Passionate – Dedicated – Professional
Insurance Company: Design and Implement Cloud Governance for Security, Compliance, and Cost
The Challenge
An insurance company’s migration to the cloud was going full steam ahead across all homegrown and acquired business units. As required access and responsibility was delegated out to more teams and accounts beyond the cloud center of excellence, operational risks emerged and unnecessary costs rose. Sharing best practices, standards, and learnings through word of mouth and wikis had become inefficient. It became apparent that a cohesive strategy to secure and govern cloud resources across all cost centers was needed.
The True Up IT Solution
The company partnered with True Up IT to build out an automated cloud governance strategy. True Up IT built custom tools that identified, alerted and remediated deviations from established security, compliance, and cost optimization standards. We developed serverless tools to enforce least privilege in AWS IAM and S3 which help to mitigate risk of unintended access and data leakage. We also implemented a solution to focus on cost optimization to make it simple for non-production workloads to run as required instead of 24/7, delete orphaned resources, and enforce required cost ownership tags.
Outcome:
-
Enabled the company to scale the cloud service across more teams and accounts while achieving operational excellence
- Helped mitigate data loss risks
- Enforced important controls required for security and compliance frameworks
- Achieved cloud cost optimization at scale

