Sunray Group is a family-owned, multifaceted corporation specializing in hospitality and development. Sunray believes in the strength of brand equity. The group is successfully building an ever-increasing portfolio of award-winning brands, which include Marriott, Starwood, Hilton, Radisson, Best Western, IHG, Wyndham and Choice Hotels. They have also developed prominent brands such as Tim Horton's, McDonald's, Fionn MacCool’s, Shell and Petro Canada.
The client had their infrastructure setup on-premises. The challenge was meeting the expectations of the customers in terms of delivering the stable and sustainable service through scalable, secured and reliable infrastructure solution apart from cost-optimization. The other challenges faced by the customer are maintaining compliance, managing resource configurations, that has impact on the business operations.
Our team implemented AWS Config, a comprehensive configuration management and compliance service from Amazon Web Services. The solution included the following components:
AWS Config Setup: We configured AWS Config to record all Windows instances in the Sunray AWS account, capturing detailed configuration data and changes.
Configuration Rules: We defined custom configuration rules tailored to Windows instances, ensuring compliance with industry standards and internal policies. Rules were created to monitor critical security configurations, such as password policies, firewall settings, and access controls.
Change Monitoring: AWS Config enabled continuous monitoring of Windows instance configurations. Any configuration changes or drifts were immediately detected, allowing Sunray to respond promptly.
Automated Remediation: Leveraging AWS Lambda, we implemented automated remediation actions for non-compliant configurations. This streamlined the change management process and reduced manual efforts.
Scalability :The appropriate computer resources are setup in auto scaling to meet the varying demands of user traffic to the application.
Reliability : To ensure the reliability and availability of the applications multi-AZ solutions are used for highly available applications and databases.
Security : In order to secure the applications data and infrastructure the relevant security controls are applied using IAM service, security groups, network ACL’s, MFA’s, encryptions, etc.
Cost Optimization : All the AWS services and resources are selected and sized for the best possible cost optimization of the application resources. The long running compute resources are reserved as Reserved Instances that reduced the cost significantly.
Hallmark by implementing AWS Config for their AWS Windows instances, Sunray achieved improved configuration management, enhanced compliance, and streamlined change control. The comprehensive visibility and automated monitoring capabilities provided by AWS Config empowered them to maintain a secure and compliant environment while reducing manual efforts and associated costs.