AWS Core

Our core service provides a full level of operational services needed to run an AWS environment, removing the need for you to source your own operations team.

We provide the following:

• Service Management
• AWS Account configuration
• AWS User Management 
• Security and Infrastructure Incident Management
• Logging and Monitoring
• Backup and Restore
• Security Event Management (via our AWS Managed Security add-on)
• Cost and Infrastructure Optimisation

AWS Managed Security

Hydras managed AWS security provides you with preventative and detective controls across your environment and implements best practice security event monitoring. We firstly configure security controls and then monitor your environment on a 24x7 basis and notify you of any critical issues.  We then help you proactively fix the problem to avoid future reoccurrence.

We cover the following security domains:

• Threat and Anomaly Detection
• Vulnerability Management 
• Compliance monitoring (Cloud Security Posture Management - CSPM)
• Data Security Posture Management - DSPM
• IAM Cloud Infrastructure Entitlement Management - CIEM

Hydras Managed Security is included as part of our Core offering but is also available as a standalone product for teams that have a level of operational functionality but need specialist Security Operations (SecOps) functionality

AWS Vulnerability Management

Reduce the risk of data breaches, exploits and systems disruptions and resolve vulnerabilities in record time.   Our continual vulnerability management service aims at identifying and addressing vulnerabilities in your system on a continual, proactive basis by scanning VM’s, Containers and Serverless Functions.

Highlights include:

• Continual scanning around the clock 
• Ability to scan VM’s, Containers and Lambda Functions
• We notify you immediately of any vulnerabilities along with a proposed solution
• Ability to include scanning in CI:CD Pipelines, meaning alerts arise before code hits production

Our Approach

We implement scanning either at the account level or the organisational level using AWS Inspector and configure it to scan EC2, Containers and Lambda Functions based on your desire.  We configure agent-less scanning for systems that don’t support the native systems manager agent.  Our security analysts are notified of any vulnerabilities as they arise and will take the appropriate action to notify you or may suppress the finding (based on a previously defined run book)

AWS Managed Platform

Our managed platform is especially designed for multi-account AWS environments utilising AWS Control Tower.  We take the burden away from Platform level administration by managing repetitive tasks and implementing centralised security best practices.  This allows you to focus on running your core applications within your AWS accounts, whilst we handle the heavy lifting.

We take care of:

• AWS account vending
• AWS Organizations management (OU’s/Accounts)
• Control Tower Security Guardrail management
• Control Tower Upgrades
• SCP Management
• SSO and Identity Centre Management

AWS Managed Web Application Firewall (WAF)

Ensuring network protection is in place for your application, via a Web Application Firewall (WAF), is of extreme importance in todays climate, however administering WAF rules on an ongoing basis can be an overhead on your developers, which can be worse if you are operating a multi-account environment. Our managed WAF service removes the need for you to manage rules.   We configure best practice WAF rulesets for you and manage these on an ongoing basis based on your application needs, making security the number one priority. For multi-account environments we can manage baseline rulesets centrally across multiple accounts and regions providing you with organisational wide WAF security management. 

AWS Managed EKS

We have experience building and managing EKS platforms and can free up your developers by managing the maintenance of EKS clusters on your behalf.  With our managed EKS service we will work with you to proactively upgrade your EKS cluster, managed nodes and AWS/Kubernetes provided add-on’s.  We can also help you implement monitoring and health checks based on EKS best practices, ensuring that you are operating efficiently.

AWS Managed Beanstalk

We manage multiple Elastic Beanstalk (EB) environments on behalf of our customers allowing their developers to focus on building applications.  We will work closely with your development team to configure and provide operational support to EB environments.   We manage EB upgrades and monitoring, assist with configuration changes, create automation scripts and help in troubleshooting issues.