Hopsy retires every long-lived IAM key across a governed AWS Organization
AWS Control Tower
AWS Identity Center
AWS Security Hub
Well-ArchitectedHopsy is an all-in-one digital platform that equips hospitality businesses with tools for managing every aspect of their operations — from streamlining paperwork to maintaining compliance with health, safety, fire, and food standards — in a single interface. The partnership was signed in London in July 2024.
AWS OrganizationsThe article, as published
One published write-up, from a partnership signed in London in July 2024 — the fullest technical account we have published, naming each intervention and what it removed.
Elevating Hopsy’s Cloud Infrastructure to Ensure Success
- Location
- London
- Partnership date
- July 2024
Background
Hopsy is an all-in-one digital platform that equips hospitality businesses with a comprehensive suite of tools for managing every aspect of their operations.
From streamlining paperwork to maintaining compliance with health, safety, fire, and food standards, HOPSY integrates every operational need into a single, user-friendly interface.
The challenge
Hopsy revolutionizes how businesses manage their operations, combining advanced technological features that ensure seamless business performance and compliance.
Hopsy faced several challenges in managing and optimizing its AWS Cloud Infrastructure, including:
- Cloud Governance — Running multiple projects in a single AWS account, leads to inefficient governance.
- Security Management — Dependence on long-running IAM users with access keys, posing security risks.
- User Identity Management — Inefficient management of user identities and access, requiring a more streamlined and secure solution.
- Security Operations — Need for comprehensive security operations management to maintain a robust security posture.
The solution
By collaborating closely with HOPSY, VeUP has fortified their AWS cloud infrastructure, ensuring robust scalability, reliability, and security. Our work involved optimizing their cloud environment to handle their sophisticated operational tools, enhancing their data management processes, and improving overall system performance.
VeUP collaborated with Hopsy to address these challenges through a series of targeted interventions including:
- AWS Well-Architected Review — Conducted a thorough review of Hopsy’s AWS workload to identify critical improvements in cloud governance.
- Implementation of AWS Organizations and Control Tower — Implemented AWS Organizations and AWS Control Tower to support Hopsy’s multi-account strategy, providing a centralized management framework.
- Security Governance Enhancements — Assisted in implementing a Single Sign-On solution using AWS Identity Center, eliminating the need for long-running IAM users with access keys.
- Activation of AWS Security Hub — Enabled AWS Security Hub for comprehensive security management and incident monitoring.
Achievements
Improved control and oversight of AWS accounts through the implementation of AWS Organizations and AWS Control Tower, as well as Streamlining multi-account management, reducing administrative overhead and potential errors.
Enhanced user identity management and security through the implementation of AWS Identity Center and eliminated security risks associated with long-running IAM users with access keys.
Activated AWS Security Hub, providing Hopsy with a centralized platform for managing security operations and gained comprehensive insights into security posture, enabling proactive identification and mitigation of security threats.
Optimized AWS environment, ensuring it was secure, scalable, and well-governed and reduced operational costs and improved resource utilization through better governance and security management practices.
Reproduced from VeUP’s published case-study archive, published on veup.com in 2024. Claims appear as published.