
Container Signing with AWS Signer
This project for a Fortune 500 company strengthened the security of deployed applications by implementing notarization for container artifacts, that can be used to established a chain of trust.
The customer, a large financial media company, operates a hybrid cloud environment comprised of on-premise data centers and multiple cloud providers. Rearc worked with the customer's internal cloud team, which strives to empower their application developer teams to rapidly deploy both containerized as well as VM based workloads in ANY cloud provider by providing a simple menu item of foundational compute capabilities and platforms they can choose from. This insulates developer teams from having to deal with idiosyncrasies of individual cloud compute platforms. These foundational capabilities include platforms like managed Kubernetes and cloud VMs for non-containerized workloads. The objective was to present those options as easy-to-consume, Infrastructure-as-code (IAC) modules to encourage proper, fast and secure adoption. To achieve this state, it was also necessary to provision the proper underlying networking and machine image primitives. This was also done using modular IAC.
Rearc partnered with the customer and identified use-cases for compute workloads. Rearc then leveraged Terraform in a "module library pattern" to implement and document the various flavors of GCP compute platform options that satisfied those use-cases. As a preliminary step, similar modules were created and executed for components like VPC and GCP machine images to provide the necessary primitives to achieve the higher level objective. The modules are consumed by Jenkins as the CI/CD platform to deploy compute infrastructure in GCP for Internet-facing as well as internal applications.
With Rearc’s assistance, the customer has enriched their IAC module registry with multiple modular components that are used to create compute platforms like VMs, instance groups and Kubernetes clusters in GCP projects. Application developer teams leverage these platforms to deploy their applications in GCP. These components include:
Read more about the latest and greatest work Rearc has been up to.
This project for a Fortune 500 company strengthened the security of deployed applications by implementing notarization for container artifacts, that can be used to established a chain of trust.
This project for a Fortune 500 company strengthened the security of deployed applications by implementing automated cryptographic cipher scanning, analysis, and reporting, ensuring security compliance while maintaining development velocity.
Rearc performed an application portfolio assessment and designed a migration strategy for Avesis as they moved to a new AWS Organization. Post planning, Rearc leveraged infrastructure as code to deliver a new cloud landing zone in AWS and created an account factory for future growth. Rearc integrated Avesis's new AWS environment with their new Azure environment.
This project for a Fortune 500 company strengthened the security of Databricks-integrated data lake pipelines by implementing automated vulnerability detection, secure credential management, and third-party dependency scanning, resulting in a compliant and resilient infrastructure.
Tell us more about your custom needs.
We’ll get back to you, really fast
Kick-off meeting