T-Systems supported the chemical company’s central IT with updating the AWS Landing Zone between October 2020 and March 2021. Scrum was used for the development as an agile process model. “Working in an agile partnership not only enabled us to make swift progress on the project, but also gave us a level of transparency at every stage of the project that we had never experienced before,” summarizes a representative of the customer. The tool support for the DevOps project came from AWS.
The agile approach was no coincidence: essential interfaces to AWS services were not fully developed and deployed by AWS until later in the project. AWS Cloud Trail, AWS Config, GuardDuty, and Security Hub had to be integrated “on the fly”. To ensure the requisite coordination and corresponding status checks on the AWS side, T-Systems was in continuous exchange with the partner solutions architect (PSA) from AWS.
As part of the landing zone relaunch, the project partners also implemented a connection to the customer’s internal Azure Active Directory (AD). That means that if an employee of the chemical company orders AWS resources via the ordering portal, the employee will be identified directly via the AD. The resources are then allocated directly to their cost center and they can enjoy single sign-on through synchronization with the AWS SSO.