PTP | Cloud Experts | Biotech Enablers

Using Document Summarization Successfully in Biotech Research

Mai Hiraoka — Tue, 16 Sep 2025 01:06:39 +0000

Using Document Summarization Successfully in Biotech Research

A biotech company partnered with PTP to deploy an AWS Bedrock-powered summarization system thatreduced document review time by 50% , improved collaboration, and ensured sensitive research data remained secure.

Challenges

Solutions

Results

Conclusion

Overview

As a pioneer in allogenic cell therapies, the Company manages enormous volumes of research documentation. From peer-reviewed publications and preclinical trial data to internal experimental reports, the sheer weight of information often slowed the ability of scientists, clinicians, and executives to extract the insights that mattered most.

The problem was not access — the Company had plenty of data — but speed and clarity. Key findings were often buried in 50-page reports or technical papers that took hours to digest. Scientists were spending precious time parsing documents instead of running experiments. Executives, meanwhile, needed concise and regulator-ready summaries to make informed strategic decisions.

The Company recognized the potential for Generative AI (GenAI) to transform this workflow. However, like many biotech companies working with sensitive data, the Company had strict security requirements that ruled out SaaS-based LLMs. Public AI services carried risks of intellectual property leakage and compliance violations. The Company turned to PTP to design a secure, AWS-native summarization solution that met both technical and regulatory needs.

The Challenge

The barriers the Company faced were familiar across biotech, but particularly acute in high-stakes cell therapy research:

1. Information Overload

Internal teams were consuming dozens of dense scientific papers and clinical trial reports weekly. Extracting actionable findings took too long.

2. Inconsistent Summaries

Human-created summaries varied in quality and clarity. The lack of standardization created friction in cross-functional collaboration.

3. Security Concerns

With sensitive internal research data at stake, SaaS LLMs were not an option. Any solution had to operate within the Company’s secure AWS environment with guardrails for HIPAA and GxP compliance.

The Company wanted a system that could:

Rapidly summarize both internal documents and external publications.
Provide consistent, regulator-friendly outputs.
Operate entirely within a secure, compliant AWS architecture.

The Solution

PTP architected and delivered a secure, GenAI-powered summarization framework running on AWS Bedrock. The solution balanced cutting-edge AI capabilities with the compliance, scalability, and security posture biotech companies demand.

Key Solution Components

AWS Bedrock for Summarization

Bedrock was selected for its flexible access to multiple foundation models through a single API. PTP used prompt engineering and light fine-tuning to optimize summaries for research clarity and regulatory tone.

Amazon S3 as a Secure Document Repository

Internal research documents and curated external publications were ingested into Amazon S3, providing a single, secure repository. This ensured data stayed within the company’s AWS boundary.

Amazon Textract & Kendra for Preprocessing

Amazon Textract converted PDFs and scanned documents into structured text. Amazon Kendra added intelligent search across documents, ensuring the summarization system could pull relevant context before generating outputs.

Custom Prompt Engineering

PTP developed domain-specific prompts that emphasized clarity, neutrality, and regulator-friendly formatting. This ensured that summaries were not only concise but also aligned with FDA communication standards.

Researcher-Facing Chatbot Interface

Instead of adding another dashboard, PTP delivered a simple, secure chatbot UI powered by Open WebUI. Scientists could upload a document, ask for a summary, or request key findings, and receive results in seconds.

Why AWS

The company selected AWS as the backbone for this project because of three critical advantages:

Security and Compliance

With sensitive research data at the core of operations, AWS provided a secure, compliance-ready environment. S3, SageMaker, and Bedrock operated within the company’s isolated VPC, ensuring data never left the secure boundary.

Breadth of Model Choice

AWS Bedrock offered access to multiple foundation models through a unified API, allowing experimentation with ProtGPT2, ProtBERT, and other specialized models without costly redevelopment.

Scalability

AWS’s elastic infrastructure meant the company could scale computationally intensive protein folding workloads up or down as research demands shifted. This flexibility allowed acceleration without overinvesting in static infrastructure.

Why PTP

The company chose PTP as its partner because of its deep expertise in both AWS consulting and life sciences R&D.

Life Sciences Competency

As an AWS Life Sciences Competency partner, PTP brought domain-specific knowledge of biotech workflows, regulatory constraints, and scientific data handling.

Proven AWS Delivery

With years of AWS consulting experience, PTP designed and delivered a pipeline that adhered to AWS best practices while meeting the company’s unique research needs.

Innovation and Enablement

Beyond building the system, PTP enabled the company’s team with training, documentation, and extensibility—ensuring they could independently grow the framework to support future research initiatives.

The Results

The deployment produced immediate benefits:

50% Faster Document Review

Scientists reported cutting review time in half. Instead of spending hours parsing journal articles, they received concise, contextually accurate summaries in minutes.

Improved Cross-Team Collaboration

Standardized summaries meant clinical, research, and executive teams were aligned faster, reducing friction and duplication of effort.

Greater Focus on Research

Scientists spent less time on administrative reading and more time in the lab, directly accelerating experimental throughput.

Secure and Scalable Foundation

By operating fully on AWS, the Company eliminated the risks associated with SaaS GenAI tools and built a foundation it could extend to future research applications.

Conclusion

The Company’s use of AWS Bedrock-powered summarization demonstrates how secure, domain-specific GenAI can solve one of biotech’s most pervasive challenges: turning mountains of research documents into actionable knowledge.

By partnering with PTP, the Company accelerated document review, improved collaboration, and gave scientists more time to innovate—all while keeping sensitive data protected. The project illustrates the power of combining AWS’s secure AI services with PTP’s life sciences expertise to deliver measurable, real-world impact.

Unlock Faster, Smarter Research with AI-Powered Summarization

Accelerate discovery by transforming dense scientific documents into concise, regulator-ready insights. Partner with PTP to deploy secure, AWS-native AI solutions that save time, improve collaboration, and keep sensitive data protected.

Schedule a call

Schedule your free consultation today.

Tell us a bit about your project to get started with PTP. Fill out the form below and our team will be in touch shortly.

The post Using Document Summarization Successfully in Biotech Research appeared first on PTP | Cloud Experts | Biotech Enablers.

