The challenge
Wilson Sons, the largest integrated port and maritime logistics operator in Brazil, embarked on a digital transformation journey to modernize its IT infrastructure and processes. With a large number of applications and extensive operations, Wilson Sons needed a secure and compliant cloud environment that would provide high availability, security, and auditing capabilities. The challenge was to establish clear usage and access rules, adhering to the Principle of Least Privilege, while ensuring the security of the new cloud infrastructure.
The solution
To address these challenges, Wilson Sons partnered with e-Core to develop and implement a cloud adoption strategy. The strategy included migrating the existing VMware-based infrastructure to AWS using VMware Cloud on AWS, while also migrating certain applications directly to AWS services.
Key elements of the solution included:
- Landing Zones: Structured environments were created for development, testing, QA, and production across multiple accounts using AWS Control Tower and AWS Organizations to enhance governance and security.
- Single Sign-On Integration: e-Core integrated AWS Organizations with Single Sign-On (SSO) to simplify access management across multiple accounts, assigning permissions based on user roles and ensuring compliance with security requirements. The integration also included Domain Controllers to manage authentication requests, such as login and permission checks.
- Transit Gateway: All accounts communicated securely through the Transit Gateway, which acted as a cloud router, ensuring encrypted data transmission and streamlined account access.
- Security and Monitoring Tools: Several AWS services were deployed to ensure security and monitoring:
- CloudTrail: Enabled centralized logging, monitoring, and retention of account activities, simplifying operational analysis and auditing.
- AWS Config: Monitored and recorded configuration changes, automating desired internal configurations.
- Security Hub: Provided security alerts and compliance status monitoring.
- IAM Access Analyzer: Logged and restricted access to a dedicated security account for monitoring.
- CI/CD Pipeline: In the second phase, a CI/CD structure was created using AWS services:
- ECR for container image storage.
- ECS Fargate for running applications.
- CodeBuild for building images, CodeDeploy for application deployment, and CodePipeline for creating delivery pipelines.
- Application Load Balancer protected by AWS WAF and ACM-managed digital certificates.
- CloudWatch and Container Insights for monitoring and alerting.
Results
- Centralized Account Management: Wilson Sons now manages all AWS accounts centrally with defined corporate policies, enhanced network traffic control, and secure connections between cloud and on-premises environments.
- Secure Cloud Migration: Applications were successfully migrated to VMware Cloud on AWS, and new applications were developed using AWS services with increased speed, availability, security, and auditing.
- Modernized CI/CD Pipeline: The CI/CD structure allowed for rapid application modernization and replication across other applications, further accelerating the digital transformation process.
At e-Core, our expertise in cloud migration and digital transformation has made us a trusted AWS partner. We have successfully guided companies like Wilson Sons through their cloud journey, ensuring security, governance, and operational efficiency every step of the way.
Ready to take your digital transformation to the next level? Discover why e-Core is a trusted AWS consulting partner. Learn how we can help your business achieve its goals with secure, scalable, and efficient cloud solutions.
