About the client

The client is a medium sized company in the Life Sciences space, offering ground-breaking solutions that helps biology scientists conduct high-quality research related to our understanding of proteins.

Customer Challenge

Over a period of fast-paced innovation, several different applications services had been developed and maintained on AWS by different teams on independent AWS accounts. This heterogenous set-up made it difficult to have full insight and control of, e.g., security requirements, compliance requirements, and cost.

The client realized the need to consolidate ownership and governance of its cloud infrastructure and applications. Olink sought a partner to drive this transformation and for immediate assistance architecting and executing the required changes.

Solution

The Omegapoint AWS solution to centralize governance and hardening the security of its accounts and workloads, follows the guidelines of the AWS Security Reference Architecture (AWS SRA). The solution is built around AWS Control Tower and AWS Organizations, with applications segregated into AWS-accounts by workload and environment. AWS IAM Identity Center is used with a connection to Active Directory via Okta for single sign-on and to govern access rights. To meet security requirements, services and tools such as AWS Shield, AWS Key Management Service, AWS PrivateLink, AWS CloudTrail, Service Control Policies and a FortiGate VM monitoring north-south traffic to the VPCs.

Results and benefits 

The client now has a centralized governance of its AWS environment and integration with their Active Directory. The clients cloud infrastructure and workloads have been hardened and the operations team now has observability of the traffic to and from their cloud environment.

Powered by