Accelerating Clinical Trial Design with AWS Bedrock Agents

Mai Hiraoka — Tue, 16 Sep 2025 00:33:49 +0000

Accelerating Clinical Trial Design with AWS Bedrock Agents

By deploying AWS Bedrock Agents, the company streamlined clinical trial design, cutting protocol drafting from weeks to hours while improving accuracy, consistency, and scalability across its R&D programs.

Challenges

Solutions

Results

Conclusion

Overview

A research-driven biotech is advancing its pipeline through data-intensive drug discovery and clinical development. Among the most resource-heavy steps in this journey is clinical trial design—a process requiring teams to comb through thousands of historical studies, extract eligibility criteria and endpoints, and draft complex protocols that meet regulatory standards.

While critical to bringing new therapies to patients, protocol design is time-consuming, repetitive, and a frequent bottleneck. The Company sought to test whether Generative AI (GenAI) agents built on AWS Bedrock could streamline trial design, accelerate protocol drafting, and improve consistency across its development programs. Partnering with PTP, the Company launched a proof of concept (POC) centered on two Bedrock-powered clinical development agents, laying the foundation for an extensible GenAI framework to support future R&D needs.

The Challenge

Designing and validating clinical trial protocols introduced two major challenges for The Company:

1. Historical Trial Review

Researchers manually searched ClinicalTrials.gov and related datasets to identify prior studies by condition, intervention, and outcome measures. This repetitive task often took hours or days, with results varying by individual researcher skill and experience.

2. Protocol Drafting

Even with access to templates, drafting trial protocols remained slow and labor-intensive. Researchers had to synthesize best practices from multiple studies, structure content into regulator-ready formats, and iterate through multiple internal reviews.

These inefficiencies slowed R&D progress, delayed hypothesis testing, and consumed valuable researcher time. The Company’s goal was clear: use GenAI to automate repetitive tasks, generate consistent protocol drafts, and free its scientists to focus on innovation—all while staying within compliance boundaries by using public, non-sensitive data.

The Use Case: Clinical Development Protocol Design & Trial Planning

The Company evaluated several possible agentic AI applications but chose to focus the POC on clinical development protocol design, recognizing it as one of the highest-impact areas for immediate improvement.

Two AWS Bedrock Agents were deployed:

Clinical Study Search Agent – Retrieves structured data from ClinicalTrials.gov, enabling researchers to explore prior study designs by condition, intervention, or sponsor. It highlights eligibility criteria, endpoints, and outcome measures from past trials.
Clinical Trial Protocol Generator Agent – Builds draft study protocols using best practices and the Common Data Model (CDM), assisting in drafting inclusion/exclusion criteria, endpoints, and statistical plans.

Together, these agents demonstrated how Bedrock could reduce trial design from weeks of manual work to hours, giving The Company a repeatable foundation for scaling future AI-driven research workflows.

The Solution

PTP deployed a modular, AWS-native architecture leveraging Bedrock Agents and supporting services to meet the Company’s requirements.

Key Solution Components

AWS Bedrock Agents for Orchestration

Orchestrated two agents—Study Search and Protocol Generator—designed to work together in surfacing insights and generating structured drafts.

Amazon S3 + Amazon Textract

Public datasets and trial documentation were securely stored in Amazon S3. Amazon Textract converted files into machine-readable formats, ensuring compatibility with Bedrock for indexing and retrieval.

Amazon OpenSearch & Amazon Kendra

Clinical trial datasets were indexed and enhanced with Amazon Kendra for intelligent, natural language search. This allowed researchers to quickly filter and retrieve trial data with higher accuracy than manual searches.

AWS Lambda & Amazon API Gateway

Provided orchestration and secure endpoints, connecting data sources and Bedrock agents into seamless, researcher-facing workflows using AWS Lambda and Amazon API Gateway.

Reference Code Integration

Leveraged AWS’s open-source Bedrock Agents for Healthcare & Life Sciences catalog as a foundation, adapting orchestration chains and prompt templates to the Company’s unique use case.

Demo Interfaces

Delivered a lightweight chat-style interface and Jupyter notebook integration, giving researchers natural, interactive access to the agents and trial drafting workflows.

Why AWS

The company selected AWS as the backbone for this project because of three critical advantages:

Security and Compliance

Breadth of Model Choice

AWS Bedrock offered access to multiple foundation models through a unified API, allowing experimentation with ProtGPT2, ProtBERT, and other specialized models without costly redevelopment.

Scalability

Why PTP

The company chose PTP as its partner because of its deep expertise in both AWS consulting and life sciences R&D.

Life Sciences Competency

As an AWS Life Sciences Competency partner, PTP brought domain-specific knowledge of biotech workflows, regulatory constraints, and scientific data handling.

Proven AWS Delivery

With years of AWS consulting experience, PTP designed and delivered a pipeline that adhered to AWS best practices while meeting the company’s unique research needs.

Innovation and Enablement

The Results

The POC delivered measurable improvements to The Company’s clinical trial design workflows:

Time Efficiency

Trial dataset search times reduced by ~60%, with relevant study details surfaced in seconds.

Accelerated Drafting

Protocol drafts were generated in minutes, saving 2–3 person weeks per protocol.

Improved Consistency

Standardized retrieval and drafting reduced duplication and variability across teams.

Extensibility

Modular design enabled The Company’s team to extend the framework to additional agent use cases beyond the POC.

Conclusion

The Company’s deployment of AWS Bedrock Agents illustrates how Generative AI can revolutionize clinical trial design, one of the most demanding stages in the drug development lifecycle. By automating historical trial search and protocol drafting, the Company accelerated R&D timelines, reduced costs, and freed researchers to focus on higher-value work.

This successful POC establishes a foundation for expanding Bedrock agent use into adjacent areas such as literature reviews, biomarker discovery, and competitive intelligence—further strengthening the Company’s mission to advance life-saving therapies.

Accelerate Your Clinical Development with AI + AWS

See how Generative AI and AWS Bedrock Agents can streamline trial design, reduce costs, and speed innovation. Partner with PTP to bring efficiency and scalability to your R&D programs.

Schedule a call

Schedule your free consultation today.

Fill out the form below and our experts will connect with you to discuss how AI can transform your research.

The post Accelerating Clinical Trial Design with AWS Bedrock Agents appeared first on PTP | Cloud Experts | Biotech Enablers.

