Secure Multi-Account AWS Environment for Eurowag

Problem Statement/ Definition

Eurowag, a leading European transport payment and mobility provider, operated critical workloads within a single AWS account, creating security blind spots, access management issues, and compliance risks. Without better segregation and automation, the company faced potential outages, audit challenges, and limited scalability as its infrastructure grew.

Proposed Solution & Architecture

Trustsoft redesigned Eurowag’s AWS environment using the AWS Landing Zone Accelerator (LZA) framework to establish a multi-account architecture managed through AWS Control Tower. Centralized identity and access were implemented via AWS IAM Identity Center (SSO) integrated with Microsoft Entra ID, enabling least-privilege, role-based access control.

Security and compliance were strengthened with AWS Security Hub, AWS Config, and Amazon GuardDuty, ensuring continuous monitoring and automated remediation. AWS CloudTrail centralized all API activity logs in a secure Log Archive account, while Terraform was used for Infrastructure as Code (IaC) to standardize and automate provisioning.

Networking was consolidated through a Transit Gateway with separate Production, Development, and Shared Services accounts, ensuring isolation and resilience across environments.

Outcomes of Project & Success Metrics

The new AWS foundation provided full visibility, stronger compliance, and faster environment delivery. Environment provisioning time decreased by 75%, reducing setup from weeks to just days. Centralized governance reduced manual access management tasks by over 80%, while real-time monitoring improved security incident detection by 90%. Eurowag achieved a scalable, compliant, and secure AWS platform ready to support future innovation and growth.

Lessons Learned

Implementing the AWS Landing Zone Accelerator for Eurowag highlighted the importance of aligning security, automation, and governance early in a multi-account design. Clear definition of account structure, identity integration, and compliance controls from the start helped avoid rework and ensured smooth scaling across teams and environments.

Another key lesson was the value of gradual automation adoption—introducing Terraform-based infrastructure and IAM automation in phases allowed Eurowag’s internal teams to gain confidence and operational ownership. Continuous collaboration between Trustsoft architects and Eurowag’s DevOps team ensured knowledge transfer, resulting in a sustainable, secure, and well-governed AWS foundation.