From our projects ยท Financial & Business Operations
Moving a regulated investment firm's core application to AWS
Migrating, re-platforming and refactoring a core application onto containers, with a CI/CD pipeline and automated security operations.
The situation
A regulated investment management firm ran its IT from on-premises infrastructure. It wanted to stop managing physical infrastructure, reduce operational overhead, increase resilience and shorten and automate its software development lifecycle, with security as a top priority.
The challenge
- On-premises infrastructure that had to be managed and maintained.
- Systems that are continuously improved and new solutions that must be released quickly and safely.
- Security, resilience and availability required at the highest standard, with monitoring, logging and automated incident response.
What we did
Review requirements
We reviewed the existing systems and processes together with business and regulatory requirements.
Migrate, re-platform and refactor
The core application moved to containers on Amazon ECS with Fargate, with autoscaling and scheduling through Lambda and EventBridge. It was decoupled into a three-tier architecture, and the database tier was re-platformed to Amazon RDS.
Automate delivery
A CI/CD pipeline with blue/green deployments lets new features and algorithms go live quickly.
Build security in
We followed the Security pillar of the AWS Well-Architected Framework: encryption in transit and at rest, least-privilege access at every layer, protected secrets, and monitoring with automated alerting and remediation.
The outcome
- Significantly reduced operational overhead, with cost savings.
- Infrastructure on current AWS services with high resilience, scalability and security.
- Monitoring, incident detection, alerting, response and remediation are automated.
- New features and algorithms are deployed quickly through CI/CD and blue/green deployments.
AWS services used
- Amazon ECS and AWS Fargate
- AWS Lambda
- Amazon EventBridge
- Amazon RDS
- AWS CodePipeline
- AWS CodeCommit
- AWS CodeBuild
- Amazon ECR
- AWS CodeDeploy
- AWS KMS
- AWS IAM
- AWS Secrets Manager
- AWS Systems Manager
- Amazon CloudWatch
- AWS CloudTrail
- AWS Config
Related services
- Migration & ModernisationMove workloads to AWS and modernise them where it pays off, from single applications to entire estates.
- DevOps & Platform EngineeringAutomated delivery pipelines, infrastructure as code and internal platforms that help teams release safely and often on AWS.
- Security & ResilienceCloud security, backup and disaster recovery on AWS, designed to your recovery objectives and audit needs.
Client details are withheld.
Have an AI or Cloud challenge to solve?
Let's identify the opportunity and determine the right path to a working solution.
Discuss Your Initiative