Challenge:

Company R, a regional general hospital, sought a scalable and cost-effective solution to manage growing volumes of sensitive healthcare data. The solution needed to support fast access to frequently used data, long-term archiving, and seamless integration with existing on-premises infrastructure. To meet these needs, a hybrid cloud architecture was implemented using AWS services and Veeam and S3 Object Lock (Immutability) to meet their Compliance and Indonesia Regulations:

• Handle increasing data storage demands.
• Provide quick access to frequently used data.
• Cost-effectively store data accessed less often.
• Simplify data management and reduce administrative overhead.
• Ensure long-term data preservation and archiving.
• Efficiently transfer data from their existing on-premises systems to a new storage solution.
• Ensuring storage are Immutable to protect from ransomware or cyberattack.
• Enforce Compliance Controls

Solution:

Customer R implemented a hybrid cloud storage solution leveraging Amazon Web Services (AWS). This involved:

• On-Premises Infrastructure: On-premises VMs are backed up using Veeam, which stores backup files on S3 Buckets. This setup allows for local caching and fast restores, while leveraging S3 is designed for high durability and reliability, offering 99.999999999% (11 nines) data durability
• AWS Cloud Storage: Utilizing AWS's scalable and cost-effective S3 storage services.
• Veeam Backup & Replication (VBR): Responsible for backing up virtual machines (VMs) and critical data.
• Amazon S3 Object Lock (immutability): is a powerful feature of Amazon S3 that helps you protect critical data by enforcing write-once-read-many (WORM) controls. With Object Lock, you can prevent objects from being deleted or modified for a specified retention period—ensuring data integrity, regulatory compliance, and protection against accidental or malicious changes. Whether you're archiving financial records, legal documents, or backups, Object Lock gives you peace of mind with flexible retention modes and seamless integration into your existing S3 workflows.
• Disaster Recovery: Disaster recovery drills are conducted twice a year to validate the recovery process.

Key Features:

• Compliance Tiering: Indonesia has several regulations that emphasize data protection, integrity, and availability, including UU ITE (Law No. 11/2008) and its amendments, PP No. 71/2019 on Electronic Systems and Transactions, POJK No. 38/POJK.03/2016 for financial institutions, ISO/IEC 27001 (commonly adopted by regulated industries) and It helps organizations meet  compliance requirements for regulations such as SEC 17a-4, HIPAA and STARKES, HIPA by enforcing strict data retention policies through Governance or Compliance modes
• Cost Optimization: S3 Object Lock offers cost-efficient, scalable, and compliant data protection using WORM storage, unlike traditional backups that require expensive hardware, manual processes, and limited scalability. It ensures data immutability while remaining accessible and durable, making it a smarter choice for long-term retention.
• Performance: maintains high performance by allowing fast, reliable access to immutable data, backed by Amazon S3’s scalable infrastructure and low-latency retrieval—even when data is locked for compliance.
• Seamless Integration: Integrates with existing on-premises systems through backup solutions like Veeam Backup and Replication are seamlessly with Amazon S3 Object Lock to create immutable backups, protecting data from deletion, ransomware, and ensuring compliance.
• Durability and Availability ensures data immutability while leveraging Amazon S3’s 99.999999999% durability and high availability, meaning customer’s protected data is safely stored across multiple facilities and remains reliably accessible whenever needed—even during infrastructure failures.
• Scalability: seamless scalability, allowing customer to protect and manage immutable data across virtually unlimited storage capacity without the need to provision or manage infrastructure, ideal for compliance and backup needs.
• Immutability: in Amazon S3 Object Lock uses a Write Once, Read Many (WORM) models to ensure that data cannot be modified or deleted for a set retention period, helping meet compliance requirements and protect against data loss or tampering.

Benefits:

By implementing this solution, Customer R achieved the following benefits:

• Significant Cost Savings: S3 Buckets and S3 Object Lock reduce storage costs compared to traditional backup systems.
  • Up to 70–90% compared to traditional backup systems. Traditional backup systems, conventional backup solutions typically require customers to invest in on-premises infrastructure based on anticipated storage capacity, resulting in substantial upfront capital expenditures (CAPEX).
• Operational Efficiency: Veeam Backup and Replication simplify backup operations and reduce manual intervention improvement due to automation and reduced manual tasks.
• Improved Data Management: Simplified data management with reduced administrative overhead, thanks to automated tiering.
• Enhanced Performance: Ensured fast access to frequently used data, improving application performance and user productivity.
• Scalable Storage Capacity: AWS provides virtually unlimited storage to accommodate future data growth.
• Long-Term Data Preservation: Enabled cost-effective long-term archiving old “Full Backup Data” for compliance and business needs.
• Compliance & Durability: Supports healthcare Up to 95% reduction in risk of non-compliance fines and 100% assurance of data integrity during retention period.
• Fast Recovery: File Backup and Replication on Veeam Repository enables quick restores from recovery point from recent backups that significantly reduced up to 90% and meet their Recovery Time Objective (RTO) compared to traditional hard drive local backup and addressing customer Recovery Point Objective (RPO) and minimizing data loss by leveraging scheduled backup.
• Streamlined Data Transfer: Veeam Backup and Recovery simplified the movement of data compared to Local Backup.
• Ransomware Protection: Lock helps protect against ransomware by making backup data immutable, ensuring it cannot be encrypted, altered or deleted by attackers even by compromised accounts during the retention period, Supports business continuity and disaster recovery planning.
• Retention Enforcement: Prevents premature deletion of backups, even by root users, Aligns with financial and legal data retention mandates.

About Company R

Company R, a regional general hospital, is actively undergoing digital transformation to enhance its operational efficiency and patient care services. Recognizing the increasing reliance on digital systems and the sensitive nature of healthcare data, Company R places a high priority on robust data backup strategies. This focus aims to ensure business continuity, protect patient information from ransomware or cyberattack, and comply with relevant regulations amidst its ongoing technological advancements.