Implementation of Secure Web Service on AWS

Description

Deployment of Web Service on AWS


Challenge

To develop a solution that would display the electoral results of the presidential elections on a web service, using the web files provided by the client. Ensuring the availability and integrity of the displayed data was a key component, in addition to the speed and accessibility of the site from anywhere in the world, with 99.99% availability. 


Solution

A security strategy was implemented based on the use of SaaS, SecaaS, and STaaS services. In this approach, the client provided the inputs and the results were packaged into a data set to be directly hosted on the service.

To accomplish this, the AWS S3 service was used, including change history and active access auditing. This service was configured behind CloudFront and policies were established that allowed only the Content Delivery Network (CDN) to access the service, preventing direct access from the Internet. Additionally, the DNS service was managed through Route53 and additional security measures were implemented using the AWS Web Application Firewall service. This last one protected the site against various web attacks, making use of OWASP rules.

A monitoring panel was also developed using AWS CloudWatch, in addition to these measures, additional security controls such as CloudConfig and CloudTrail were enabled to supervise all activities in the account.

Thanks to this comprehensive security strategy, the service received more than a million visits without experiencing any failure.


Sector

Private


Service

Implementation of IT and Cybersecurity Solutions


Client

Electoral Technology Provider


Location

Buenos Aires, Argentina


Audience

B2B

Scroll to Top