The Challenge

With multiple branches across Southeast Asia, the customer recognised the potential of adopting cloud technology to fulfil their unmet business development requirements. Consequently, they were prepared to invest substantially in cloud development, encompassing personnel, hardware, and software. Their objective was to implement solutions that facilitate scalable infrastructure and operations, meet global security standards, and effectively reduce IT expenses.

The customer aimed to deploy individualised applications for each employee across their Southeast Asian branches. These applications should be connected to Active Directory and utilise Multi-Factor Authentication (MFA) to enhance security. While they sought to leverage the features, convenience, and advantages of the AWS cloud, they also prioritised maintaining privacy from the corporate side. To achieve this, the customer intended to have dedicated AWS accounts for each function, ensuring centralisation. Consequently, multiple accounts would be necessary to accommodate their requirements. Additionally, they required a Virtual Private Network (VPN) to establish secure connectivity between the on-premises infrastructure and the AWS account, thereby safeguarding incoming connections and ensuring they are linked to the infrastructure account.

The Solution

To meet the customer's requirements, Westcon has recommended utilising various AWS Cloud services. We have advised the customer to deploy services such as Elastic Compute Service (EC2), Relational Database (RDS), Elastic Load Balancer (ELB), as well as essential security tools like Web Application Firewall (WAF), AWS GuardDuty, and monitoring solutions. The partner's data centres in Southeast Asia, specifically in Singapore and Jakarta, will serve to facilitate the expansion of AWS Cloud infrastructure.

To mitigate the risk of potential mistakes during deployment by users or the dedicated cloud team, a management account has been created to enforce restricted privileges. Within this management account, additional measures such as Service Control Policies (SCP), Permission sets, Multi-Factor Authentication (MFA), and AWS Single Sign-On (SSO) have been implemented.

Furthermore, the application is deployed within a member account connected to the infrastructure account, ensuring a streamlined and secure deployment process.

The Benefit

The customer expresses complete satisfaction with the solutions provided, as they have effectively resolved all the IT challenges they encountered. These challenges encompassed infrastructure scalability, operational excellence, and cost reduction. By leveraging operational expenses (OPEX), the customer has successfully reduced their costs. Additionally, transitioning away from traditional hardware maintenance and security assessment activities has improved and simplified operations. As a result, the customer can now focus more on their business development initiatives.

The customer has experienced numerous benefits and encountered no issues while utilising AWS services. They find it effortless to manage security measures and policies, as well as efficiently handle traffic management. Furthermore, even members of newly joined accounts can readily access and utilise the same permissions and policies, as they are easily reusable.

Westcon have highly experienced AWS Certified Professionals who can assist you with your AWS infrastructure, and help you recommend, analyse and secure your workloads. If you have any questions or concerns about AWS cloud environment security, please do not hesitate to contact the Partner Success Centre at

NZ Cloud Sales:    +64 9 477 7211              Email:  [email protected]
AU Cloud Sales:    +61 2 8412 1212              Email:  [email protected]
SG Cloud Sales:    +65 6424 0570              Email:   [email protected]
ID  Cloud Sales:    +62 21 8062 1470          Email:   [email protected]