The Secure Cloud Foundation (SCF) Bronze offering empowers you to securely manage foundational infrastructure for enterprise AWS ecosystems at scale. Built on AWS Control Tower, this Accenture offering emphasizes secure AWS account vending, a centrally managed multi-region, enterprise network plane, and seamless operations for distributed user-based IAM management.

Primary Components Include:

Foundation: Control Tower post processing of vended AWS Accounts with Lambda for automated enablement, configuration, and enforcement of both AWS native and select 3rd party security tooling, as well as Customizations for Control Tower with enhancements for additional configuration automation

Network: Secure, Central Network with support for a wide variety of centralized firewalls for inspection (Palo Alto, Cisco, and AWS Network Firewall), automated VPC provisioning via AWS Service Catalog (with cross-account/region support), and multi-region DNS. Additionally, Secure Cloud Foundation supports automated deployment and integration with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).

Identity: Least privilege role based access control, central AWS user role management with and without AWS Identity Center, and an out of the box pipeline for custom role definition

Complex AWS ecosystems can grow in service consumption and adoption rapidly. It is critical to instantiate the proper foundation to ensure that adoption can scale reliably and with guardrails to keep your organization secure over that journey. The SCF Bronze package will help you manage an ever-evolving cloud security landscape at enterprise scale.

With the rise of concerns and requirements around data privacy, this solution will facilitate the setup of Sovereign Cloud solutions, starting from Landing Zones responding to sovereign requirements.

This product will be deployed into the Customer AWS environment and incur additional AWS infrastructure charges separate from the AWS Marketplace. The customer is responsible for paying these additional infrastructure charges. Please contact us at AWS-Marketplace@accenture.com  for more details.

This product will require implementation services provided by Accenture to provision AWS Services securely. All additional documentation including a description of all provisioned AWS services, IAM policy statements, and how an IAM role or user is deployed and used in the customer account will be provided by Accenture upon request.