Plaza Premium

AWS Well-Architected framework is always a golden standard to build secure, high-performing, resilient, and efficient infrastructure for applications and workloads. Nextlink, as AWS premier partner, straightly follows this guideline to design and implement the whole infrastructure for Plaza Premium, so as to prepare them for a growth footprint on cloud technology.

Cloud security at AWS is the highest priority. As an AWS customer, Plaza Premium benefits from a data center and network architecture built to meet the requirements of the most security-sensitive organizations. Nextlink has designed a security principle based on AWS best practices and AWS Cloud Adoption Framework (CAF), so as to provide a reliable and compliance-ready security solution for our customers under the strategy of Directive, Preventive, Detective and Responsive.

1. GuardDuty is able to detect threats and continuously monitor for any malicious activity and unauthorized behaviour. GuardDuty is integrated with threat intelligence feeds. Coupled with machine learning it can perform automated remediation actions by leveraging CloudWatch events thus reducing client’s remediation and recovery time.

2. WAF are costly and hard to manage in an on-premise environment. But in AWS, AWS WAF is a fully managed layer-7 application firewall which is well integrated with CloudFront and ELB to protect client’s applications from DDoS attack and common attack patterns such as SQL ingestion and Cross-site scripting.

1. KMS is a managed encryption service to provide a highly available key storage, management, and auditing solution for data encryption across AWS services and within self-own applications.

2. ACM is a managed SSL certificate provider, which generates SSL certificates for free, highly-integrated with AWS services to serve HTTPS requests with in-transit encryption.

1. CloudWatch as a monitoring and logging service to centralize log management and alarm configuration. All EC2 should have CloudWatch log agent and IDS agent installed, so that both system, application log and other custom log can be sent to CloudWatch log.

2. CloudTrail as a logging service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail, you can log, continuously monitor, and retain events related to API calls across your AWS infrastructure.

3. ElasticSearch Service as a logging centralization and visualization tool. By utilizing Kibana dashboard, users can visualize the findings and convert data into actionable intelligence.

1. Systems Manager Patch Manager to automate the process of patching managed instances with security-related updates.

2. ISV solutions including Tenable and Trend Micro to further harden the security protection on OS and S3 layer anti-virus.