The New South Wales SEED Platform Plants New Ideas with Cloud Modernisation

For landowners in New South Wales (NSW) who are curious about koala sightings or fire history in their area, the Sharing and Enablement of Environmental Data (SEED) portal is a comprehensive resource. Launched in 2016 by the NSW government and managed by the NSW Department of Planning, Industry & Environment (DPIE), SEED aims to streamline the discoverability of environmental data, empowering evidence-based decision-making and increasing trust through greater transparency. SEED has a broad remit of stakeholders including researchers and academics, environmental regulators, and the community at large.

As of 2021, the open-access, web-based portal acts as a centralised hub for over 2,700 public and private datasets, up from 70 in 2016. SEED includes many user-friendly tools, including an interactive map with over 400 layers that users can manipulate to create custom queries. They can then download the query results for further analysis.

SEED was operating on the Amazon Web Services (AWS) Cloud, but inefficiencies crept into the platform design over the years. The SEED team, which includes project managers and a marketing lead, undertook a systematic overhaul aimed at modernising the portal with the assistance of AWS Partner PolarSeven. This partnership involved optimisation of platform reliability, adopting best technology practices, and the introduction of innovative tools to accommodate growing datasets.

In line with the vision of the SEED platform, the goals of the modernisation project were to improve management efficiency and enable fast, transparent data access. To maximise efficiency and enhance SEED’s capacity, PolarSeven came on board to manage the service desk and backend infrastructure of the portal.

For SEED, modernisation goes hand-in-hand with simplification. By re-architecting the platform in a cloud-native environment, SEED’s stakeholders have improved visibility and a deeper understanding of workflows.

“We’ve taken a disciplined approach to refining and redefining processes in the AWS Cloud, which provides a clearer picture to manage issues and understand the implications of change,” says Sten Christensen, DPIE’s senior team leader for SEED. “We also have a more accurate view of timelines and costing when we want to scale up or enhance the platform, so we know immediately whether we can proceed from a budgeting perspective.”

The modernisation and resulting improvements in SEED’s change management process have enhanced DPIE’s partnerships with vendors on platform innovations. The organisation has implemented a detailed schematic of SEED’s architecture that’s always up to date. “The modernisation has facilitated new work with partners and vendors in an open way,” Christensen says. “Having that understanding and architecture readily available allows us to drive new service delivery plans and isolate problems faster.” Previously, it could take a full day to trace the chain of events causing a system failure, whereas now it only takes 1–2 hours.

One of the first points on the modernisation agenda was to streamline user access and security management. Previously, there was a complex structure to access and navigate SEED datasets. After optimising the portal, users, developers, and administrators benefit from single sign-on to retrieve data across multiple directories in the SEED portal.

SEED is a growing entity. To minimise system vulnerability as data is added to the portal, PolarSeven has enabled end-to-end data encryption and group policies following the principle of least privilege. Additionally, PolarSeven implemented AWS Security Hub to detect deviations from security best practices and aggregate alerts. A monitoring solution using Amazon CloudWatch and Amazon Simple Notification Service (Amazon SNS) immediately reports abnormal behavior and system lags to the PolarSeven service desk for remediation.

SEED’s elevated security posture not only fulfills the requirements of Australian regulators, but also saves time for users when downloading data as well as ensures easy access.

Following SEED’s modernisation vision, automation of workflows was next on the list toward system optimisation. Automated provisioning with AWS CloudFormation templates reduced the manual effort associated with release management and made the process replicable and auditable. The team also rebuilt four Windows applications using infrastructure-as-code templates as part of the modernisation project. Similar to release management, version control was automated within the deployment process, which reduced the requirement for SEED app vendors to directly access servers or databases associated with the platform. This, in turn, mitigates SEED’s vulnerability to any potential threats. DPIE also uses Amazon WorkSpaces to streamline remote vendor access and has integrated single sign-on controls for each vendor to centralise identity management.

Adopting infrastructure as code through AWS CloudFormation and AWS Lambda has not only enhanced security due to the ease of tracking changes, but also enabled a DevOps approach to infrastructure management. SEED has built in AWS CodeBuild and AWS CodePipeline as fully managed continuous integration/continuous delivery (CI/CD) services. Scaling is simpler with these CI/CD tools because builds are not left waiting in a queue.

Christensen estimates the team is saving about five days a month from automated provisioning, deployments, scaling, and reduced issue resolution time. Time savings have also resulted from smoother integrations on the AWS Cloud. The SEED team has eliminated one of four IT environments, systems integration testing, which further condenses the release cycle for updates and new features. 

With platform modernisation now complete, the SEED team is turning its attention to developing new tools and planning enhancements to the SEED map user interface. Christensen says, “We want to increase the number of datasets and are focused on improving the user experience rather than the operational side of things. We’re thinking more about the business and the platform, and that’s where we want to be.”

 To learn more, visit aws.amazon.com/government-education.