The Challenge

A Growing Business Required Robust Technology

As Zava’s client base began to grow, they needed to expand their capabilities while continuing to provide security and privacy to patients. Anything that increased complexity would hurt productivity. Smoother management of users and resources was a must.

Changing regulations were also providing a challenge. With the European Union General Data Protection Regulations (GDPR) on the horizon, Zava needed to handle regulatory compliance while building a clean audit trail.

Our Approach

Using Cloud Technology to Manage Growth

Zava uses sandboxed AWS accounts for development and testing, but this made billing confusing. Edrans deployed AWS Organizations to consolidate billing and enable better oversight with AWS Budgets.

Using Google Suite as an Identity Provider (IdP), Edrans created a single sign-on (SSO) solution to manage user access. Security is managed across environments from one location.

Edrans created automatic creation and deployment of AWS sandbox accounts linked to the SSO solution and centralized access control.

The Results

Centralized Billing and Service Automation

Automated service management brought powerful benefits. Now every Zava DevOps and developer works in a sandboxed AWS account with a fixed monthly budget, all monitored from a central location.

Easy access is provided through Google Suite accounts and a simple-to-use command line utility. Development is streamlined and automated.

This new process saves time and effort while making sure that cloud expenditures don’t spiral out of control. In addition, secure development environments help protect customer data.

Technologies used

Google Suite, AWS Organizations with IAM roles,
AWS Budgets, SAML, AWS SDK, Google Directory SDK, Python

Other success stories

Karumi is an international code and training consultancy. Their clients maintain long-term relationships with Karumi for the development and ongoing innovation of mobile and enterprise applications.

In 2012, Edrans led the implementation project for the new IT infrastructure built to normalize the payment process at Lastminute, one of the biggest online travel agencies in Europe, to allow its platform to comply with the requirements of the PCI DSS (Payment Card Industry Data Security Standard).

A British company that developed an application to help websites with a high volume of content to monetize the images. This way, it creates an interaction channel with the user, allowing to enrich the content with text, audios, videos or links to buy the product.