About Customer
The customer offers a wide range of insurance plans, such as term plans, savings plans, ULIP plans, child plans, etc. The insurer has a distribution network of over 500 cities and 560 branches.
Challenge
Problem
- The client is experiencing difficulties with resources cost management and resource tagging in their on-premises infrastructure. Additionally, they are facing issues related to the sizing and resizing of their infrastructure, struggling to achieve minimal downtime during these operation
- The client is encountering challenges with managing vendor access in their on-premises infrastructure
Benefit of solving it
We propose a comprehensive landing zone architecture designed to deploy their workloads and applications effectively. This architecture adheres to best practices and ensures that critical requirements are met, including:
- Multi-Account Architecture: Enables isolated and secure environments for different applications or teams, enhancing security and operational efficiency.
- Identity and Access Management (IAM): Implements robust IAM policies to ensure secure and controlled access to resources, adhering to the principle of least privilege.
- Governance: Establishes a framework for compliance and policy enforcement, ensuring that organizational standards are consistently applied across all accounts.
- Data Security: Employs advanced security measures to protect sensitive data, including encryption at rest and in transit, as well as regular security assessments.
- Network Design: Provides a scalable and secure network architecture, including VPCs, subnets, and security groups, tailored to meet the specific needs of their applications.
- Logging: Implements comprehensive logging and monitoring solutions to ensure visibility into system activities, facilitating troubleshooting and auditing.
This proposed landing zone architecture is tailored to support their specific requirements, ensuring a secure, scalable, and compliant environment for their workloads and applications.
Solution
We have taken several strategic measures to optimize their infrastructure and improve operational efficiency:
- Reserved Instances (RIs): We have purchased Reserved Instance (RI) plans for their most consumed EC2 resources. This strategy significantly reduces the overall cost of their infrastructure by securing lower rates for long-term usage.
- Automated Data Backup: By enabling automated data backups, we have eliminated the need for manual backup efforts. This ensures data integrity and availability while freeing up valuable time for our team to focus on more critical tasks.
- AWS EKS Migration: To enhance flexibility, customization, scalability, and automation capabilities, we have migrated select applications to AWS Elastic Kubernetes Service (EKS). This move allows for more efficient resource management and streamlined application deployment.
These measures collectively contribute to a more cost-effective, resilient, and scalable infrastructure, supporting theirbusiness’s growth and operational needs
Multi-factor authentication is enabled for each IAM user, and password rotation has been put into effect. Furthermore, Amazon Guardduty is used to identify compromised accounts, which can be hard to find fast if you’re not keeping an eye on things in almost real time.
Tools Used/Services
EC2, ALB, RDS, EKS, ECS, ASG, Cloudwatch, S3, VPC, DMS, SQS, EFS, Lambda & KMS
Value Additions
In ABSLI's cloud environment, performance was improved by almost 80%.
Blazeclan's solution helped ABSLI to save nearly 84000 USD annually.
CIS compliance was achieved in ABSLI’s AWS environment.
Key Business Highlights
As a result of our strategic initiatives, we have achieved significant enhancements in their infrastructure:
- Increased Performance: The overall performance of their applications has been markedly improved. This includes faster processing times, increased reliability, and enhanced user experience.
- Cost Optimization: Through careful planning and execution, we have successfully optimized the overall cost of their infrastructure. This includes the strategic purchase of Reserved Instances and the migration of applications to more efficient platforms like AWS EKS.
PUBLISHED: 12th July 2024
