Speakers: Ian Donaldson, Senior Consultant, Sourced Group Kevin Littlejohn, Senior Consultant, Sourced Group

1. Unlocking Developer Potential in Regulated
Environments

2. Ian Donaldson
Senior Consultant
ian.donaldson@sourcedgroup.com
Kevin Littlejohn
Senior Consultant
kevin.littlejohn@sourcedgroup.com
Our Team
Singapore | Sydney | Toronto

3. "Having a partner with almost a decade of cloud
transformation experience gives us confidence as we
continue this journey. Their depth of knowledge of cloud
transformation in financial services made them a logical
choice.”
- Clara Lee Hui Theng, Head of Technology
“Sourced was instrumental in the successful migration of
singaporeair.com. We chose Sourced because of their
demonstrated eight years experience in successfully
delivering similarly complex enterprise cloud projects in
highly regulated environments.”
- George Wang, SVP IT - Singapore Airlines
Financial Services Aviation Telecom MediaUtilities

4. Three Learnings

5. Pattern 1
Enabling self-directed learning inside a regulated
organisation

6. “We want to enable secure and compliant self-
directed learning at scale.”

7. Considerations
Self-service Compliance baked-in
Encourage learning Manage costs

8. Dynamic Account Management
AWS Account
Networking
Identity and
Access
Identity Federation
Account Engine
Network Engine

9. Dynamic Account Management
AWS Account
Networking
Identity and
Access
Continuous
Compliance
Monitoring CloudWatch
CloudTrail
AWS Config
SCP
Identity Federation
Account Engine
Network Engine

10. Dynamic Account Management
AWS Account
Networking
Identity and
Access
Continuous
Compliance
Monitoring
Cost Control Budget Alarms
CloudWatch
CloudTrail
AWS Config
SCP
Identity Federation
Account Engine
Network Engine

11. Solution Architecture
Provisioning Account
Amazon API Gateway Provisioning Lambda
Invoke
User
Self Provisioning

12. Solution Architecture
Provisioning Account
Amazon API Gateway Provisioning Lambda
Ephemeral Account
Budget ($100)
ProvisionInvoke
User

13. Solution Architecture
Provisioning Account
Amazon API Gateway Provisioning Lambda
Ephemeral Account
Budget ($50)
ProvisionInvoke
User
Self-guided learning

14. Solution Architecture
Provisioning Account
Amazon API Gateway Provisioning Lambda
Ephemeral Account
Suspend access Lambda Budget exceeded
SNS topic
Budget ($0)
ProvisionInvoke
Invoke Budget exceeded
User
Self-guided learning

15. Solution Architecture
Provisioning Account
User
Amazon API Gateway Provisioning Lambda
Ephemeral Account
Suspend access Lambda Budget exceeded
SNS topic
Budget ($0)
ProvisionInvoke
Invoke Budget exceeded
Access
Revoke
User

16. Innovation Credits

17. Pattern 2
Relational data

18. Why?
Reduce errors Share knowledge
Remove bottlenecks On-demand model
Investigate on prod-like data

19. “We want to provide developers with compliant,
production-like data.”

20. Solution Architecture
Production Data Store
PII Data
Production AWS Account

21. Solution Architecture
Production Data Store
PII Data
AWS Glue Production Data Store
Non-PII Data
De-identified data Snapshot
Anonymised RDS Snapshot
Production AWS Account
Extract
Production Replica
PII Data

22. Solution Architecture
Development AWS Account
Development Data Store
Anonymous, prod-like data
Cross-accountshare
Developers
Load test
Production Data Store
PII Data
AWS Glue Production Data Store
Non-PII Data
De-identified data Snapshot
Anonymised RDS Snapshot
Production AWS Account
Extract
Production Replica
PII Data

23. Taking it further

24. What else can we do with this?
Cut-down snapshots for faster testing
Uplift from on-premise for cloud migration testing
Trigger provisioning in other integrated systems for integrated test
environments
Overnight (batch) analytics and warehousing

25. Pattern 3
Real-time analytics on sensitive data

26. Why?
Improved visibility Near-real-time analytics
Near-real-time compliance Aggregate and filter events

27. “We want a near-real-time stream of only the
relevant production data.”

28. Demo

29. Solution Architecture
Production AWS Account
Events
Anonymisation
Analytics Bastion
Events
(anonymised)
Events
(sensitive)
DynamoDB Streams

30. Highly Regulated and Highly Agile
Enable self-directed learning Filtering and sharing real time
events
Sharing production data

31. Find Out MORE:
Visit Us: At our booth or online – www.sourcedgroup.com
Careers: www.sourcedgroup.com/careers
In the news:
• Computerworld (2016):
• Foreign Exchange Service OFX Embarks on Cloud Migration
• Connecting the Australian Channel (2015):
• Meet the Partner who took Qantas to the AWS Cloud
• The Australian Business Review (2015):
• Greater Buying Power lets Aussie bank on Adobe Experience Manager
• ChannelAsia
• Sourced Group partners with RHB Singapore in cloud transformation push
Our Awards:
• ASEAN – Rising Star (2018)
• APAC Partners Summit - Invent & Simplify (2015)
• Global - Customer Obsessed Partner (2014)