenge
There was an immediate need to secure the infrastructure by reducing the number of malicious attacks, protecting sensitive data, preventing any unauthorized access, and efficiently monitoring the environment for security threats along with implementing patch management. Nagarro initiated the engagement by understanding the client’s existing infrastructure and identifying the gaps that needed attention. As the client’s infrastructure comprises of several different, yet critical applications, it was imperative to ensure that zero downtime was achieved with a regular release management process in place for these applications.
process_icon
solution
Nagarro implemented an intrusion detection system by setting up governance on Applications and Infrastructure. Configured of authentication & authorization via SSO across 140 AWS accounts. The setup also automated scanning of over 280 repositories, with each repository hosting more than 200 production images. Image scanning was implemented to identify any issues and raise an alarm if the CI/CD pipeline was headed for a potential failure. By stressing on the importance of identifying the vulnerabilities during the initial stages of the software development process, we helped reduce the overall cost of developing application changes significantly, while accelerating the delivery of these these changes with automation.
solution_icon
outcome
With the solution implemented by Nagarro, we managed to reach a stage where we did not experience a single malicious attack in the last three years. The implementation of intrusion detection & prevention systems minimized the number of generated false positives. The centralized auditing and governance allowed better visibility & control. Early detection of vulnerabilities in code and regular patching became possible. Monitoring and cost optimization setup with regular notifications came in place. Automation by scheduling instances to avoid future costs resulted in reducing the billing by approximately one hundred thousand dollars a month.