1️⃣ Microservices Architecture: The monolithic application provided the foundation for smaller, self-contained microservices. This improved agility, scalability, and maintainability.
2️⃣ Serverless Payments: Critical payment processing tasks were performed by AWS Lambda (Password Encode/Decode), a serverless computing service. This grew in demand and decreased the costs associated with managing servers.
3️⃣ Java Backend Engine: The crucial payment processing logic was still managed by a Java backend engine based on an Amazon EC2 instance. Auto-scaling groups allowed resources to scale in response to traffic automatically.
4️⃣ AWS DevOps technologies: ECS, ECR, and Bitbucket Pipeline were used to build continuous integration and delivery (CI/CD) pipelines. As a result, the software development process was automated, enabling the faster distribution of problem fixes and upgrades.
5️⃣ Security & Compliance: DevOps best practices were integrated across the pipeline to ensure PCI DSS compliance with industry regulations and robust protection for payment processing, including credit card information management and secure transaction service.
API Gateway & Microservices:
✅ Client’s 200+ REST APIs are likely exposed through Amazon API Gateway, a managed service that simplifies API management and scales automatically with traffic.
✅ Each API maps to a dedicated microservice built with Quarkus, a container-ready Java framework that simplifies development and deployment.
Multi-Tenancy:
Client’s system caters to 40+ tenants, requiring multi-tenancy support.
✅ Schema Segregation: Each tenant has a separate database schema within a single RDS MySQL instance.
✅ Database-as-a-Service (DaaS) per Tenant: Each tenant has a dedicated Amazon Aurora MySQL database for enhanced isolation and scalability.
Security Enhancements:
✅ Data Encryption: Advanced encryption methods were implemented to increase data security.
✅ Amazon’s KMS: (Key Management Service) was used to ensure secure key management and storage.
✅ Amazon Web Application Firewall: For protection against SQL injection attacks & malicious intrusions.
✅ AWS IAM (Identity and Access Management): Secured & fine-grained access controls.
Scalability & Infrastructure:
✅ VPC & Security Groups: isolated resources and enforce stringent security policies.
✅ Docker & ECS: Microservices packaging through Elastic Container Service for container orchestration.
✅ ELB (Elastic Load Balancer): Traffic distribution across multiple EC2 instances
✅ NAT Gateways: Facilitated robust network security.