Customer Stories / Software & Internet / Israel

Wiz Supports FedRAMP Authorization by Migrating to Amazon Cognito
Learn how Wiz in cloud security migrated its global enterprise customers to Amazon Cognito
Received FedRAMP authorization
Over 99.9%
availability achieved
70%
lower IAM costs
Deployed new B2B features
Supports data residency requirements
Overview
As more businesses adopt cloud technology, protecting their workloads using cloud-based services helps them stay agile. That’s why cloud security startup Wiz wanted to incorporate a customer identity and access management (CIAM) solution into its cloud security offering so that its developers can deliver enterprise-grade features. Other priorities for Wiz were to receive authorization from the Federal Risk and Authorization Management Program (FedRAMP) for government compliance and to support data residency for Wiz’s global enterprise customers.
From the start, Wiz built most of its infrastructure on Amazon Web Services (AWS) to scale to demand. To meet its CIAM needs, the growing startup chose Amazon Cognito, a solution for implementing secure, frictionless customer identity and access management that scales. Wiz then accelerated the migration by developing a self-service portal that helped its customers migrate their users. Wiz has since released several enterprise-grade IAM features. The company improved availability using Amazon Cognito, achieving over 99.9 percent availability.

Opportunity | Using Amazon Cognito to Customize B2B User Stores for Wiz’s Enterprise Customers
Wiz was founded in 2020 to help organizations protect their cloud environments with a unified cloud-security solution. Wiz’s security solution works by creating a normalization layer between cloud environments. This layer helps customers identify and remove risks. In its first 3 years, Wiz powered its business-to-business (B2B), software-as-a-service solution with over 50 AWS services.
Before migrating to Amazon Cognito, Wiz used a third-party CIAM solution as its primary authentication service. However, Wiz’s developers would have to make special configurations to deploy new features. “We had a lot of ideas on how we could add more features to support our ever-growing enterprise customers,” says Solal Raveh, field chief technology officer of EMEA at Wiz. “We would have to spend much more engineering time to implement such features.”
Wiz had built most of its tech stack on AWS, which factored into the team’s decision to use Amazon Cognito. “The ability to interconnect AWS services as part of our authentication flow was a winning ticket,” says Raveh. Further, by using Amazon Cognito, Wiz’s customers were able to select which Region they would like to store their user profile data in. By selecting their AWS Region, Wiz’s customers can comply with regulations such as the General Data Protection Regulation (GDPR), which requires businesses to manage data within specific geographic locations.

Using AWS services as building blocks around Amazon Cognito, we can be more flexible, be granular with our solution development, and achieve high service-level agreements.”
Solal Raveh
Field Chief Technology Officer, EMEA, Wiz
Solution | Accelerating a Multitenant Migration to Achieve over 99.9% Availability
To power its offering with Amazon Cognito and automate the logic for the authentication flow, Wiz uses AWS Lambda—a serverless, event-driven compute service. And to securely store its customers’ metadata, Wiz uses Amazon DynamoDB—a serverless, NoSQL, fully managed database with single-digit millisecond performance at nearly any scale.
Many of Wiz’s customers operate in heavily regulated industries and regions; therefore, service availability is a top priority while migrating user stores. So the Wiz team decided to develop its infrastructure to support tokens from both Amazon Cognito and the previous provider. Wiz built an API-based self-service portal for its customers to incentivize them to migrate their users to Amazon Cognito. “We embedded the portal experience into our solution so that tenant administrators would have the power to migrate everything they needed,” says Raveh.
The portal guides customers through four major steps: setting up and testing their new single-sign-on entry, porting users and scripting pipelines to Amazon Cognito, validating users’ identities, and cleaning up remaining artifacts from Wiz’s preexisting CIAM provider. “We let our customers choose the suitable time for migration while giving them the tools to make it happen,” says Raveh. “We also published a blog explaining why we decided to migrate to Amazon Cognito so that they would be part of the decision-making.”
To further motivate its customers to migrate, the Wiz team rolled out new features such as multitenancy flows and disaster recovery. “Using AWS services as building blocks around Amazon Cognito, we can be more flexible, be granular with our solution development, and achieve high service-level agreements,” says Raveh. As customers migrated to Amazon Cognito, Wiz lowered its CIAM costs by 70 percent.
By October 2023, 99.5 percent of Wiz’s customers migrated their users to Amazon Cognito. Thus, customers managed to immediately improve their reliability as a result of achieving over 99.9 percent availability. Wiz has also received FedRAMP authorization for its cloud-based solution, Wiz for Government. “By using Amazon Cognito, and with all the moving pieces meeting regulatory requirements, we were able to serve our customers and achieve our goals,” says Raveh.
Outcome | Developing More B2B CIAM Features on AWS
Several of Wiz’s customers have reached out to learn about the multitenancy migration. “We’ve had many friendly requests from prospects and joint customers to reference our architecture,” says Raveh. “People want to know how Wiz did the migration. A couple of them have already started their own journeys.” Wiz completed its migration to Amazon Cognito in June 2024.
Looking ahead, Wiz will continue to roll out more features for B2B and customer identity and access management (CIAM). These include features that help its enterprise customers cross-replicate versions of their B2B user stores. “There are always hurdles and road bumps with a migration. The question is how you handle them,” says Raveh. “We had challenges in design, development, and production, but everything turned out all right. Working alongside AWS was, in one word, splendid.”
About Wiz
Founded in 2020, Wiz helps organizations protect their cloud environments with a unified cloud-security solution. The fast-growing startup protects over five million workloads globally and serves over 40 percent of the Fortune 100 companies.
AWS Services Used
Amazon Cognito
Amazon Cognito provides an identity store that scales to millions of users, supports social and enterprise identity federation, and offers advanced security features to protect your consumers and business.
AWS Lambda
AWS Lambda is a compute service that runs your code in response to events and automatically manages the compute resources, making it the fastest way to turn an idea into a modern, production, serverless applications.
Learn more »
Amazon DynamoDB
Amazon DynamoDB is a serverless, NoSQL database service that enables you to develop modern applications at any scale.
Learn more »
More Software & Internet Customer Stories
Total results: 820
no items found
-
United Kingdom
Bringing Data Analytics to Customer Cloud…
Panalgo uses AWS to provide companies in the life sciences with greater control over their data. Panalgo, a Norstella company, makes healthcare analytics simple through its Instant Health Data software. The company chose to build a solution that customers can deploy directly within their cloud environments. Using AWS Fargate, Amazon EMR, and Amazon EMR Serverless, Panalgo worked alongside the AWS team to build a deployed offering that is flexible and scalable. With this solution, Panalgo’s customers will gain valuable insights quickly. -
United States
Collaboration.Ai Achieves DoD…
Collaboration.Ai, a leader in AI-driven innovation management software, sought to expand into the US federal government sector, particularly the Department of Defense (DoD), with its end-to-end CrowdVector innovation management platform. Obtaining the required Authority to Operate (ATO) on DoD networks—a complex, lengthy, and costly process—posed a significant challenge for the startup. By engaging with AWS Partner Second Front, a member of the AWS Global Security & Compliance Acceleration (GSCA) program and using its Game Warden DevSecOps platform on AWS GovCloud (US), Collaboration.Ai secured a Certificate to Field (CTF) for DoD networks in less than 90 days. The deployment was accelerated further by using a custom registry of secure, minimal container images from AWS Partner Chainguard. This approach saved nearly two years of work and $2 million in compliance costs, swiftly opening access to the US federal government market.
Get Started
Organizations of all sizes across all industries are transforming their businesses and delivering on their missions every day using AWS. Contact our experts and start your own AWS journey today.