Designing & developing modern infrastructure for one of Indonesia's first cloud-native Digital Banks
The Objective
Client:
Technology-based Bank in Indonesia
An Indonesia based banking company wanted to build a fully digital mobile banking application that would help them to become a strong tech-based bank embedded in Indonesia’s digital ecosystem.
They wanted Staxa LLP to design and develop a modern infrastructure that was highly performant, technically advanced, cost optimised and security compliant.
Our goal was to build a fully automated secure, scalable and sustainable cloud native infrastructure for this tech-based life-centric finance and banking application.
The Challenges
Timeline:
Jan 2020 - July 2020
It was Q4 2019 and major cloud providers were yet to launch in Indonesia.
Our only option was a newly launched cloud provider with limited managed services options.
It lacked some of the key components like private dns, api gateway, relational databases etc that was needed for our setup.
Indonesia's Financial Services regulations needed to have data localisation and residency within the country.
There was no managed service available to host the core banking system Mambu within Indonesia.
Support provided by the cloud provider at that time was limited to business support with an hourly SLA .
Since the provider was newly launched integration with most infrastructure development tools were still in beta phase causing us to become the test cases for their usability.
The Initiatives
Techstack:
Terraform, Gitlab CI, Ansible,
To overcome these challenges mentioned above a fully automated cloud native infrastructure was designed with a vendor agnostic techstack keeping in mind any future cloud migration possibility. Some of the key design elements included :
Modular Infrastructure As Code.
Deployment pipeline As Code.
Configuration management for self managed softwares.
Automated machine and container imaging.
Centralised secret management for application and infra credentials.
Compliance with Indonesia's Financial Services Regulator(OJK) was ensured through -
A centralised administration with role based access controlled Identity Provider.
Secure and seamless connectivity across all systems and services were ensure by segregated Network with respect to incoming and outgoing traffic and Single Secure Entry point for traffic landing from internet.
For seamless connectivity dedicated private Links were used for peer to peer connectivity and data transmission.
The Outcomes
Result
Cloud-native Bank On Cloud
Highly available completely cloud-native banking infrastructure.
Environments on demand to dry run launch events such as DR drill, penetration test , performance test.
Performance based infrastructure scale out and scale down ensuring optimised FinOps and sustainable growth.
Observability and traceability for every event occurring in infrastructure.
Copyright © 2024. All Rights Reserved.