Integrating Machine Learning with Generative AI for Protein Research in Life Sciences

Mai Hiraoka — Tue, 16 Sep 2025 00:05:08 +0000

Integrating Machine Learning with Generative AI for Protein Research in Life Sciences

A biotech company partnered with PTP to integrate machine learning and Generative AI on AWS, creating a secure, scalable pipeline that cut research cycle times, improved collaboration, and accelerated therapeutic protein discovery.

Challenges

Solutions

Results

Conclusion

Overview

A clinical-stage biotechnology company, focused on engineering next-generation proteins to accelerate therapeutic innovation, was searching for AI-enabled advancements to their research. At the heart of their pipeline were machine learning (ML) models that predicted protein folding and interaction patterns, helping researchers identify promising therapeutic candidates. While these ML models delivered powerful predictive capabilities, the company’s scientists faced a persistent bottleneck: turning raw predictions into actionable insights.

Protein research is inherently interdisciplinary, requiring collaboration among computational biologists, molecular modelers, chemists, and wet-lab researchers. While ML systems such as AlphaFold could produce detailed folding predictions, these outputs often needed extensive interpretation and translation into experimental briefs. This process consumed valuable time and slowed experimental cycles, hindering the company’s ability to quickly iterate and validate new therapeutic hypotheses.

To address this challenge, the company partnered with PTP to integrate its existing ML pipeline with Generative AI (GenAI) capabilities on AWS Bedrock. The result was a transformative workflow that combined the predictive power of ML with the contextualization strengths of GenAI. Predictions became clear, plain-language, experiment-ready briefs that allowed interdisciplinary teams to collaborate more effectively, shorten research cycles, and accelerate the development of new protein-based therapeutics.

The Challenge

The company’s research bottlenecks were shaped by three interrelated challenges:

Interpretation Gap

The company’s ML models could generate folding predictions and structural interactions, but these outputs were dense, technical, and difficult for non-specialists to interpret quickly. Cross-functional teams had to spend significant time translating computational predictions into insights usable for experimental design.

Time-Consuming Summarization

Reports summarizing ML outputs were drafted manually by data scientists and computational biologists. Each cycle required days of analysis and writing, extending experimental planning cycles and delaying downstream work.

Scaling Research Output

As the company expanded its protein engineering pipeline, the number of candidate proteins under investigation grew dramatically. Scaling human effort to match ML output was not feasible, creating a widening gap between computational predictions and actionable experimentation.

The company set a clear goal: Join ML to GenAI in a seamless pipeline that could automatically generate structured, comprehensible, and actionable reports—without sacrificing scientific rigor or compliance.

The Solution

PTP designed and implemented an integrated ML + GenAI pipeline on AWS that addressed the company’s bottlenecks and established a repeatable research framework.

Key Solution Components

Data Ingestion & Normalization

Raw protein data—including sequences, structural metadata, and prior experimental results—was ingested into Amazon S3 as the central data repository. AWS Glue pipelines performed data cleaning and normalization, ensuring consistent formats across protein datasets. This allowed downstream ML and GenAI systems to interact with structured, reliable inputs.

Protein Folding with AlphaFold

The company’s existing ML capabilities, centered on AlphaFold, were deployed on Amazon SageMaker to predict protein folding and interaction structures. Outputs included 3D models of folded proteins and associated confidence metrics, stored securely in S3 for accessibility. These predictions formed the foundation of the GenAI-driven contextualization step.

Generative AI Summarization with AWS Bedrock

PTP integrated AWS Bedrock into the pipeline, enabling seamless orchestration of large language models (LLMs) specialized for life sciences data. Using ProtGPT2 and ProtBERT as foundational models, the system was fine-tuned on the company’s proprietary dataset of protein predictions and experimental results. Bedrock agents automatically generated plain-language summaries contextualizing folding predictions, highlighting unique structural features, and identifying potential therapeutic implications.

OpenWebUI Research Interface

Instead of relying on pre-packaged SaaS solutions, PTP deployed a custom OpenWebUI front end. Researchers interacted with the pipeline through a simple, intuitive interface:

Submit queries about specific protein candidates.
Retrieve folding predictions and GenAI-generated summaries.
Access structured experiment briefs ready for validation.

Human-in-the-Loop Validation

While GenAI produced clear, structured outputs, the company insisted on maintaining rigorous scientific oversight. Every GenAI-generated report was reviewed by scientists, who could validate, refine, or discard suggestions. Selected protein candidates underwent a secondary lethality re-check, leveraging AlphaFold and additional ML models to ensure safety before moving to wet-lab validation.

Extensible Framework for Future Growth

PTP built the pipeline with modularity in mind. The orchestration layer—anchored on AWS Lambda and Amazon API Gateway—ensured that new GenAI agents or ML models could be added with minimal reconfiguration. Documentation and training were provided so the company’s team could extend the framework independently.

Why AWS

The company selected AWS as the backbone for this project because of three critical advantages:

Security and Compliance

Breadth of Model Choice

AWS Bedrock offered access to multiple foundation models through a unified API, allowing experimentation with ProtGPT2, ProtBERT, and other specialized models without costly redevelopment.

Scalability

Why PTP

The company chose PTP as its partner because of its deep expertise in both AWS consulting and life sciences R&D.

Life Sciences Competency

As an AWS Life Sciences Competency partner, PTP brought domain-specific knowledge of biotech workflows, regulatory constraints, and scientific data handling.

Proven AWS Delivery

With years of AWS consulting experience, PTP designed and delivered a pipeline that adhered to AWS best practices while meeting the company’s unique research needs.

Innovation and Enablement

The Results

The integrated ML + GenAI pipeline delivered measurable impact across The Company’s protein research workflows:

Time Efficiency

Experiment planning cycles shortened by 35%.

Reports that once required days of manual drafting were now generated automatically in minutes.

Research Productivity

Cross-disciplinary teams gained immediate clarity from GenAI-generated summaries, enabling biologists, chemists, and clinicians to collaborate more effectively.

Faster turnaround times allowed the company to expand the number of protein candidates in active development without adding headcount.

Quality and Consistency

Reports generated in plain language improved communication across the organization.

Consistent formatting and structure ensured that every experimental brief was regulator-ready and scientifically coherent.

