![case study](https://cdn.quantiphi.com/2024/02/33e06fd5-banner.png)
FS Investments: Implementing a Robust AWS Security and Network Protection Solution
Financial ServicesBusiness Impacts
50% reduction in the account creation time
Achieved compartmentalized migration of development environments
13 production accounts with live workloads and zero downtime for development environments migration
Preventive measures to mitigate threat actors in future
Customer Key Facts
- Country : United States
- Industry : Financial Services
Problem Context
FS Investments is a leading asset management company that transforms their customer’s investment portfolios by bringing access to alternative sources of income and growth. They have been on AWS for several years, however, to streamline the process of account creation as well as optimize their networking architecture to support a multi-environment multi-account approach, they felt the need to move to a futureproof solution. There was an opportunity to leverage industry best practices for guardrails and cloud administration. Additionally, setting up networking and security resources for new accounts resulted in manual overheads. Thus, the client sought assistance with the migration of AWS Control Tower within its AWS environment along with advisory guidance on adherence to best practices in managing an optimized AWS environment.
Challenges
- Increased risk of compliance and security breach due to recent issues with environmental security
- Manual overheads due to setting up networking and security resources for new customers
- Security risk in data accessibility as all workloads connected to main network architecture
![](https://cdn.quantiphi.com/2024/02/cb4082db-challenges-2.png)
Technologies Used
![AWS Organizations](https://cdn.quantiphi.com/2024/02/AWS-Organizations@4x.png)
AWS Organizations
![AWS Control Tower](https://cdn.quantiphi.com/2024/02/AWS-Control-Tower_light-bg@4x.png)
AWS Control Tower
![Amazon GuardDuty](https://cdn.quantiphi.com/2024/02/Amazon-GuardDuty_light-bg@4x.png)
Amazon GuardDuty
![AWS CloudFormation](https://cdn.quantiphi.com/2024/02/AWS-CloudFormation@4x.png)
AWS CloudFormation
![Amazon CloudWatch](https://cdn.quantiphi.com/2024/02/5ae3bf05-amazon-cloudwatch.png)
Amazon CloudWatch
![AWS CloudTrail](https://cdn.quantiphi.com/2024/02/AWS-CloudTrail_light-bg@4x.png)
AWS CloudTrail
![AWS Config](https://cdn.quantiphi.com/2024/02/AWS-Config_light-bg@4x.png)
AWS Config
![AWS Security Hub](https://cdn.quantiphi.com/2024/02/AWS-Security-Hub_light-bg@4x.png)
AWS Security Hub
![Amazon Virtual Private Cloud](https://cdn.quantiphi.com/2024/02/Amazon-VPC@4x.png)
Amazon Virtual Private Cloud
![AWS IAM Identity Center](https://cdn.quantiphi.com/2024/02/AWS-Identity-and-Access-Management_IAM_light-bg@4x.png)
AWS IAM Identity Center
![AWS Directory Service](https://cdn.quantiphi.com/2024/02/AWS-Directory-Service_light-bg@4x.png)
AWS Directory Service
![AWS Transit Gateway](https://cdn.quantiphi.com/2024/02/AWS-Transit-Gateway_light-bg@4x.png)
AWS Transit Gateway
![Amazon Route 53](https://cdn.quantiphi.com/2024/02/Amazon-Route-53_light-bg@4x.png)
Amazon Route 53
![AWS Lambda](https://cdn.quantiphi.com/2024/02/83e09c49-aws-lambda.png)
AWS Lambda
![Amazon SNS](https://cdn.quantiphi.com/2022/11/Amazon-Simple-Notification-Service-SNS_light-bg@4x.png)
Amazon SNS
Platform modernization to enable infrastructure security and environment re-distribution based on workloads
Solution
Quantiphi setup a Control Tower enabled AWS Organization and deployed guardrails using service control policies and rules to prevent drift from compliance best practices. Our experts migrated the legacy accounts to the new modernized infrastructure and ensured zero downtime for production-level workloads.
Additionally, Quantiphi deployed the network architecture with segregated workload with connections to the existing on-premise firewall