Executive Summary

Nammiskills is the go-to platform to drive learners' careers forward using targeted learning activities based on the most in-demand jobs. Nammiskills aims to create learning journeys and pathways for people wanting to learn new skills that will help them find job opportunities in today's ever-digitalized labor market. Developed with the support of UNICEF and the World Bank, our platform is designed to help users achieve their career goals and maximize their earning potential, in partnership with leading tech companies. Since Nammiskills was going to be released in the MENA region, our biggest challenges were scalability, latency and security. To address these concerns, we adopted the Serverless approach, using Amazon API Gateway for publishing API's, Elastic Load Balancer, Aurora RDS Amazon ECS Fargate for the backend. Additionally, AWS Config was implemented across the multi-account environment to continuously monitor resource configurations and ensure alignment with Nammiskills’ security and compliance requirements as the platform scaled.

Why Zero&One?

Zero&One, an AWS Premier Consulting Partner, was the ideal choice to tackle NammiSkills' challenges due to their extensive expertise in cloud solutions and artificial intelligence. Leveraging AWS's powerful cloud infrastructure, machine learning tools, and data analytics capabilities, Zero&One was able to craft a solution that addressed NammiSkills' scalability issues, enhanced their data management capabilities, and provided the necessary tools to personalize the learning experience. This partnership ensured that NammiSkills could take advantage of cutting-edge technology to improve their educational offerings and operational efficiency.

Customer Challenge

Managing compliance and security governance across a growing environment

NammiSkills’ rapid growth across the MENA region introduced new operational and security complexities that their existing infrastructure was not equipped to handle. As the platform scaled, the team faced increasing difficulty maintaining consistent security configurations, enforcing governance standards, and ensuring compliance across multiple AWS accounts and environments. Frequent changes made by distributed development teams created configuration drift, making it challenging to trace who made what changes and when. These inconsistencies posed risks of misconfigured IAM policies, untagged resources affecting cost visibility, and potential exposure through insecure network settings or improperly configured S3 buckets. To address these governance and visibility challenges, NammiSkills needed a centralized and automated method to continuously monitor resource configurations, detect deviations from best practices, and maintain audit-ready compliance. Under the strategic guidance of Zero&One, AWS Config was integrated across the organization’s AWS accounts to deliver continuous configuration tracking, automated compliance evaluations, and centralized visibility. This allowed NammiSkills to proactively identify misconfigurations, enforce consistent standards across all environments, and strengthen the security posture of its rapidly evolving platform.

Partner Solution

Centralized compliance management with AWS Config

Zero&One designed and implemented a centralized governance and compliance framework for NammiSkills using AWS Config to address the platform’s growing need for consistent security posture, configuration visibility, and alignment with operational best practices. AWS Config was deployed across all NammiSkills AWS accounts and regions to continuously record configuration changes, enforce compliance standards, and detect configuration drift as the environment evolved. A curated set of managed and custom Config rules was introduced to validate IAM policies, resource tagging, S3 security controls, and VPC network configurations, establishing a unified compliance baseline across the organization. A multi-account AWS Config Aggregator was provisioned to provide NammiSkills’ engineering and security teams with a single consolidated dashboard of configuration and compliance status across environments. Configuration snapshots and history files were centralized in an encrypted S3 bucket with restricted access, ensuring secure, audit-ready visibility into historical resource states. Event-driven remediation capabilities were also enabled using CloudWatch Events and Lambda, allowing the platform to automatically respond to misconfigurations and maintain operational integrity. The resulting architecture delivers a strong, scalable governance foundation that complements NammiSkills’ broader cloud strategy. By integrating AWS Config into their environment, NammiSkills gained continuous compliance monitoring, improved security oversight, and streamlined audit readiness—all essential for supporting their expansion and maintaining trust with learners and partners.

Solution Architecture

Use Case

As NammiSkills expanded its platform across multiple accounts and environments, maintaining consistent configurations and enforcing security standards became increasingly challenging. AWS Config was introduced to provide continuous visibility into resource settings and ensure adherence to governance requirements. Whenever developers deployed new resources—such as Lambda functions, S3 buckets, DynamoDB tables, or networking components—AWS Config automatically evaluated them against managed and custom compliance rules. Misconfigurations such as missing mandatory tags, overly permissive IAM policies, or insecure network rules were immediately flagged, and event-driven workflows triggered automated notifications or remediation actions. This allowed NammiSkills to maintain a strong compliance posture while enabling teams to work at high velocity without compromising security or governance.

Managed Services Value & Operational Sustainability

To sustain the operational, security, and governance gains achieved through the AWS Config implementation, Zero&One provided ongoing AWS Managed Services aligned with NammiSkills' business objectives of scalable growth, platform reliability, and continuous compliance across its multi-account cloud environment.

As NammiSkills expanded its digital learning platform across the MENA region, maintaining consistent governance, performance stability, and cost efficiency became critical to protecting learner experience and platform reputation. Zero&One’s Managed Services model ensured continuous operational oversight through proactive monitoring, incident response, and environment health management across the serverless and containerized backend architecture, including API Gateway, ECS Fargate workloads, Aurora databases, networking components, and configuration compliance services.

From a business perspective, this operational continuity reduced platform downtime risk, safeguarded learner access to educational resources, and enabled predictable scaling during peak usage periods. Continuous AWS Config monitoring, combined with operational runbooks and automated remediation workflows, ensured configuration drift, security deviations, or compliance gaps were identified and addressed before impacting service delivery or regulatory posture.

Security and compliance remained a core focus of the Managed Services engagement. Zero&One provided ongoing governance support through periodic compliance posture reviews, refinement of AWS Config rules, IAM policy oversight, tagging governance enforcement, and audit-readiness reporting. This enabled NammiSkills to maintain trust with institutional partners such as UNICEF, the World Bank, and regional stakeholders while meeting evolving security expectations.

Operational cost optimization was another key MSP value driver. Regular consumption reviews, rightsizing recommendations, and serverless efficiency optimization helped NammiSkills maintain financial sustainability while scaling the platform. This allowed the organization to reinvest operational savings into enhancing learning content, platform features, and regional outreach.

Additionally, Zero&One delivered continuous advisory support covering architectural evolution, platform resilience, and best-practice adoption aligned with AWS Well-Architected principles. This ensured NammiSkills’ cloud environment evolved in step with business growth, emerging security threats, and technological advancements without introducing operational complexity.

Through this Managed Services engagement, NammiSkills benefited from:

• ● Sustained compliance and governance across a growing multi-account AWS environment
• ● Improved platform availability and learner experience reliability
• ● Proactive security posture management and audit readiness
• ● Continuous cost optimization supporting financial sustainability
• ● Operational scalability enabling regional expansion without infrastructure friction
• ● Expert cloud advisory enabling innovation without operational risk

This partnership allowed NammiSkills to focus on its core mission—empowering learners with job-relevant digital skills—while Zero&One ensured the underlying cloud environment remained secure, compliant, optimized, and operationally resilient.

Outcome and Benefits:

The introduction of AWS Config provided NammiSkills with a unified, proactive governance framework that significantly strengthened their operational and security posture. Continuous configuration tracking eliminated blind spots, while centralized snapshots and history files improved audit readiness and root-cause analysis capabilities. Compliance rules—both managed and custom—ensured consistent enforcement of security requirements, reducing the risk of configuration drift across environments. Automated event-driven responses minimized manual intervention, allowing the engineering team to focus on delivering new platform features rather than policing misconfigurations. Overall, AWS Config enhanced transparency, accountability, and compliance across NammiSkills’ cloud infrastructure, enabling them to scale confidently while maintaining a secure and well-governed environment.