Case Studies from the Cloud: Riot Games & TrackIt Level Up Security and Efficiency with AWS

About Riot Games

Riot Games, Inc. is an American video game developer, publisher, and esports tournament organizer. Founded in 2006 and headquartered in Los Angeles, California, the company is best known for its flagship title, "League of Legends," a popular multiplayer online battle arena (MOBA) game. Riot Games also produces other games, including "VALORANT" and "Teamfight Tactics," and develops related media content such as music and animation. The company also plays a significant role in global esports by organizing and promoting competitive gaming tournaments.

From Subclip Rendering to SIEM Implementation

Riot Games initially collaborated with TrackIt to address challenges related to the rendering of sub-clips within their Iconik Media Asset Management (MAM) system. TrackIt developed a workflow integrating Iconik with AWS services, significantly enhancing the efficiency and reliability of subclip rendering. 

Building on this success, Riot Games approached TrackIt with the idea of implementing a Security Information and Event Management (SIEM) dashboard to enhance its monitoring capabilities and security oversight. TrackIt assisted Riot by providing multiple options to define and develop a comprehensive solution. This case study explores the implementation of the SIEM dashboard and outlines the approach and technologies employed.

“We were looking to better make sense of our logs. We wanted to be able to visualize what’s happening in our system and be able to track our user activity, detect anomalies, and fraudulent behavior.” Jeremy Schoen, Solutions Architect, Riot Games

Implementation

Workflow steps

The workflow utilized Iconik Shield connected to an Amazon SQS queue for log storage. A dead-letter queue (DLQ) was attached to the primary SQS queue to handle message redrives in case of errors.

An AWS Lambda function was responsible for polling the logs from the SQS queue and enhancing them with originating user data and geolocation based on the source IP. The following resources were aggregated for all actions:

• User groups

• Users

• Metadata Views

• Saved Searches

• Jobs

These actions were then indexed into an Amazon OpenSearch Cluster. Dedicated Lambda functions were connected to Amazon EventBridge and triggered on a daily basis to synchronize Iconik users, user groups, metadata views, and saved searches into dedicated OpenSearch indices.

Outcome

The implemented OpenSearch dashboards provide rich visualizations, enabling the Riot Games team to monitor user actions on Iconik. These dashboards offer detailed insights into various user activities, allowing for enhanced tracking and analysis. The entire workflow resides within a Virtual Private Cloud (VPC), ensuring that all data is securely contained and managed. Additionally, the use of a VPN connection guarantees restricted access, further bolstering the security measures in place. 

Riot Games now benefits from a robust and secure monitoring system, facilitating better oversight and control over their media asset management operations.

“I love how technical the team is and how they do not wait to ask questions to get a better understanding of our requirements. It is also refreshing to work with a team that proposes solutions while asking questions. This makes it very easy for us to make decisions.” Jeremy Schoen, Solutions Architect, Riot Games

Metrics

• Increased visibility (at least 50%) and ability to monitor user activity at a granular level

• 30% less chance of security anomalies occurring 

“I would absolutely recommend TrackIt to companies looking to implement solutions on AWS. I do, however, have a recommendation for any company looking to engage TrackIt. You need to be ready for a higher level of involvement. This means being responsive, answering questions on time, and assisting the team with any requirements they may have to deliver the best solution for you. TrackIt offers the proximity of an internal team but the flexibility of an external vendor.”  Jeremy Schoen, Solutions Architect, Riot Games

Additional Information & Resources

• Want to learn more about how AWS cloud solutions can boost efficiency and security for your company? Check out our website or give me a shout!

• TrackIt's complete list of AWS Marketplace offerings can be found here.

• The possibilities are vast when it comes to media workflows in the cloud. Visit TrackIt's LinkedIn company page where you'll find a wide library of articles, blog posts, and infographics.

• What else is Riot Games up to? Head over to their website or LinkedIn company page to find out!

• Finally, AWS for Games is transforming game workloads in countless ways. Navigate to AWS for GameTech for a wide variety of other case studies in the gaming world.