FreeTV Ensures Security by Leveraging AWS and Automat-it

Table of Contents

Automat-it y AWS han hecho que FreeTV sea seguro

FreeTV is a Multi-channel TV Operator that offers more than 50 linear channels with a huge VOD library. The platform allows access to channels, catchups, movies, and series anytime, anywhere.

FreeTV is a new initiative in the Israeli media market aimed to reach audiences through emerging media platforms with ground-breaking content.

FreeTV involves dozens of different technologies and applications required to be securely connected to the AWS cloud. Automat-it’s role, as the DevOps partner with a focus on security, was to apply security best practices for the multi-account AWS environment. This includes everything from centralized authentication and authorization to DDoS protection, and more.

Automat-it aligned all applications’ security best practices. Implementation included AWS Control Tower, guardrails, centralized networking, Palo Alto (for traffic filtering and VPN access), and more. The solution utilizes Amazon Aurora MySQL as the centralized, scalable database engine, Amazon ElastiCache for Redis for the caching needs. It relies on Amazon CloudFront to ensure smooth content delivery for FreeTV users across AWS presence locations. Amazon Elastic File System is used to share the data to be processed by multiple Amazon EC2 and Amazon Elastic Container Services workloads. Application Load Balancing is used to ensure the availability and performance of the workloads. The security team is continuously monitoring 5 security standards via the Security Hub.

  1. CIS AWS Foundations Benchmark v1.2.0
  2. AWS Foundational Security Best Practices v1.0.0
  3. CIS AWS Foundations Benchmark v1.4.0
  4. PCI DSS v3.2.1
  5. NIST Special Publication 800-53 Revision 5

Benefits

  1. A scalable, highly available, secured, stable, and monitored multi-account environment.
  2. Five security standards are continuously monitored by more than 400 security checks.
  3. 24/7 monitoring of alarms and a secured centralized log archive.