Swisscom's pioneering journey to run regulated workloads on AWS(SEC205)
summary
Swisscom moves mission‑critical regulated workloads into the Zurich AWS region after a three‑year partnership and a risk‑based technical framework that maps laws to requirements, then to controls and a landing‑zone blueprint. The build uses the Nitro system for zero‑operator access, KMS envelope encryption with CloudHSM options, mandatory region scoping, TLS 1.2, memory/instance encryption and immutable backups. Legal and CPU‑level analysis on US surveillance laws reduces residual lawful‑access risk and it runs in production.
AI-written summary · about
chapters (4)
- 0:00Introduction and speakers
- 12:59Swisscom’s data protection journey
- 38:59Building the risk and compliance blueprint
- 48:35Q&A and closing remarks
related talks
09mLocal Welcome - Switzerland
45mAddressing sovereignty concerns: Privacy, compliance & vendor lock-in
17mControl without compromise: AWS European Sovereign Cloud
01h 01mAWS Summit Zurich Keynote 2025
50mNovel Swiss Re Framework Shortens 800+ Application Multi-Cloud Conversion
39mHow SBB brings cloud to on-prem & runs critical apps on AWS Outpost
38mTowards the Cloud Native Telco: Learning from the Trenches
01h 00mBehind the scenes: AWS investments in security innovation