Part 4: Building a Multi-Layer Security Strategy for BBVA’s Global Data Platform on AWS

This article details BBVA's multi-layer security strategy for their global data platform on AWS, addressing the challenges of protecting petabyte-scale financial data while enabling secure access for over 6,500 advanced users.

• Implemented six comprehensive security layers using AWS services
• Used AWS Identity and Access Management (IAM) for role-based access control
• Leveraged AWS Key Management Service (KMS) for data encryption
• Utilized AWS Lake Formation for data lake governance
• Deployed Amazon AppStream 2.0 for secure application streaming
• Implemented centralized detective and automated response controls
• Used AWS Backup for immutable data protection

The strategy enables robust data protection, improved access management, and regulatory compliance while maintaining operational efficiency and user productivity across BBVA's global operations.