Scalable Innovation

The modular framework positioned the company to add new GenAI agents for tasks such as literature review, knowledge graph exploration, or biomarker discovery.

The company’s scientists could now focus on higher-value tasks—hypothesis generation, experimental design, and strategic decision-making.

Conclusion

The Company Bio’s integration of ML and GenAI represents a breakthrough in how biotech organizations can accelerate protein research. By pairing AlphaFold-driven predictions with Bedrock-powered contextualization, the Company transformed dense, technical outputs into experiment-ready briefs that fuel collaboration and speed.

The results speak for themselves: shorter research cycles, more scalable experimentation, and higher-quality outputs—all achieved within a secure, AWS-native framework designed for life sciences. With PTP’s expertise, the Company now has a repeatable pipeline that will evolve alongside their research portfolio.

Most importantly, this project underscores how cloud-native AI integration can fundamentally reshape biotech R&D. For the Company, the fusion of ML and GenAI isn’t just an IT upgrade—it’s a strategic capability that empowers scientists to discover, validate, and deliver new protein therapeutics faster than ever before.

Accelerate Your Research with AI + Cloud

Ready to transform complex data into actionable insights? Partner with PTP, an AWS Life Sciences Competency Partner, to harness machine learning and generative AI for faster, more scalable research.

Schedule a call

Schedule your free consultation today.

Tell us a bit about your project to get started with PTP. Fill out the form below and our team will be in touch shortly.

The post Integrating Machine Learning with Generative AI for Protein Research in Life Sciences appeared first on PTP | Cloud Experts | Biotech Enablers.

PTP Achieves AWS Managed Security Service Provider (MSSP) Competency Status

Mai Hiraoka — Fri, 11 Jul 2025 22:48:40 +0000

July 11, 2025 – PTP, a Life Sciences Cloud MSP/MSSP, announced today that it has achieved Amazon Web Services (AWS) Managed Security Service Provider (MSSP) Competency status in the Solution Provider category. This designation recognizes that PTP has successfully met AWS’s requirements for delivering turn-key security outcomes as a fully managed service, with foundational capabilities in providing 24x7 threat detection.

This standard of quality for managed security services was introduced by AWS to benefit cloud environments of any size and provide customers end-to-end security, compliance, and risk management solutions, leveraging AWS native services and validated third-party tools.

AWS launched the AWS MSSP Competency to enable customers to easily acquire turn-key security outcomes aligned to use case categories, validated by AWS. AWS security experts validate the tools used and operational processes of each MSSP to address specific cloud security challenges such as continuous event monitoring, triaging, AWS service configuration best practices, and 24x7 incident response. The AWS MSSP Competency provides a faster and easier experience for customers to select the right MSSP to help them achieve their goals for business risk and cloud strategy confidence.

“We’re proud to achieve the AWS MSSP Competency, which reinforces our commitment to delivering secure, compliant, and scalable solutions tailored for the life sciences industry,” said Rick Pitcairn, VP of Managed Services at PTP. “This designation reflects the depth of our security expertise and our focus on helping biotech and life sciences clients protect sensitive research data while accelerating innovation in the cloud.”

“Earning the AWS MSSP Competency highlights our team’s ability to design, implement and manage bespoke security solutions that meet the unique regulatory and operational demands of biotech organizations,” said Tim Johnson, PTP Practice Director – Security Services. “From protecting sensitive scientific data to enabling secure, GxP-aligned cloud environments, this achievement reflects our commitment to helping life sciences clients innovate and operate with confidence.”

AWS is enabling scalable, flexible, and cost-effective solutions from startups to global enterprises. To support the seamless integration and deployment of these solutions, AWS established the AWS Competency Program to help customers identify AWS Partners with deep industry experience and expertise.

PTP delivers comprehensive cybersecurity services to enable our life sciences clients to protect their sensitive data, detect threats of compromise, and ensure alignment with compliance and regulatory frameworks. With the majority of PTP’s clients maintaining scientific data in AWS, PTP’s services leverage native AWS security tools and configurations and combine tools and solutions from key solutions partners to provide a comprehensive solution.

About PTP
PTP is a leading IT provider for life sciences companies, delivering managed IT services for life sciences that are secure, scalable, and compliant. Our solutions support biotech IT support, clinical research, and healthcare organizations through tailored strategies in cloud migration, managed cloud services for life sciences, DevOps, FinOps, and cybersecurity.

Through our PeakPlus™ platform, PTP offers fully managed IT services for labs, CROs, and genomics companies, with expertise in life sciences compliance frameworks like HIPAA and GxP. We specialize in IT infrastructure for biotech startups, research IT services for biotech, and IT support for clinical research, helping fast-growing organizations meet regulatory goals, reduce costs, and accelerate innovation.

For more information, visit https://ptp.cloud.

Media Contact:
Gary Derheim
VP, Marketing & Business Development
marketing@ptp.cloud

The post PTP Achieves AWS Managed Security Service Provider (MSSP) Competency Status appeared first on PTP | Cloud Experts | Biotech Enablers.

Streamlining Secure Data Transfers for Financial Applications: Advanced AWS Transfer Family Implementation

Mai Hiraoka — Fri, 04 Jul 2025 03:53:41 +0000

Secure SFTP for Financial Applications in Life Sciences: PTP’s AWS Transfer Family Solution

By deploying AWS Transfer Family with Secrets Manager, Lambda, and enhanced logging, this solution simplified SFTP user management for financial applications, enforced stringent security controls, and enabled seamless compliance auditing.

Challenges

Solutions

Deployment

Conclusion

Executive Summary

PTP is a leading IT services company specializing in managed services and cloud solutions. As a recognized AWS Partner, PTP leverages Amazon Web Services' robust cloud infrastructure to deliver high-performance, scalable, and secure solutions tailored to meet the diverse needs of businesses. PTP provides comprehensive cloud strategies, solutions, and management services that empower businesses to achieve operational excellence.

In this case study, we’ll explore how PTP implemented a secure, automated, and highly available Managed File Transfer (MFT) solution for a customer managing financial data across multiple applications. The customer required stringent security measures, seamless transfer mechanisms, and automated credential management to ensure compliance and minimize IT overhead.

