Using AWS services for secure data storage and enhanced security
About the Client
Our client is a service sector company specializing in delivering top-quality medical imaging and radiotherapy devices. The devices are tailored to individual user needs and ensure efficient service both during and after the warranty period.
Challange
The primary requirement of the project was to provide additional infrastructure for secure data storage and an additional location for Veeam backups, following best practices for backup storage. Another critical requirement was to enhance resilience against ransomware attacks.
A major challenge was the data transfer to AWS due to the large volume of data and the client’s limited internet bandwidth. However, the transfer itself was seamless. Importantly, using AWS DataSync, the data was automatically copied after specifying the source location (Windows CIFS share) and the destination (AWS S3).
Solution
As part of the project, an architecture based on AWS services – Amazon S3 and AWS DataSync – was implemented and integrated with the client’s environment, including their local disk array, S3 service clients, and Veeam backup system.
During the project:
- We created dedicated S3 buckets.
- We allocated resources for installing the AWS DataSync agent and configured synchronization between AWS cloud and the client’s location.
- We created and granted permissions to users for AWS resources through Identity Access Management.
- We installed and configured S3 clients.
- We set up Veeam backup software.
- We configured AWS CloudTrail service to monitor the entire solution.
Services utilized
- Amazon S3
- Amazon S3 Glacier Deep Archive
- AWS DataSync
- AWS Identity and Access Management
- AWS CloudTrail
Benefits
The key benefits resulting from the project include:
- Secure data storage.
- Provision of an additional location for backup data storage.
- Flexible scalability of the solution.
- Pay-as-you-go pricing based on actual resource consumption.
