{"id":57565,"date":"2022-10-24T15:56:22","date_gmt":"2022-10-24T07:56:22","guid":{"rendered":"https:\/\/www.nextlink.cloud\/?post_type=customer_story&p=57565"},"modified":"2023-05-09T14:37:58","modified_gmt":"2023-05-09T06:37:58","slug":"plaza-premium","status":"publish","type":"customer_story","link":"https:\/\/www.nextlink.cloud\/en\/customer-story\/plaza-premium\/","title":{"rendered":"Plaza Premium"},"content":{"rendered":"<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\n
\n
\n
\n

About<\/p>\n <\/div>\n <\/div>\n

\n

Company Profile<\/h2>\n
\n

With a mission of \u201cmaking travel better\u201d, Plaza Premium Group is a pioneer and the market leader in airport hospitality services with an international footprint of over 170 locations across 46 airports in 23 countries and regions, serving 16 million travellers annually.<\/p>\n

The group comprises five core business segments \u2013 airport lounges Plaza Premium First and Plaza Premium Lounge; airport terminal hotels Aerotel and Refreshhh by Aerotel; airport meet & greet services ALLWAYS and a range of Airport Dining concepts. In addition to its own brands, Plaza Premium Group provides airport hospitality solutions to leading airlines, alliances and corporates around the world, including but not limited to Cathay Pacific Airways, Singapore Airlines, Lufthansa, China Southern Airlines, Star Alliance, SkyTeam, American Express and many more. By continuously innovating and striving to surpass travellers\u2019 expectations of airport experiences, the group is growing exponentially across major international airports globally.<\/p>\n <\/div>\n <\/div>\n

\n
<\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/div>\n
\n
\n
\n
<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\n
\n
\n

The Challenge<\/h2>\n
\n

Plaza Premium was running their IT infrastructure on-premise maintained by a full technical team. In order to manage it, all physical hardware and human resources have to be managed with a fixed budget every year. When the client\u2019s workloads reach capacity limits, scaling up IT capacity in an on-premise environment can be time consuming and frustrating at the same time wasting unnecessary time and capital. In terms of security, as the infrastructure scales, more vulnerabilities are exposed as \u201cknown\u201d unknown due to IT infrastructure sophistication. That is why Plaza Premium wished to migrate their workload to a highly scalable platform in PaaS\/SaaS model with ready-to-use security and compliance services.<\/p>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/div>\n

\n
\n
\n
<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\n
\n
\n

The Solution<\/h2>\n <\/div>\n
\n
\n

In order to achieve high scalability for future growth and fulfil PCI-DSS compliance standard at the same time, Nextlink plays an important role on:<\/p>\n <\/div>\n <\/div>\n <\/div>\n <\/div>

\n
\n
\n
\n

Infrastructure provisioning under Well-Architected framework<\/h3>\n
\n

AWS Well-Architected framework is always a golden standard to build secure, high-performing, resilient, and efficient infrastructure for applications and workloads. Nextlink, as AWS premier partner, straightly follows this guideline to design and implement the whole infrastructure for Plaza Premium, so as to prepare them for a growth footprint on cloud technology.<\/p>\n <\/div>\n <\/div>\n

\n

Achieving Compliance-Standard Security Hardening<\/h3>\n
\n

Cloud security at AWS is the highest priority. As an AWS customer, Plaza Premium benefits from a data center and network architecture built to meet the requirements of the most security-sensitive organizations. Nextlink has designed a security principle based on AWS best practices and AWS Cloud Adoption Framework (CAF), so as to provide a reliable and compliance-ready security solution for our customers under the strategy of Directive, Preventive, Detective and Responsive.<\/p>\n <\/div>\n <\/div>\n

\n

Intrusion Detection and Protection<\/h3>\n
\n

1. GuardDuty is able to detect threats and continuously monitor for any malicious activity and unauthorized behaviour. GuardDuty is integrated with threat intelligence feeds. Coupled with machine learning it can perform automated remediation actions by leveraging CloudWatch events thus reducing client\u2019s remediation and recovery time.<\/p>\n

2. WAF are costly and hard to manage in an on-premise environment. But in AWS, AWS WAF is a fully managed layer-7 application firewall which is well integrated with CloudFront and ELB to protect client\u2019s applications from DDoS attack and common attack patterns such as SQL ingestion and Cross-site scripting.<\/p>\n <\/div>\n <\/div>\n

\n

Encryption in-transit and at-rest<\/h3>\n
\n

1. KMS is a managed encryption service to provide a highly available key storage, management, and auditing solution for data encryption across AWS services and within self-own applications. <\/p>\n

2. ACM is a managed SSL certificate provider, which generates SSL certificates for free, highly-integrated with AWS services to serve HTTPS requests with in-transit encryption.<\/p>\n <\/div>\n <\/div>\n

