Global investment bank adopts database security and policy as code in Azure cloud

Policy as code ensures best-practice security baselines for cloud databases
As part of its cloud migration strategy, this global investment bank needed to be able to define standard security policies then deploy once on a virtual machine to ease future releases and ensure consistency.
Close-up of intricate blue crystal formations, symbolising the precision and security of database management and policy as code in the Azure Cloud.
Learn how a global investment bank is enhancing its security and compliance by adopting database security and policy as code within the Azure Cloud. This image of detailed blue crystal formations represents the meticulous and secure handling of data in cloud environments.

Cloud engineering

Cloud platform development

Process optimization

Rapid deployment of new projects and services

Security policies

Security best practice assured

GFT Logo Microsoft Azure featuring the GFT company logo alongside the Microsoft Azure emblem.
The GFT Logo Microsoft Azure represents the collaboration between GFT and Microsoft Azure, emphasizing GFT's capabilities in leveraging Azure's cloud computing services to deliver innovative digital transformation solutions. This partnership enhances GFT's ability to provide scalable, secure, and efficient cloud-based applications and services for various industries.
Partner
Microsoft Azure
Microsoft enables digital transformation for the era of an intelligent cloud and an intelligent edge.

Challenge

Challenge

The need for a mechanism to enforce security standards

As part of its cloud migration strategy, this global investment bank needed to be able to define standard security policies then deploy once on a virtual machine to ease future releases and ensure consistency.
To achieve this, there was a need to:

  • Set baseline security and best practice for Oracle/Postgres databases
  • Codify security policies to be applied to the Azure cloud environment
  • Add policies to a CI/CD pipeline with accompanying test framework
  • Free developers to deploy databases in Azure without needing to re-create security controls each time

Engagement

Engagement

Security process engineering

Already a trusted partner of the bank, GFT was engaged to:

  • Examine the control environment pipeline and modify to accept policy as code
  • Select a specific test framework using typescript for positive and negative policy tests
  • Document and agree to security standards and baseline with CSO
  • Create a policy-as-code library using Terraform to implement the policies
  • Perform standard tests via the pipeline to ensure the policies behaved as required

Benefit

Benefit

Self-service deployments of databases with enforced controls

GFT has empowered the bank to accelerate its cloud strategy in several ways:

  • With a codified policy set, the bank can self-serve database deployment in Azure
  • A thoroughly tested pipeline provides the ability to change security controls or add to them without introducing insecure configurations
  • Policy as code assures continuous compliance for databases on the whole platform, with any user changes not meeting the security controls being rejected

Download – just one click away

  • Close-up of intricate blue crystal formations, symbolising the precision and security of database management and policy as code in the Azure Cloud.
    Learn how a global investment bank is enhancing its security and compliance by adopting database security and policy as code within the Azure Cloud. This image of detailed blue crystal formations represents the meticulous and secure handling of data in cloud environments.

    Success story

    Global investment bank adopts database security and policy as code in Azure cloud

    Download

Read more

Banking

How can you prepare your bank for an uncertain future?

Create business value

Services

Partner

Microsoft Azure engineering excellence

Game changer

Cloud – expand your horizons