Simplifying Enterprise Data Governance and Management in Regulated Industry

This article presents an AWS-based architecture for data governance and management in regulated industries, particularly financial services, addressing legacy data preservation and compliance requirements.

• 10 key success factors: long-term retention, flexible access, identity management, cost efficiency, scalability, data deletion on demand, and auditing
• AWS IAM Identity Center centralizes user access management with existing identity providers like Okta or Microsoft Entra ID
• AWS DMS Serverless automates data migration from legacy systems to Amazon S3 with automatic schema discovery via AWS Glue
• AWS Lake Formation enforces granular, tag-based access control at table and column levels across data lakes
• Amazon Athena provides low-code SQL analytics with workgroup isolation and "right to be forgotten" compliance via Apache Iceberg
• Solution supports 10-30 year data retention mandates while preserving existing user permissions and minimizing query refactoring

The architecture enables financial institutions to migrate legacy data to centralized cloud storage while maintaining compliance, security, and existing access controls.