DevOps & App Evolution • Fintech • AWS
Secured Fintech platform with EC2, Redis Flavor and Aurora Postgres
Fintech company achieves a platform that meets the necessary requirements in terms of security and high availability.
About the client
Smart Structuring is a blockchain interface that stores trust ledgers in a perpetual, secure and transparent manner.
Needs
From the customer’s perspective, it was essential to have a platform capable of delivering the company’s services to a large number of users simultaneously.
As this was a new application developed by a third party, the initial requirements established a division into two layers: the application layer and the database layer.
For both, the need for elasticity, high availability, and security was emphasized. The central premises were: ´No fraud, no loss of records, no embezzlement´.
Solution
Nubiral analyzed the customer pain points and propose to indeed have the application broken down into two layers, for the app layer the services to use were an application load balancer to distribute the traffic evenly between servers, EC2 instances to handle high peaks and high demand, a Bastion Host to allow safe connections to the application to do O&M. Each service in this layer has its own security group configuration.
For the Database layer, Nubiral proposed to use two services, an ElastiCache (Redis Flavor) to handle the frequently queries or consults and Aurora Postgres compatible do to the advantages that the service offers, whether it be the easiness to scale, to handle picks and high volume traffic, and also the ability to perform a failover to the secondary node without affecting the performance of the applications or the end-users.
In terms of security Nubiral decided first to use IAM policies to segregate the access of users to the AWS Console, as a second step to deploy the application and database into private subnets, use a bastion host to allow access to the application hosted in the EC2 instances, and to store the database password in secrets manager. Both the EC2 and the Aurora database have their own security groups.
In terms of networking, the setup configuration was:
– A public subnet for the bastion host and the EC2-APP.
– A private subnet for the RDS Cluster.
– Deployments in differentes AZ inside the same region.
Results
The client had as a result a platform that met the necessary requirements in terms of security, high availability and fault tolerance. Thus, it was able to provide an optimal service to its clients.
Case Study Data & Innovation
Expert help to manage infrastructure and data
This important Argentine energy company chose Nubiral to obtain high-level support for its Oracle solutions and an advanced monitoring system for its critical IT assets.
Case Study Hybrid Multi Cloud
Deployment of AWS Control Tower and migration of services to Openshift
A major bank needed to migrate its workloads to the cloud and decided to rely on Nubiral for the initial configuration in AWS.
Case Study DevOps & APP Evolution
Development to integrate Gala chatbot into the CloudGuru educational platform
The client needed to evolve their Gala chatbot so that end users could consume information from their centralized documentation platform.
Case Study Monitoring & Intelligence
Implementation of monitoring solution with Zabbix
Private bank implements comprehensive Observability solution with Nubiral to optimize and gain greater visibility of its Infrastructure health.