PTP implemented AWS Transfer Family, integrating AWS Secrets Manager for user authentication and credential management with a custom Lambda-based password rotation function. This approach enforced password complexity, rotation compliance, and automation while providing robust endpoint security, granular user access control, encryption, and detailed audit capabilities. By eliminating manual intervention and enhancing compliance, the solution not only addressed security concerns but also simplified access management and offered seamless scalability to adapt to the customer’s growing needs.

Problem Statement

The customer, a life sciences organization operating in a highly regulated GxP environment, required a secure and auditable solution for transferring financial data across multiple vendor applications. Key challenges included:

Compliance: Ensuring adherence to GxP standards for secure file transfers, user authentication processes and auditability.
Security Risks: Preventing unauthorized access to sensitive financial data while implementing robust password and endpoint protection mechanisms.
User Management Complexity: Providing granular access control for multiple named users from different vendors, each requiring isolation and strict permissions.
Operational Overheads: Addressing manual credential rotation and password compliance management that consumed IT resources.
Scalability: Accommodating increasing data volumes and growing user bases with a scalable solution.

These challenges necessitated a secure, automated, and auditable Managed File Transfer (MFT) system designed for high availability and operational efficiency.

Solution Overview

The solution implemented for the Biotherapeutics company included the following key components:

Password Management with AWS Secrets Manager

Passwords for AWS Transfer Family users are stored in AWS Secrets Manager in the format aws/transfer/server-id/username.
A custom Lambda function integrated with API Gateway retrieves these secrets during authentication, ensuring secure, centralized password management.
The Lambda function enforces robust password policies, such as:
- 20-character minimum length with special characters.
- Rotation to prevent reuse of the last 10 passwords.
- Automatic email notifications to users upon password rotation.

Serverless Deployment with AWS SAM CLI

The base of the solution is deployed using AWS Serverless Application Model (SAM) CLI, following Infrastructure-as-Code (IaC) best practices.
Parameters like network configurations, region-specific configurations, and password policies were customized during deployment for optimized integration into the client’s infrastructure.

Custom Authentication via API Gateway and Lambda

AWS Transfer Family relies on a custom authentication provider using API Gateway and Lambda.
Lambda validates user credentials against Secrets Manager and retrieves IAM roles, logical directory mappings, and any IP restrictions.
This design supports dynamic access control and flexible protocol options (SFTP, FTPS, FTP).

CloudWatch Logging and Monitoring

CloudWatch is configured for comprehensive logging and monitoring of the AWS Transfer Family and API Gateway.
Alerts notify the team about suspicious activity or failures, ensuring high availability and security compliance.

Compliance and Security

Source IP address checks are enforced through the custom authentication Lambda.
IAM roles and policies restrict access to only necessary S3 buckets and paths.
All data transfers were encrypted in transit using SFTP protocols, and data at rest in S3 was encrypted with SSE-S3.

Technical Deployment

Password Management with AWS Secrets Manager

Centralized Credential Storage: User credentials are stored in AWS Secrets Manager in the format aws/transfer/server-id/username, ensuring centralized and secure password management.
Custom Password Policies and Rotation: A custom Lambda function is integrated to enforce robust password policies:
- Minimum 20-character passwords with special characters.
- Prevention of reuse of the last 10 passwords.
- Automatic password rotation and notification via email to the respective users.
Automated Rotation: Passwords are rotated periodically using a second Lambda function triggered by Secrets Manager, ensuring compliance with security standards.

Authentication via API Gateway and Lambda

Authentication Flow: AWS Transfer Family relies on a custom authentication provider deployed using API Gateway and a Lambda function.
Dynamic Access Enforcement: During authentication:
- API Gateway triggers Lambda to validate user credentials stored in Secrets Manager.
- Lambda retrieves the associated IAM roles, logical directory mappings, and source IP restrictions dynamically.
Granular Access Control: IAM roles dynamically restrict user access to designated S3 buckets and logical directories, minimizing the risk of unauthorized access.

Serverless Deployment with AWS SAM CLI

The base infrastructure was deployed using AWS Serverless Application Model (SAM) CLI, following Infrastructure-as-Code (IaC) best practices.

Deployment package from AWS blog post was customized to include:

Network configurations (VPC, subnets, security groups).
Region-specific optimizations for the client’s environment.
Additional Lambda function for password rotation and notification.

Monitoring and Logging with CloudWatch

Activity Logging: CloudWatch Logs capture all authentication and data transfer activities across AWS Transfer Family, API Gateway, and Lambda.
Alerting: Custom metrics and alarms are configured to notify the team of suspicious activities or failures.
Audit Reporting: Custom reports are generated using data from Secrets Manager and CloudWatch Logs for auditing purposes.
Insights: These reports track user access patterns, password changes, and failed login attempts.

Compliance and Security Enhancements

End-to-End Encryption: Data in transit is encrypted using SFTP/FTPS, and data at rest in S3 is encrypted using SSE-S3.
Source IP Restriction: Lambda enforces IP address restrictions for enhanced security.
Granular Policies: IAM roles and policies limit users to specific data directories, ensuring they only access their authorized content.

Conclusion

This solution has significantly streamlined the management of approximately 50 external SFTP users in a regulated environment, ensuring robust security controls, seamless automation, and comprehensive logging capabilities. By leveraging AWS Transfer Family with Secrets Manager, Lambda, and supporting services, the solution achieved the following key outcomes:

      Enhanced Security
      Password policies, automated rotation, and prevention of reuse ensure compliance with stringent security standards.
Granular IAM-based access controls restrict users to only their designated data, reducing the risk of unauthorized access.


      Operational Efficiency
      Automation of user credential rotation and direct password delivery minimizes IT team involvement.
Logging and reporting enhancements simplify the monitoring of user activity, making day-to-day management more efficient.


      Streamlined Compliance Audits
      Centralized logging through CloudWatch and custom reports from Secrets Manager provide auditors with clear, actionable insights.
The detailed tracking of user activities and access patterns ensures alignment with regulatory requirements, making audits smoother and faster.

    

This deployment not only meets current operational and security requirements but also positions the system for scalable growth. With automated processes, centralized management, and robust security, the customer is now equipped to handle increasing data transfer demands and evolving compliance needs with confidence.

Simplify credential management and secure data flows with AWS Transfer Family

Learn how PTP helps life sciences teams manage SFTP users, rotate credentials, and stay audit-ready in regulated environments.

