RP Tech

RP Tech was having their in-house developed Inventory asset management ERP application being used for internal purposes hosted in an on-premises environment at their office location for which they were exploring a cloud-native solution to be there in-place that would reduce the operational costs of maintaining various Servers and security for the infrastructure while addressing the modern challenges of scalability, reliability, security & high-availability for the application as the load on it was increasing due to increase in the organization users.

Due to lack of any kind of firewall/security not being deployed in-place for the ERP app, it started to witness a surge in the number of malicious requests from various IP sources and bots that threatened to bring down their business thus increasing the vulnerability of being compromised heavily on the infrastructure part.

Since their in-house IT Team & management didn’t have the expertise & the required knowledge skills in-place for implementing the necessary security for elimination of the threats that the app received, they approached us for proposing a solution for having the same which would help them save their time in having the efforts to be taken for a “third-party” service instead.

Amazon Web Application Firewall (AWS WAF)

Amazon Simple Storage Service (AWS S3)

Amazon Backup (AWS Backup)

Amazon ElasticSearch (AWS ElasticSearch)

Amazon CloudWatch

Amazon CloudTrail

RedisCache

By deploying the application using the Auto-scaling feature of the AWS EC2 instance provided natively by AWS & testing the same throughout UAT / Dev environments , they were able to significantly scale up/down their Servers hosting the ERP on the go in Production as well within just a matter of a few minutes based on triggering conditions & threshold values configured in-place , thus eliminating the need to manually scale as per the surge or decrease demand on the incoming traffic.

Using AWS WAF Managed Rule groups, the security for the application was taken care of accordingly by eliminating the most common type of attacks like SQL-injection, Cross-site scripting, malicious IP requests, Bot-based attacks occurring at the ‘Layer 7’ of the OSI network model were eliminated which led to lowering the security risks associated with the application. So now they didn’t have to worry about managing / updating the ACL ruleset over the time since the AI/ML of the service intelligently kept on updating itself to secure the infra to any new kind of threats that would possess a complete downtime & loss of business.

It became easier to implement any additional features like “Bot-control security” & “Custom landing page” in the WAF within a few clicks as & when they needed enhancements based on requirements. This proved beneficial in knowledge training of the client’s IT team as explanation was made much easier for them to get familiar with the overall process.

Using geolocation-based filtering within the AWS WAF helped in significantly allowing requests onto the application only from specific regions (i.e., India & US) , while intelligently restricting users / malicious IP’s from locations apart from these both.

WAF helped in lowering the latency response time of the application to 20 milliseconds which significantly boosted the overall sales & in-turn helped in attracting new users/consumers while retaining the old ones.