Payment Solutions for Businesses Provider
Indonesia-based payment solutions provider that enables businesses to streamline and scale their digital transactions. Their seamless cloud-native platform offers services such as payment orchestration, reconciliation, and embedded financial features, helping enterprises manage cash flow and customer payments efficiently.
About the Customer
Indonesia-based payment solutions provider that enables businesses to streamline and scale their digital transactions. Their seamless cloud-native platform offers services such as payment orchestration, reconciliation, and embedded financial features, helping enterprises manage cash flow and customer payments efficiently.
With sensitive financial data flowing through their systems, the customer requires strong identity governance and data security to maintain compliance, build customer trust, and ensure secure operations at scale.
Customer Challenge
As the customer scaled its platform, managing user access across multiple AWS accounts became increasingly complex:
- Difficulty synchronizing user attributes and group-based access control across accounts.
- Manual provisioning and de-provisioning created risks of orphaned accounts and unauthorized access.
- Enforcing least-privilege policies was challenging, leading to security gaps.
- Identity governance was inconsistent, creating compliance risks and operational inefficiencies.
To sustain growth and meet regulatory expectations, the customer required a centralized, automated identity management solution integrated with its existing corporate directory.
Partner Solution
Partnering with PT Innovation Cloud Services (ICS Compute), an AWS Advanced Consulting Partner, the customer implemented a secure identity and access management system on AWS:
- Integration of Azure AD with AWS IAM Identity Center (SSO)
- Azure AD serves as the central identity provider.
- Employees authenticate with existing credentials for seamless single sign-on to AWS resources.
- Azure AD serves as the central identity provider.
- Automated Provisioning with SCIM
- AWS Identity Center SCIM integration ensures real-time user lifecycle management.
- When users are added, updated, or removed in Azure AD, permissions on AWS are instantly adjusted.
- AWS Identity Center SCIM integration ensures real-time user lifecycle management.
- Security Monitoring & Compliance
- Amazon GuardDuty and AWS CloudTrail monitor for anomalous login attempts or unusual IAM activities.
- Amazon CloudWatch + AWS Lambda provide automated remediation.
- Amazon SNS delivers immediate alerts to the security team for faster incident response.
- Amazon GuardDuty and AWS CloudTrail monitor for anomalous login attempts or unusual IAM activities.
This solution ensured consistent, secure access management while reducing administrative overhead.
Results and Benefits
- 50% reduction in IAM management effort, freeing IT resources for higher-value work.
- Improved security posture through automated de-provisioning, eliminating risks of unauthorized access.
- Stronger compliance and audit readiness with centralized logging and monitoring.
- Reduced incident response times, enhancing resilience against identity-based threats.
About the Partner
Innovation Cloud Services (ICS Compute) is Indonesia’s first AWS Advanced Consulting Partner, specializing in secure cloud adoption, modernization, and managed services. Recognized with AWS Competencies in Migration & Modernization, DevOps, Resilience, and Generative AI, ICS Compute helps enterprises transform operations with scalable, secure, and compliant AWS solutions.