Schedule a call

Streamline SFTP Compliance and Credential Automation

Automate secure file transfers, credential rotation, and user access management with AWS Transfer Family—purpose-built for life sciences compliance.

Schedule your free consultation today.

The post Streamlining Secure Data Transfers for Financial Applications: Advanced AWS Transfer Family Implementation appeared first on PTP | Cloud Experts | Biotech Enablers.

Secure & Scalable AWS Transfer Family SFTP Solution for a Therapeutics Company

Mai Hiraoka — Thu, 03 Jul 2025 22:22:18 +0000

Secure & Scalable AWS Transfer Family SFTP Solution for a Therapeutics Company

This document details the deployment of an AWS Transfer Family SFTP solution for a therapeutics company, including setup, user management, and security. It leverages AWS services such as S3, Secrets Manager, API Gateway, and Lambda to enable secure file transfers and user authentication. The solution ensures scalable storage and secure access for external parties.

Challenges

Solutions

Deployment

Conclusion

Executive Summary

PTP is a prominent IT services company and an AWS Partner, known for its expertise in managed services and cloud solutions. They specialize in designing and implementing scalable, secure, and high-performance cloud strategies using Amazon Web Services (AWS). Their services include cloud migration, infrastructure management, and optimization, enabling businesses to enhance operational efficiency and agility.

In this case study, we’ll explore how PTP deployed a secure, scalable, and managed file transfer solution using AWS Transfer Family for a therapeutics company. The solution leverages Amazon S3 for storage, AWS Secrets Manager for secure credential management, Amazon API Gateway for custom authentication, and AWS Lambda for user validation.

This solution enables external parties to securely transfer files to and from the company’s S3 buckets over the public internet using the SFTP protocol. The document provides a detailed guide on the setup, configuration, user management, and security considerations for the SFTP solution, ensuring compliance, scalability, and operational efficiency.

Problem Statement

The therapeutics company implemented a secure and scalable AWS SFTP solution to address key challenges:

Secure File Transfers: AWS Transfer Family ensures encrypted, reliable SFTP transfers over the internet, with S3 providing secure backend storage (SSE-S3).
User Management: Credentials and access control are managed securely via AWS Secrets Manager, with automated validation through API Gateway and Lambda.
Compliance: The solution enforces encryption, IP whitelisting, and least privilege IAM roles, while CloudWatch logging ensures auditability.
Reduced Overheads: Automating user credential management and monitoring minimizes manual intervention.
Scalability: S3's scalability and AWS Transfer Family allow seamless growth in users and data volumes.

This approach delivers a secure, compliant, and efficient SFTP system integrated into the therapeutics company's AWS infrastructure. These challenges necessitated a cloud-based solution that could handle SFTP protocols, manage user credentials securely, and integrate with existing AWS infrastructure.

Solution Overview

The solution implemented for the therapeutics company included the following key components:

AWS Transfer Family

A fully managed service that supports secure file transfers using SFTP, FTPS, and FTP protocols.
Replaces the need for traditional file servers, cutting down on infrastructure management and costs.
Facilitates secure file uploads and downloads directly to/from Amazon S3, making it ideal for external collaboration.

Amazon S3

Offers scalable storage to handle growing file sizes and data volumes effortlessly.
Includes Server-Side Encryption (SSE-S3) to ensure data is encrypted at rest for security.
Versioning feature keeps track of file changes, enabling easy recovery and error management.

AWS Secrets Manager

Provides a centralized, secure repository for storing sensitive credentials like passwords and SSH keys.
Data is encrypted at rest and accessed only through authenticated API calls.
Simplifies credential rotation to meet compliance and security requirements.

Custom Authentication (API Gateway & Lambda)

API Gateway validates user credentials by invoking a Lambda function, which retrieves data from Secrets Manager.
Dynamically assigns IAM roles to limit user access to specific S3 directories based on permissions.
Supports both password and SSH key authentication, with IP whitelisting for added security.

CloudWatch Monitoring

Tracks and logs all authentication and file transfer activities for visibility and compliance purposes.
Monitors key metrics such as login attempts and errors to ensure system availability.
Sends alerts for suspicious activities, enabling quick detection and resolution of potential issues.

Technical Deployment

Password and Credential Management

Secure Storage: User credentials, including passwords and SSH keys, are securely stored in AWS Secrets Manager using a predefined naming format (aws/transfer/server-id/username).
Automated Validation: A Lambda function, integrated with API Gateway, dynamically retrieves and validates credentials during login attempts.
Enhanced Security with IP Whitelisting: The solution includes optional IP whitelisting, restricting access to trusted IP ranges.

Custom Authentication via API Gateway and Lambda

Request Processing: API Gateway passes login credentials to Lambda, which validates them against Secrets Manager.
Dynamic Configuration Enforcement: The Lambda function retrieves:
- IAM Roles: Defines user permissions.
- S3 Access Paths: Limits access to specific folders.
- Logical Directory Mappings: Simplifies SFTP navigation.

Protocol-Specific Support

The architecture supports SFTP, FTPS, and FTP protocols, catering to diverse file transfer requirements.

AWS Transfer Family Setup

Endpoint Configuration: An internet-facing SFTP endpoint is set up with a custom hostname (sftp.company.com).
Network Security: Uses VPCs, subnets, and security groups to route traffic securely.

Data Storage with Amazon S3

Dedicated Bucket: Stores all transferred files in a secure S3 bucket (company-sftp-bucket-01).
Server-Side Encryption (SSE-S3): Encrypts data at rest.
Versioning: Maintains a change history for recovery purposes.
Cross-Account Access: Implements bucket policies to control external access.

Monitoring and Logging

CloudWatch Logging: Tracks authentication, file transfers, and system activity.
Metrics Tracking: Monitors login attempts, errors, and successes.
Alerts and Notifications: Detects suspicious behavior and triggers alerts.

Security and Compliance Enhancements

End-to-End Data Encryption: Ensures encryption in transit and at rest.
Granular IAM Policies: Restricts S3 access to specific users.
IP Restrictions: Allows access only from approved IPs via Secrets Manager.

Scalability and Efficiency

Amazon S3 Scalability: Seamlessly handles growing data volumes.
High Availability: Maintains uptime even with high user activity.
Automation: Reduces overhead by automating access, validation, and monitoring.

