Challenge Overview

The Customer need to secure their application under F9infotech portfolio. The solution we provide offer a comprehensive security solution for web application, deploy a 3-Tier application comprising a load balancer, web server, and bastion host, the implementation involves the activation and configuration of AWS Config with a focus on four rules. The first rule, “iam-password-policy” is an AWS-managed rule ensuring IAM Password Policy is set for IAM users. The second rule delves into custom configurations using AWS Config and Lambda, specifically targeting the format of existing S3 bucket names for compliance assessment. The third rule capitalizes on the auto-remediation feature of AWS Config, automatically correcting common issues such as monitoring EC2 instances to ensure they meet desired size criteria. The fourth rule revolves around aggregating compliance results across multiple regions and accounts, enhancing the holistic oversight of AWS resources. This comprehensive approach ensures robust security, compliance, and optimal performance within the AWS environment. 

Customer Introduction

Customer is a Healthcare Technology Solution Provider in India, helping healthcare clients create reliable, trusted, and sustainable ecosystems for their businesses. Tanjer brings the power of AI to build a deeply automated foundation for the healthcare organizations.

Our Approach

We conducted an assessment of the existing infrastructure to enhance the functionality and security of the platform. Our specialists used tools and different methods tools for a   comprehensive understanding of the strengths and weaknesses of the platform, and to identify areas for improvement considering different factors such as performance, Security, and Functionality.

Solution Overview

F9 Infotech delivered an exceptional solution to our valued customer, providing them with a secure and versatile cloud computing environment that has transformed their business operations. Leveraging our extensive expertise and adherence to industry best practices, we designed a robust architecture that prioritizes reliability and security.

By closely analyzing traffic, demand, and load patterns, we worked hand-in-hand with our customer to develop a highly scalable and flexible solution. Our recommendation of Amazon Web Services as the optimal hosting platform was a result of careful consideration, as it offers unmatched levels of security, usability, mobility, and an exceptional end-user experience. F9 InfoTech’s unwavering commitment to excellence is reflected in the outstanding results we deliver to our clients.

 This solution involves deploying AWS Config to enhance the security and Compliance of an application hosted on Amazon Elastic Compute Cloud (EC2) instances. The infrastructure is set up with establishment of a VPC with public and private subnets, Auto Scaling groups behind an Application Load Balancer (ALB) to ensure high availability and scalability. RDS (MySQL) for database management. For security, AWS WAF is configured. The four AWS Config rules cover MFA enforcement, custom S3 bucket name formats, auto-remediation for EC2 instances, and aggregated compliance results. These rules collectively enhance security and compliance monitoring across IAM, S3, EC2, and multiple AWS accounts and regions, providing a comprehensive approach to resource governance. We use AWS Certificate Manager (ACM) to request SSL/TLS certificates and Route 53 for DNS.

Benefits Delivered to Customer

By implemented AWS Config rules, the customer has seen a robust security and compliance framework. They are ensuring IAM password policy is set for IAM users, ensure S3 bucket name compliance using custom Lambda configurations, and automatically correct common issues like resizing EC2 instances. The rules enhance oversight by aggregating compliance results across regions and accounts.


Empowering Your Business With Technology