CLOUD/ NETWORK/ SYSTEM:
A major player in the security of information systems
01
The context:
The client is planning to migrate from IBM Cloud to AWS, and wants to streamline and fully automate the provisioning of its infrastructure, as well as new accounts and technical foundations. It also wanted to leverage this industrialisation and replicate it across GCP and Microsoft Azure providers as part of its multi-vendor strategy.
02
Problem solver approach:
Design, code and deploy a landing zone for 10+ accounts: multi-provider, multi-account, automated, modular and extensible provisioning/configuration.
03
Result:
Delivery of clean, auditable code, a manifest for dynamic addition and configuration of providers, accounts and resources. Centralised network architecture (Hub and Spoke) for VPC Peering, VPN connections with high availability/load balancing, DMZ and DNS...
04
Technical stack used:
AWS, GCP, Azure, Python, Terraform, Boto3, Git