SoftwareAG Government Solutions (GS) is an independent, wholly owned subsidiary of Software AG. Customers include some of the biggest agencies in the public sector.
The Challenge
SoftwareAG Government Solutions embraced Amazon Web Services (AWS) for better elasticity, cost savings and access to compute resources. Historically, they leveraged a corporate, home-grown tool to provision and manage compute resources for customer demonstrations. The team required a new approach in order to “firewall” access to the US environments.
Goals included:
- Manage access and data security
- Increase speed and flexibility of self-service provisioning without losing control
- Leverage new cloud services
The Solution
DivvyCloud protects cloud and container environments from misconfigurations, policy violations, threats, and IAM challenges. As Chris Borneman, Vice President, Software AG says, “DivvyCloud provides next generation automation, management and insights into our cloud infrastructure.” The Software AG team turned to DivvyCloud to gain visibility and real-time automated remediation across multiple AWS accounts, regions, and services. .
The Software AG team leveraged DivvyCloud to achieve continuous security and compliance, and improved governance of their AWS environments:
- Detailed Permissions. Using DivvyCloud, Software AG has implemented guardrails that ensure the proper access levels are maintained for EC2, S3 and networking services. This reduces risk and complexity for team members.
- Auto-Scheduling. Using DivvyCloud automation they are able to match infrastructure to the dynamic needs of sales teams for demo / custom solution environments.
- Turns off infrastructure when not in use to reduce security footprint and save money.
The Results
Since 2018, Software AG has achieved 50% faster self-service driven by our tool’s ability to quickly identify and remediate compliance issues made during deployment.
DivvyCloud has helped Software AG secure their AWS services to transform digital innovation. Our differentiating capabilities around compliance packs, remediation, and scorecard visibility enabled them to maintain near real-time compliance and start their automation journey.