AWS Cloud in a Pharma CompanyJiri Pihik, Cloud Services Specialist, MSD

MSD IT Global Innovation Center

About us

• In EU known as MSD• Global healthcare leader

• Vaccines

• Anti-cancer medicines

• Animal health

• 70 000 employees

• 125 years

From developing new therapies that treat and prevent disease to helping people in need, we're committed to improving health and well-being around the world.

GxP

GxP is a general term for good (anything...) practice quality guidelines and regulations. These guidelines are used in many fields, including the pharmaceutical and food industries.

• Qualifications• Processes

AWS @ MSD

• 250+ Applications supported by AWS Infrastructure• 1000+ EC2 Instances• 617TB of S3 Storage• 2TB of EBS Storage across our MSD VPCs in 3 AWS

regions (US, Ireland, Singapore)

• Regulated R&D Application running on AWS• Qualified AWS Infrastructure per our SDLC Policies

AWS in Practice

• Cloud First– New projects

• Cloud per purpose Model– DevOps– Managed

• Workflows & Approvals

• Spending and Security Rules

• Lifecycle– Users– Resources

AWS in Practice

• Security First– Granular control necessary

• Internal Tools– Suspected behavior

• Legal Obligations– Access Controls– Auditing & Logging

AWS in Practice

• Cloud Services Team– Governance– Cloud Adoption– Distributed Shared responsibility– Guidance & Trainings

• Guiding Principles– AWS Standards– MFA– Least Privilege– Roles– Federation– Reviews

CloudTrail

• Detailed AWS activity logs– Who– When– What– From where– Parameters details

0b0fbd7ab5d1058f35535fec64595ed51f7fa26ef77ac8e5d88230898be92e2f my-corp-bucket [21/Jan/2016:12:47:32 +0000] 125.12.36.95 arn:aws:sts::012345678912:assumed-role/my-role/pihik 9E15D396E0071675 REST.PUT.OBJECT report.html "PUT /report.html HTTP/1.1" 200 - - 5134 457 6 "-" "aws-cli/1.9.21 Python/2.7.11 Windows/7 botocore/1.3.21" -

aws-cli s3 upload object

http://msdit.cz

MSD IT Global Innovation Center

@pihikjpihik.jiri[at]gmail.com