Managing risk in a regulated environment
summary
Japan’s Digital Agency builds a multi-account, IaC-driven landing zone using AWS Control Tower, AWS Config, AWS Organizations and CDK to enforce region limits (Tokyo/Osaka), guardrails and data ownership; it provisions one account per environment, separates payer accounts, and automates via service catalog and account-factory tooling. A COVID vaccination tracking in two months deploys on that platform, runs two years with no major failures, scales to 1,700+ local governments, uses no EC2, costs falling monthly and shows automation + detective controls cut risk.
AI-written summary · about
chapters (6)
- 0:00Session introductions
- 2:36Managing risk in AWS
- 10:25Digital Agency government cloud
- 27:48AWS Control Tower utility
- 39:16Deep dive into agency strategy
- 59:34Conclusion and summary
related talks
54mAccelerating innovation securely, featuring JPMorgan Chase
21mSecuring hundreds of AWS accounts for streamlined governance
28mStay in Control While Moving Fast
36mBuilding a Secure AWS Self-Service Platform for Regulated Industries
47mManage AWS Cloud Environments Easily and Securely
32mCreate a cloud-ready environment
32mBuilding an Enterprise Grade Multi Account AWS Environment
52mManaging security with a unified strategy, featuring Nubank