Conclusion

The AWS Transfer Family SFTP solution for the therapeutics company is a robust, secure, and scalable system designed to facilitate file transfers over SFTP while leveraging AWS managed services. The architecture ensures secure authentication, reliable storage, and efficient user management. By integrating services like AWS Secrets Manager, API Gateway, and Lambda, the solution provides a seamless and secure way to manage user access and file transfers. The solution uses Amazon S3 as the backend storage, providing a reliable and scalable place to store transferred files. Additionally, it supports both password-based and SSH key-based authentication, offering flexibility for different user needs. The system is designed with detailed logging and monitoring through CloudWatch, allowing for easy tracking of file transfers and user activity.

Overall, the solution is well-suited for organizations like this therapeutics company that require secure and scalable file transfer capabilities, with the added benefit of AWS's managed services reducing the operational overhead.

Discover how we can simplify secure file transfers in your AWS environment

Let our AWS experts show you how to implement scalable, compliant SFTP solutions with zero hassle.

Schedule a call

Get Secure, Scalable IT Built for Life Sciences

Whether you're launching a new lab, managing clinical research, or scaling biotech operations, PTP helps you move faster with compliant, cloud-first solutions.

Schedule your free consultation today.

The post Secure & Scalable AWS Transfer Family SFTP Solution for a Therapeutics Company appeared first on PTP | Cloud Experts | Biotech Enablers.

How to Secure Proteomics Research in AWS with Role-Based Access Controls

Mai Hiraoka — Tue, 03 Jun 2025 07:31:08 +0000

PTP Solves: How to Secure Proteomics Research in AWS with Role-Based Access Controls

A growing biopharma company conducting advanced proteomics research needed to streamline and secure access to sensitive AWS-hosted data while complying with internal controls and auditable standards. PTP partnered with their cloud team to build a region-specific, role-based access (RBAC) model in AWS that allowed researchers to move faster while maintaining least-privilege access and full governance.

The Challenge: Sensitive Research, Disparate Access

With a robust AWS environment supporting proteomics data pipelines, this biotech innovator faced several issues:

Disjointed IAM permissions across users and services
A growing number of users who needed controlled access to data in a specific AWS region (US East–Ohio)
Audit requirements around who accessed what, and when

Their infrastructure team needed a way to simplify identity and access management while ensuring researchers and data scientists had just the access they needed—no more, no less.

The Solution: Role-Based Access Architecture in AWS Ohio

PTP designed a tailored solution that utilized:

IAM Roles and Policies purpose-built for proteomics workflows
Region-specific constraints, ensuring users could only access resources in the AWS Ohio region
Group-based permissions, mapped to organizational roles (e.g., researcher, analyst, admin)
Logging and Monitoring, with CloudTrail and AWS Config for audit trails

By separating roles by job function and geography, the company gained tighter control over how sensitive proteomics datasets were used, without slowing down discovery.

The Results: Secure, Scalable Research Access

PTP’s RBAC implementation delivered:

Improved compliance with internal security frameworks
Clear, auditable access to proteomics environments
Reduced IAM complexity, saving hours of manual policy reviews
Faster onboarding of new users and collaborators

The solution enables researchers to operate confidently in a secure and structured cloud environment aligned with both scientific needs and IT governance.

Why It Matters

Biopharma organizations are unlocking breakthroughs through cloud-based research. But without the right access controls, they risk data leaks and operational friction. This project demonstrates how regional RBAC architecture in AWS can accelerate innovation while protecting the integrity of mission-critical research.

Need help securing your cloud workloads for regulated or sensitive research?
Contact PTP to learn how we enable secure, scalable access for life sciences teams.

👉 Schedule a consultation todayor find us on 👉 AWS Marketplace

The post How to Secure Proteomics Research in AWS with Role-Based Access Controls appeared first on PTP | Cloud Experts | Biotech Enablers.

How Life Sciences Companies Can Maximize EC2 Performance for Research Workloads

Mai Hiraoka — Tue, 03 Jun 2025 07:24:04 +0000

PTP Solves: How to Maximize EC2 Performance for Life Sciences Research Workloads

For life sciences organizations, time is often the most valuable resource. Whether you’re running computational chemistry models, next-gen sequencing pipelines, or AI-driven drug discovery, your Amazon EC2 performance directly affects your speed to insight. PTP partners with life sciences companies to fine-tune their EC2 environments, unlocking greater performance, lower costs, and faster time-to-value across high-compute workloads.

The Challenge: Compute Bottlenecks in a Cloud-First World

As life sciences firms migrate legacy HPC workloads to the cloud, many face issues like:

Inconsistent instance sizing and usage patterns
Latency between storage and compute
Underutilized reserved instances or overreliance on spot markets
Insufficient monitoring of real-time performance metrics

Without proactive optimization, these inefficiencies slow critical research and inflate cloud costs: two outcomes fast-paced biotech teams can’t afford.

The Solution: EC2 Performance Optimization at Scale

PTP works with biotech and pharmaceutical organizations to design high-performance EC2 environments aligned with the unique demands of life sciences workloads. Our approach includes:

Instance right-sizing based on usage telemetry and growth forecasts
Auto Scaling Groups to match compute demand in real time
EBS and FSx for Lustre configurations optimized for data-intensive workflows
Placement groups and Nitro-based networking for reduced latency
Savings Plan recommendations that align performance needs with budget constraints

PTP has helped several research teams reduce runtime by 30–60% for large-scale protein modeling and genomics pipelines.

Real Results: Faster Compute, Smarter Spend

Life sciences clients that optimize EC2 with PTP benefit from:

Shorter run times for modeling and analysis workloads
Higher throughput for parallel computing tasks
Lower cost per compute hour, improving budget predictability
Streamlined DevOps pipelines for deploying HPC environments faster

For one mid-sized biopharma company, PTP helped reduce EC2 costs by over $100K annually while cutting NGS workflow times nearly in half.

Why It Matters for Life Sciences IT Leaders

As biotech organizations embrace cloud-native research, EC2 performance becomes a strategic differentiator. Whether supporting AI-driven drug pipelines or high-throughput screening, optimized EC2 environments are no longer optional: they’re essential.

If your team is hitting performance ceilings with EC2 (or just wants to know what’s possible), PTP can help.

