Caris Life Sciences
Securing Access to PHI in AWS S3 Folders
Case study Caris Life Sciences
Caris Life Sciences® (Caris) is a leading next-generation AI TechBio company and precision medicine pioneer. Through comprehensive molecular profiling and the application of advanced AI and machine learning algorithms, Caris has created the large-scale, multi-modal database and computing capability needed to analyze and unravel the molecular complexity of disease. Caris’ digitized data is stored in hybrid on-prem and AWS environments.
Head Count
Locations
The Challenge
Operating under the tight regulations of HIPAA and other regulatory requirements, Caris Life Sciences needed to ensure that access to specific resources containing Protected Health Information (PHI) was controlled securely.
Enforce JIT and Just Enough Access Today
Sr. Director of Engineering
The Results
“We’ve implemented Apono’s privilege management capabilities to control not just who can access resources, but who can read-only, read-write, or have admin privileges for a given resource, helping to further reduce risk,” says Ronen.
Mitigating access risk by limiting privileges for read only, readwrite, and admin privileges, preventing excessive privileges
The DevOps team created policies that enabled the right people to access specific folders while blocking access to other folders in the bucket.
Integrating with existing IAM infrastructure, Apono reduces the need for time and resource-intensive admin management
The Outcome
Mitigating access risk by limiting privileges for read only, readwrite, and admin privileges, preventing excessive privileges
Combining best-of-breed cloud access security solutions with powerful controls for on-prem databases and servers enable organizations to consolidate hybrid access management under a single platform
All access requests, approvals, actions, and are continuously documented, simplifying compliance for HIPAA, SOX, etc with auto-generated PDF reporting.
Our data engineers control access to their own resources. This takes DevOps out of the middle since they don’t have to reach out to get approvals. It improves the overall process and we get the added value that all of the requests are fully documented.
Sr. Director of Engineering
