Skip to main content
Celestibia Solutions

Zero Trust Cloud Security: 90% Fewer Unauthorized Access Attempts

A multi-cloud, hybrid enterprise replaced perimeter security with Zero Trust: SSO and MFA for every user, least privilege, micro-segmentation and mTLS between workloads, cutting unauthorized access attempts by 90%.

Discuss a similar projectRead the full write-up
  • Cloud security
  • Multi-cloud enterprise
  • AWS · Azure · Google Cloud
Users and workloadsSSO + MFAleast-privilege IAMService meshmTLS between pods90% fewer unauthorised attemptsSSO with enforced MFA
Identity is checked on every request; services inside talk only over mTLS.
fewer unauthorized access attempts
90%
on SSO with enforced MFA
All users
between Kubernetes workloads
mTLS

At a glance

Engagement
Cloud security
Industry
Multi-cloud enterprise
Platform
AWS · Azure · Google Cloud
Region
Not published
Client
Enterprise with multi-cloud and hybrid environments, name withheld
Technologies
14 in the delivered stack

Services delivered

Before and after

Perimeter-based security could no longer protect a large cloud estate from credential theft, lateral movement and insider threats, and regulatory pressure kept growing.

Before

  • Excessive permissions and weak identity controls across users, workloads and APIs.
  • Little visibility into access patterns, and policies that differed between environments.
  • A high number of unauthorized access attempts.

After

  • 90% fewer unauthorized access attempts
  • All users on SSO with enforced MFA
  • mTLS between Kubernetes workloads

The solution

Solution path

  1. User / workload
  2. SSO + MFA
  3. Least-privilege IAM
  4. mTLS service mesh
  5. Workload

How it was delivered

  1. Phase 1

    Applied "never trust, always verify": centralized identity with SSO, MFA enforced for every user and least privilege across resources, APIs and workloads.

  2. Phase 2

    Segmented networks with private endpoints and micro-segmentation, and secured Kubernetes with mTLS, a service mesh and workload identity.

  3. Phase 3

    Protected public apps with WAF and DDoS mitigation, managed secrets and keys centrally, fed access events to SIEM and SOC, and automated policies with Terraform.

Technology stack

  • SSO
  • MFA
  • AWS IAM
  • AWS Organizations
  • Microsoft Entra ID
  • Amazon EKS
  • Service mesh
  • mTLS
  • AWS WAF
  • AWS Shield
  • AWS Secrets Manager
  • AWS KMS
  • SIEM
  • Terraform

Questions about this project

What does Zero Trust change in practice?

No user, workload or API is trusted by default. Every request is verified through SSO and MFA, permissions are cut to least privilege, networks are micro-segmented and Kubernetes services talk over mTLS.

What was the measured result?

Unauthorized access attempts fell by 90%, with less lateral-movement risk, consistent policies across clouds and faster detection of security incidents.

Related services

Cloud Security ServicesAssessments, IAM hardening, posture management, VAPT and compliance automation.DevSecOps ServicesSecurity testing, scanning, secrets and policy as code inside CI/CD.Managed Kubernetes ServicesDesign, security, upgrades and operations for EKS, AKS and GKE clusters.

Related technical articles

Case study · InsightsZero Trust Cloud Security Implementation: Reducing Unauthorized Access by 90% (opens on insights.celestibia.com)Technical article · InsightsTop 15 Cloud Security Best Practices to Prevent Data Breaches in Production (opens on insights.celestibia.com)
Read the full case study on Celestibia Insights

Planning something similar?

Whether you're migrating, cutting costs, securing your infrastructure or exploring startup programs, start with the Cloud Readiness Survey.

Discuss your projectMore case studies

What happens next

  1. Answer six questions about your cloud setup, spend and priorities. It takes about three minutes.
  2. A Celestibia engineer reviews your answers within one business day.
  3. You get tailored recommendations and the AWS programs you are likely to qualify for.

Monday to Friday, 10 AM to 7 PM IST