We specialize in AWS architecture for life sciences workloads and understand the nuance of research IT.

👉 Schedule a consultation todayor find us on 👉 AWS Marketplace

The post How Life Sciences Companies Can Maximize EC2 Performance for Research Workloads appeared first on PTP | Cloud Experts | Biotech Enablers.

Win Prizes at Nextflow Summit 2025 – Sponsored by PTP

Mai Hiraoka — Mon, 12 May 2025 23:53:52 +0000

Enter to Win at the Nextflow Summit!

PTP is a proud Silver Sponsor of the 2025 Nextflow Summit, happening May 13–25, 2025.

We’re thrilled to support the open science and bioinformatics community—and we want to hear from you!

\ud83d\udd52 Time & Place<\/span><\/strong><\/h3>\n
<\/span><\/p>\n
Dates:<\/strong> May 13\u201325, 2025<\/p>\n
Location:<\/strong> Aloft Boston Seaport District
401-403 D Street
Boston, MA 02210<\/p>\n
","tablet":"
\ud83c\udfc6 Prizes
\n<\/strong>
\nGrand Prize:<\/strong> Apple AirPods Pro 2<\/p>\n
2nd Prize:<\/strong> $50 Amazon Gift Card<\/p>\n
3rd Prize:<\/strong> $25 Amazon Gift Card<\/p>"}},"slug":"et_pb_text"}" data-et-multi-view-load-tablet-hidden="true">
🕒 Time & Place

Dates: May 13–25, 2025

Location: Aloft Boston Seaport District
401-403 D Street
Boston, MA 02210

\ud83c\udfc6 Prizes
<\/strong>
Grand Prize:<\/strong> $100 Amazon Gift Card<\/p>\n
2nd Prize:<\/strong> $50 Amazon Gift Card<\/p>\n
3rd Prize:<\/strong> $25 Amazon Gift Card<\/p>\n
","tablet":"
\ud83c\udfc6 Prizes
\n<\/strong>
\nGrand Prize:<\/strong> Apple AirPods Pro 2<\/p>\n
2nd Prize:<\/strong> $50 Amazon Gift Card<\/p>\n
3rd Prize:<\/strong> $25 Amazon Gift Card<\/p>"}},"slug":"et_pb_text"}" data-et-multi-view-load-tablet-hidden="true">
🏆 Prizes

Grand Prize: $100 Amazon Gift Card

2nd Prize: $50 Amazon Gift Card

3rd Prize: $25 Amazon Gift Card

How to Enter

Just fill out the form below with your name, company, and email. Winners will be contacted after the event!

Entries must be submitted by 4 PM on May 15, 2025

Biofest Invest 2025

First Name

Last Name

Company Name

Email

If you are human, leave this field blank.

Δ

Supercharge Innovation with PTP

Watch our video to see how you can harness PTP’s AWS expertise for faster research, smarter workflows, and groundbreaking discoveries.

Learn More About PTP

The post Win Prizes at Nextflow Summit 2025 – Sponsored by PTP appeared first on PTP | Cloud Experts | Biotech Enablers.

How to Upgrade Slurm Headnode Swapspace to 10GB for Better Cluster Performance

Mai Hiraoka — Wed, 07 May 2025 23:53:43 +0000

PTP Solves: How to Upgrade Slurm Headnode Swapspace to 10GB for HPC Stability

System stability and performance are key in high-performance computing (HPC) environments, especially when managing complex job scheduling through Slurm. One common bottleneck that admins encounter is insufficient swapspace on the Slurm headnode, which can lead to sluggish performance, system crashes, or stalled jobs.

In this guide, we’ll walk you through how to upgrade your Slurm headnode swapspace to 10GB, ensuring your cluster remains stable and responsive under heavy load.

Why Swapspace Matters in HPC Environments

Swapspace acts as an overflow for your system’s RAM. When physical memory is exhausted, swapspace prevents crashes by temporarily storing inactive memory pages on disk. On a Slurm headnode—often responsible for managing job queues, scheduling tasks, and maintaining state—having too little swap can become a critical issue.

By increasing your swapspace to 10GB, you create a buffer that helps:

Prevent system hangs due to memory exhaustion.

Maintain responsiveness during heavy job loads.

Improve reliability for large-scale simulations or AI workflows.

How to Check Current Swapspace

Before you upgrade, it’s helpful to check how much swap you currently have:

bash

CopyEdit

swapon –show

free -h

If your swap is less than 10GB (or missing entirely), it’s time to upgrade.

How to Add or Resize Swapspace to 10GB

Step 1: Disable Existing Swap (if applicable)

If you already have a swapfile or partition in use:

bash

CopyEdit

sudo swapoff -a

Step 2: Create a New 10GB Swapfile

bash

CopyEdit

sudo fallocate -l 10G /swapfile

If fallocate doesn’t work, use:

bash

CopyEdit

sudo dd if=/dev/zero of=/swapfile bs=1G count=10

Step 3: Set Correct Permissions

bash

CopyEdit

sudo chmod 600 /swapfile

Step 4: Make It a Swapfile

bash

CopyEdit

sudo mkswap /swapfile

Step 5: Enable the Swapfile

bash

CopyEdit

sudo swapon /swapfile

Step 6: Make It Persistent

Add the following line to /etc/fstab:

bash

CopyEdit

/swapfile none swap sw 0 0

Verify the Upgrade

Check your updated swap configuration:

bash

CopyEdit

swapon –show

free -h

You should now see a 10GB swap space active on your Slurm headnode.

Final Thoughts: Boosting HPC Reliability with Proper Swap Management

In HPC environments, small configuration changes can have a big impact. Upgrading your Slurm headnode swapspace to 10GB is a straightforward way to boost reliability and reduce user downtime.

At PTP, we specialize in helping research institutions and enterprises optimize their HPC and cloud-based clusters. Whether you’re running Slurm on-premise or in a hybrid setup, we’re here to help keep your infrastructure fast, stable, and scalable.

Struggling with HPC performance or Slurm optimization?
Let PTP help fine-tune your infrastructure for faster, more reliable research computing.

👉 Schedule a consultation todayor explore👉 PTP's DevOps Services

The post How to Upgrade Slurm Headnode Swapspace to 10GB for Better Cluster Performance appeared first on PTP | Cloud Experts | Biotech Enablers.