How Dunelm Uses CloudQuery and Snowflake to Enhance AWS Security

Dunelm is a large, UK-based home retailer specialising in furniture, homewares and DIY necessities. As well as a large estate of retail stores, the company runs a major e-commerce platform offering home delivery services as well as in-store collection. This multi-channel approach means that the retailer has a large amount of data to analyze and secure.

Dunelm's challenge

Dunelm Technology’s journey into Cloud Security Posture Management highlights their approach to enhancing security across their cloud environments, especially AWS. These tools help manage cloud security by assessing confidentiality, integrity, and availability, offering valuable recommendations. Dunelm uses multiple AWS services, including AWS Security Hub, which integrates with other AWS services for a comprehensive security view.

Why Dunelm chose CloudQuery

Despite AWS Security Hub’s strengths (e.g., infrastructure as code support and integration with AWS Organizations), its limitations in visualization, reporting, and historical analysis led Dunelm to explore alternatives like AWS QuickSight and custom-built tools. Ultimately, they leveraged CloudQuery, an open-source data integration platform, combined with Metabase for visualization, resulting in a robust stack that integrates various security findings from AWS, Auth0, GitLab, and more.

The choice of CloudQuery gave Dunelm complete flexibility of choice over the tools that they used to get the job done. By leveraging our large library of integrations to get the job done.

To address scale and performance, Dunelm moved to Snowflake for data warehousing and migrated CloudQuery and Metabase to AWS Elastic Container Service. Their next steps include refining their AWS security architecture and exploring AWS Security Lake.

Learn more

For a more detailed breakdown of Dunelm’s cloud security posture management implementation, check out the full post here. CloudQuery is a key part of the implementation that