Our solution
Cloud technologies used
AWS Lambda
Amazon Elastic Compute Cloud (EC2)
AWS Key Management Service (AWS KMS)
Amazon CloudFront
GDPR-compliant S3 usage for digital assets - protecting end user data
X
The client, which operates several well-known brands and a popular social network on AWS public cloud technology, wanted to migrate additional services to increase security. However, the termination of the EU-US Privacy Shield posed a significant business risk as concerns arose about compliance with EU laws when using cloud services. The protection of personal data in social networks became a top priority and required the implementation of legal requirements in technical solutions.
Alice&Bob.Company implemented highly configurable and encrypted S3 buckets utilizing the AWS KMS CMK feature. This implementation provided the customer with flexible access controls to S3 buckets while adhering to best practices for data protection. In addition, a bespoke asset server was developed that allowed the customer to use signed URLs to authorize access to protected assets stored in encrypted S3 buckets within CloudFront. In particular, the solution provided a convenient and maintenance-free approach to automating key rotation, further enhancing security measures.
After a successful collaboration with Alice&Bob.Company's experts, the client was able to demonstrate its commitment to data protection and compliance, ensure a trustworthy platform for its users and strengthen its position as a responsible industry leader.
