About Client
AWS Support Services-Digital Tribe is the United Arab Emirates’s leading full-scale Digital Marketing agency in Dubai, enabling brands to grow online. Digital Tribe creates robust websites, web applications, branding, content, and digital marketing experiences. It is an agency that delves deep into the details of every sector.
- https://digitaltribe.ae/
- Location: United Arab Emirates
Project Background
Digital Tribe were embarking on the journey of launching a full suite of digital product and zeroed upon AWS as their choice for a cloud environment. They wanted to create new applications and migrate to cloud services to improve their scalability, ensure availability, minimize latency, and reduce costs. They also wanted to accelerate their digital transformation and add more excellent business value through AWS Development Environment best practices. Lastly, with the new apps, they wanted to monetize and create SAAS-based offerings for the end users. For all this, it was necessary to do AWS Environment Setup, which follows best practices and meets compliance which can be used as a base for implementing more applications.
Scope & Requirement
In the 1st Phase of the AWS Environment Setup, implementation was discussed as follows:
- Setting up AWS environment for multi-account, Multi environment setup
- Ensure that all AWS accounts follow the same policies and adhere to all legal and regulatory compliance.
- Setup connectivity between different AWS accounts and on-prem network
- Setup AWS security hub to provide a comprehensive view of the security state
Implementation
Technology and Architecture
Technology/ Services used
We used AWS services and helped them to setup below
- Cloud: AWS
- Organization setup: Control tower
- AWS SSO for authentication using existing AzureAD credentials
- Policies setup: Created AWS service control policies
- Templates created for using common AWS services
Security & Compliance:
- Tagging Policies
- AWS config for compliance checks
- NIST compliance
- Guardrails
- Security Hub
Network Architecture
- Site to Site VPN Architecture using Transit Gateway
- Distributed AWS Network Firewall
- Monitoring with Cloud Watch and VPC flow logs.
Backup and Recovery
Cloud systems and components used followed AWS’s well-Architected framework and the resources were all Multi-zone availability with uptime of 99.99% or more.
Cost Optimization
- Alerts and notifications are configured in the AWS cost
Code Management, Deployment
Cloudformation scripts for creating stacksets and scripts for generating AWS services was handed over to the client
Challenges
- Mobile app should be scalable
- Multi Language support required
- It was a bit of a challenge to ensure the new environment meets all of the compliance criteria and still remain cost effective
Support
- 1 month of extended support
- A template for Cloud formation stack to create more AWS resources using the available stacks
- Screen-sharing sessions with a demo of how the services and new workloads can be deployed.
Next Phase
Ongoing support for AWS Review, Design, and Architecture Setup
