Elevating Enterprise Security: ANDPAD’s Strategic Transformation

A forward-thinking organization required a secure and scalable solution to protect its sensitive AWS S3 data while optimizing operational efficiency and reducing costs. By implementing Cloud Storage Security’s Antivirus for Amazon S3, ANDPAD established real-time malware detection, processed data efficiently at scale, and maintained robust in-tenant security—all while achieving significant cost savings.

Customer Challenge

ANDPAD’s SRE team faced increasing risks as the volume of user-uploaded files grew, exposing the organization to malware threats that could compromise critical operations. Their existing solution using an open-source software, which relied on Lambda functions, became unsustainable after support was discontinued and execution challenges escalated. ANDPAD needed a comprehensive and production-ready solution to safeguard data integrity, ensure regulatory compliance, and manage dynamic file workloads.

Client Needs

• Advanced Malware Detection:
  • Scanning solution proactively identifies and neutralizes threats before impacting sensitive data and downstream processes.
• Scalability & Performance:
  • An automated system capable of processing large-format files and managing fluctuating data ingestion rates without interrupting mission-critical workflows.
• Security & Compliance:
  • A solution that ensures all scanning processes remain securely within the AWS environment to meet strict regulatory requirements.
• Ease of Installation and Upgrade:
  • An installation process via CloudFormation with an intuitive Console on ECS Fargate that streamlines configuration and facilitates easy upgrades through built-in notifications.

Solution

ANDPAD deployed Cloud Storage Security’s Antivirus for Amazon S3—a serverless, scalable malware detection solution designed for complex AWS environments. The solution was installed using CloudFormation and managed through a web-based Console running on ECS Fargate, with Agent tasks that can auto-scale responding file ingestion events.

Key technical features include:

• Dual-Engine Scanning:
  • CSS Secure scanning files up to 2GB and Sophos supporting Extra Large File Scanning up to 5TB, enabling the customer to manage diverse file types and sizes.
• Flexible S3 Bucket Configuration:
  • Administrators can configure specific buckets and set Scan and Skip Lists for precise targeting of scan paths.
• Security-Focused Network Configuration:
  • Multiple deployment options available —including Standard and Private Deployment (with Private Load Balancer Option) to restrict external access via VPN and enhance overall security.
• Real-Time Notifications and Automated Actions:
  • Integration is available with several third parties, like Slack, to promptly alert teams about scan results.
  • Solution supports automated actions for deleting, moving, or retaining infected files based on organizational policies.

Results: Enhanced Security, Scalability & Operational Efficiency

• Advanced Malware Detection:
  • Running a dual engine deployment has identified and neutralized threats in large multi-TB files, ensuring that malware is addressed before it can disrupt critical processes.

• Scalability & Performance:
  • Automated scaling of Agent tasks has enabled seamless ingestion and scanning of terabytes of data, eliminating bottlenecks and adapting to fluctuating workloads.
• Security & Compliance:
  • All scanning operations are conducted within ANDPAD’s secure AWS environment, ensuring continuous adherence to regulatory standards and protecting data integrity.
• Operational Flexibility:
  • The ease of installation/updating, dedicated CSS support, and customizable network configurations have provided a solution adaptable to ANDPAD’s evolving security needs.

Deployment & Success

In January 2024, ANDPAD introduced Antivirus for Amazon S3 into its production environment after extensive operational and performance testing. ANDPAD’s SRE Team successfully replaced their legacy Lambda-based solution with our robust, scalable system, meeting their requirements and notably improving their operations. Detailed documentation and dedicated support from Cloud Storage Security eased their procurement through managing the automatic creation of multiple AWS resources and limited local-language support.

Conclusion

ANDPAD fortified its AWS infrastructure against malware threats, enhanced its operations, and ensured regulatory compliance by deploying Cloud Storage Security’s Antivirus for Amazon S3. Our solution positions ANDPAD to confidently manage high-volume data processing and safeguard its critical assets.

Moving Forward with CSS

Contact us to schedule a short demo to learn more about how Cloud Storage Security can help your business understand and achieve data integrity,

To learn more about how AWS and Cloud Storage Security can help your business bolster the security of Amazon S3 visit the AWS and Cloud Storage Security overview.