Infra Automation for Indonesia’s First Digital Bank

Banking, Financial Services and Insurance (BFSI)

BUSINESS CHALLENGE

The client was looking to automate their cloud infrastructure for any new infrastructure to be provisioned in minutes across Production, Performance Test, Staging, QA, and Development across Business & Personal Banking, Loan & Credit Platform, Data Engineering & Warehousing, etc.

• Due to local compliances, complete infrastructure automation was required, including backups and restore procedures.
• We needed a tool to automate and orchestrate the infrastructure onto multiple clouds like GCP, AWS, and Alibaba so that we could reuse some scripts, learnings, and the flow in case of a multi-cloud setup
• With a team of 500+ engineers, it was challenging for the Ops team to provision cloud resources for different environments, engineering teams, and types of cloud resources.

OUR SOLUTION

We chose Terraform as an IAAC tool as it provides infrastructure automation for all major cloud providers like AWS, GCP, AliCloud, and Azure.

• We used open-source Terraform modules to build wrapper modules to provision infrastructure resources like Virtual Machine + SSH Keys + Firewall Rules + DNS Record at once.
• We wrote Terraform modules and code to provision cloud infrastructure resources like Virtual Networks, Virtual Machines, Load Balancers, Firewalls, DNS Zones, DNS Records, SSL Certificates, PostgreSQL DBs, Redis, ELK Stack, MongoDB, Hashicorp Vault, OpenVPN, Dynatrace, Nexus and more.
• We built self-service repositories using Terraform where users/engineering teams can provision resources like PostgreSQL DBs, Kafka Topics, VPN Users, Mongo Collections, etc., without intervention from the Ops team.
• We also used Terraform to install and configure software applications like OpenVPN, Vault, Nexus, Dynatrace, Tyk, Wireguard, and Nessus on Virtual Machines.
• With advanced providers like Helm and Kubernetes, we leveraged Terraform to set up Logging Monitoring Agents and Istio Service Mesh on Kubernetes clusters across different environments and business units.