Case Study

nClouds AWS Case Study | Finexio

Finexio Streamlines Payments Processing: nClouds Delivers Secure, Scalable AWS Infrastructure

About Finexio

Finexio simplifies accounts-payable payments for medium and large corporations by digitizing manual paper checks. Finexio’s comprehensive accounts payable payments-as-a-service (PaaS) solution leverages proprietary analytics and robotic process automation to drive maximum conversion rates of suppliers to electronic payments.

Industry

FinTech

Location

Orlando, Florida

The Challenge

Ensure robust cloud security was a top priority to protect sensitive financial data and maintain compliance standards. Save on costs while optimizing cloud performance. Deploy and maintain AWS Cloud Development Kit (CDK) stacks efficiently for streamlined infrastructure management and scalability.

Featured Services

CI/CD, Containers, Database Administration, Message Queue Integration, Security Enhancements

Enhanced Security

Increased Release Velocity

Simplified Maintenance

Cost Savings

CHALLENGE

Finexio faced several technical challenges before working with AWS and nClouds. Ensuring robust cloud security was a top priority to protect sensitive financial data and maintain compliance standards. The company also needed to find ways to save on costs while optimizing cloud performance. Finally, deploying and maintaining AWS Cloud Development Kit (CDK) stacks efficiently was essential for streamlined infrastructure management and scalability.

Download Case Study

THE SOLUTION

nClouds designed a multifaceted solution addressing Finexio's key challenges:

Enhanced Security:
Implemented automated security measures to improve Finexio’s security by barring malicious sources from infiltrating Finexio’s systems, including AWS Web Application Firewall (WAF) and automated IAM user audits, significantly reducing vulnerabilities.
- Container Security Improvements:
  - Implemented read-only file system configurations for all ECS services
  - Limited container access to only specifically defined mount points
  - Disabled public IP assignments for ECS tasks, reducing attack surface
- Traffic Control and Protection:
  - Implemented IP whitelisting on AWS WAF to restrict access to critical services
  - Deployed specialized WAF rules to identify and block bot traffic
  - Created layered defense approach to protect sensitive financial data

Cost Optimization:
Introduced automated workflows that reduced costs in lower environments when system usage was at its lowest, resulting in significant savings without sacrificing performance.
- Implemented scheduled resource management for non-production environments
- Created specialized Lambda functions to automatically:
  - Stop RDS and DocumentDB instances during weekends
  - Suspend unused EC2 instances during off-hours
  - Scale down ECS services during periods of low utilization
  - Resume all services automatically on Monday mornings

Streamlined Deployment:
Introduced automation to ensure rapid and reliable infrastructure deployment:
- nClouds introduced a streamlined and automated process using AWS CodeSuite and GitHub triggers to speed up the implementation of AWS CDK stacks.
- nClouds developed an automated recovery system using AWS Lambda and CloudWatch events to monitor CircleCI pipelines.

Improved User Management:
A custom solution was delivered to automatically create SSH users from Secrets Manager whenever new users were added or updated, streamlining user management tasks via SSM Automation Documents.
Enhanced Control and Agility:
Additional pipeline features were introduced, enabling Finexio to dynamically enable or disable releases, providing it with greater control and flexibility over its software delivery processes, including implementing comprehensive Slack notifications for CircleCI pipelines, providing real-time alerts on deployment status.

nClouds Services