When a public sector department needed to adopt AWS to deploy a workload, it faced a critical challenge: no prior AWS experience or staff for in-house management. Akkodis stepped in to design a cost-effective, scalable, and maintainable cloud environment, ensuring a smooth transition while setting the foundation for future growth and operational independence.

Strategic Deployment for AWS Onboarding

Akkodis followed AWS and DevOps best practices to establish a robust AWS Organization and Landing Zone. Using AWS Control Tower and Landing Zone Accelerator, the environment was built with:

• A multi-account structure to ensure governance, security, and scalability.
• Organizational Units (OUs) to segment Infrastructure, Security, and Workload accounts.
• CI/CD (Continuous Integration/Continuous Deployment) pipelines for consistent resource management.

Key Takeaway: “The architecture was optimized for future expansion while balancing immediate cost concerns.”

Cost-Effective Networking Design

To minimize infrastructure costs, Akkodis implemented a Shared VPC (Virtual Private Cloud) approach:

• Shared VPC: Deployed in the "shared-prod" account and shared across other accounts.
• Efficient Subnet Allocation: A /16 IPv4 (Internet Protocol Version 4) CIDR (Classless Inter-Domain Routing) block was used to accommodate future growth, ensuring scalability for additional workloads.
• Selective Network Isolation: Network ACLs (Access Control List) prevented cross-environment communication.

This strategy reduced costs without compromising security or scalability, addressing the department's immediate financial constraints while allowing flexibility for growth.

Security and Governance Excellence

Akkodis prioritized security with a multi-layered approach:

• AWS IAM (Identity and Access Management) Identity Center: Streamlined user and role management across accounts.
• CloudTrail and Config: Provided centralized logging and compliance monitoring.
• Security Hub and Trusted Advisor: Enhanced security posture with automated recommendations and alerts.

Result: The environment meets compliance standards while enabling the department to manage security effortlessly.

Outcome: A Scalable Future

The AWS migration project delivered:

1. A scalable cloud architecture to support future workload expansion.

2. Optimized operational costs through shared infrastructure and DevOps practices.

3. A reliable starting point for the department’s AWS journey, fostering transformation in operational capabilities.

This success underscores Akkodis’ commitment to enabling public sector efficiency and innovation through tailored cloud solutions.