Hybrid-Cloud Cyber Resilience for Banking and Treasury Infrastructure in Saudi Arabia: Integrating AWS/Azure, Identity Management, and Secure Data-Centre Operations

Abstract

Hybrid-cloud adoption is reshaping the operating model of banks and treasury functions, but resilience depends on more than distributing workloads between public cloud and internal data centres. Banking infrastructure combines high-value transaction flows, privileged identities, regulatory obligations, legacy integration, real-time interfaces, and strict recovery expectations. This review develops a decision-support framework for hybrid-cloud cyber resilience in Saudi banking and treasury infrastructure by integrating AWS and Azure control patterns with identity management, secure data-centre operations, observability, recovery engineering, and governance. A structured integrative review was undertaken using peer-reviewed and authoritative sources published from 2020 to 2025. The synthesis concentrates on five recurring problems: fragmented identity control, configuration drift across heterogeneous platforms, weak visibility between cloud and on-premises domains, recovery designs that do not sufficiently address cyber compromise, and control duplication that increases complexity without improving assurance. The resulting framework treats identity as the principal trust plane, cloud landing zones as governed workload domains, the data centre as an actively secured component rather than a residual legacy environment, and resilience as a closed-loop capability linking prevention, detection, containment, recovery, and evidence. The review argues that Saudi banks can obtain greater resilience when multi-cloud flexibility is constrained by common policy, strong privilege governance, workload segmentation, immutable recovery, unified telemetry, and business-led recovery objectives. The framework also aligns architectural choices with national cloud-security expectations and Vision 2030 priorities for secure digital financial infrastructure.