\n

Logging and Monitoring<\/h3>\n
\n

1. CloudWatch as a monitoring and logging service to centralize log management and alarm configuration. All EC2 should have CloudWatch log agent and IDS agent installed, so that both system, application log and other custom log can be sent to CloudWatch log.<\/p>\n

2. CloudTrail as a logging service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail, you can log, continuously monitor, and retain events related to API calls across your AWS infrastructure.<\/p>\n

3. ElasticSearch Service as a logging centralization and visualization tool. By utilizing Kibana dashboard, users can visualize the findings and convert data into actionable intelligence.<\/p>\n <\/div>\n <\/div>\n

\n

Maintenance and Optimization<\/h3>\n
\n

1. Systems Manager Patch Manager to automate the process of patching managed instances with security-related updates.<\/p>\n

2. ISV solutions including Tenable and Trend Micro to further harden the security protection on OS and S3 layer anti-virus.<\/p>\n <\/div>\n <\/div>\n <\/div>\n

\n
\n
\n \"\u96f2\u5e73\u53f0\" <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/div>\n
\n
\n
\n
<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\n
\n
\n
\n
\n

The Benefits<\/h2>\n <\/div>\n <\/div>\n
\n
\n
\n \"Nextlink <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n
\n
\n
\n
\n
    \n
  • \n
    \n\n\n<\/svg>\n<\/div>\n

    Service reliability and cost efficiency by at least 20%.<\/p>\n <\/li>\n

  • \n
    \n\n\n<\/svg>\n<\/div>\n

    Reduces manpower and labour cost associated with maintenance by 50%<\/p>\n <\/li>\n <\/ul>\n <\/div>\n

    \n
    \n

    Security services are delivered in SaaS model, which is out-of-the-box PCI compliant. By using AWS services, PCI compliance is greatly mitigated through AWS.\u00a0These services provide smarter and more proactive protection to the client\u2019s system and network resources in order to meet the required compliance standards.<\/p>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n

    \n
    <\/div>\n <\/div>\n <\/div>\n<\/div>\n
    \n
    \n
    \n

    Architecture diagram<\/h2>\n\n\n
    \n
    \"PlazPremium\u61c9\u7528\u67b6\u69cb\"<\/figure><\/div>\n\n\n

    Nextlink assisted Plaza Premium in migrating workloads to AWS with high scalability and security, and improved the reliability of the AWS system architecture by 20% and reduced costs by 50%. With AWS information security best practices, Nextlink has strengthened the five aspects of security for Plaza Premium, and greatly improved the security protection.<\/p>\n\n\n\n

    As an AWS Managed Services Provider (MSP), Nextlink also provides Plaza Premium with 24\u00d77 monitoring, reporting, and management of their AWS infrastructure and environment after the migration. A monthly report is provided to Plaza Premium to give them a holistic overview of their AWS environment and usage. Potential vulnerabilities are identified and shared in the report. Well-architected reviews are conducted on a regular basis to optimize Plaza Premium\u2019s environment based on the five pillars \u2013 operational excellence, security, reliability, performance efficiency and cost optimization. Through these reviews Nextlink is able to deliver cost savings and close any identified security gaps. With Nextlink\u2019s Managed Services, Plaza Premium can tap the full potential and benefits of cloud.<\/p>\n","protected":false},"excerpt":{"rendered":"

    Architecture diagram Nextlink assisted Plaza Premium in migrating workloads to AWS with high scalability and security, and improved the reliability of the AWS system architecture by 20% and reduced costs by 50%. With AWS information security best practices, Nextlink has strengthened the five aspects of security for Plaza Premium, and greatly improved the security protection. […]<\/p>\n","protected":false},"template":"","industry":[685],"class_list":["post-57565","customer_story","type-customer_story","status-publish","has-post-thumbnail","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.nextlink.cloud\/en\/wp-json\/wp\/v2\/customer_story\/57565","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.nextlink.cloud\/en\/wp-json\/wp\/v2\/customer_story"}],"about":[{"href":"https:\/\/www.nextlink.cloud\/en\/wp-json\/wp\/v2\/types\/customer_story"}],"version-history":[{"count":2,"href":"https:\/\/www.nextlink.cloud\/en\/wp-json\/wp\/v2\/customer_story\/57565\/revisions"}],"predecessor-version":[{"id":63722,"href":"https:\/\/www.nextlink.cloud\/en\/wp-json\/wp\/v2\/customer_story\/57565\/revisions\/63722"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.nextlink.cloud\/en\/wp-json\/wp\/v2\/media\/42500"}],"wp:attachment":[{"href":"https:\/\/www.nextlink.cloud\/en\/wp-json\/wp\/v2\/media?parent=57565"}],"wp:term":[{"taxonomy":"industry","embeddable":true,"href":"https:\/\/www.nextlink.cloud\/en\/wp-json\/wp\/v2\/industry?post=57565"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}