Publication Date:
Learn how Comfandi modernized its enterprise networking architecture on Amazon Web Services (AWS), centralizing connectivity for more than nine AWS accounts, strengthening cloud security, and improving visibility and availability for more than 20 productive applications.
The growth of Comfandi’s digital portfolio and the addition of new applications on Amazon Web Services (AWS) generated an environment of multiple accounts and virtual networks with fragmented connectivity. For this reason, the organization needed to modernize its enterprise networking architecture to centralize communications, reduce reliance on point-to-point connections, and facilitate secure integration between applications, corporate networks, and third-party providers.
In addition to maintaining the continuity of its services, it was essential to strengthen security in the cloud, protect the exchange of sensitive information of its affiliates, and improve the visibility of network traffic. In addition, Comfandi needed to optimize content distribution and reduce single points of failure in critical components of its identity platform, ensuring more reliable cloud connectivity and ready to incorporate new services.
We modernized Comfandi’s enterprise networking architecture on AWS through a centralized connectivity, security, and observability platform, allowing multiple accounts and applications to be integrated, protecting critical communications, and strengthening the availability of its digital services.
This made it possible to:
Centralized and scalable cloud connectivity.We implemented a Hub & Spoke architecture with AWS Transit Gateway, integrating more than nine AWS accounts and facilitating the incorporation of new applications.
Greater security in the cloud.We deployed encrypted AWS Site-to-Site VPN connections and centralized application protection through AWS WAF, strengthening communications security.
Greater visibility and control of AWS infrastructure.We integrated VPC Flow Logs with Amazon CloudWatch, enabling 77 active alarms to improve traffic monitoring and cloud operation.
Increased availability of digital services.We deployed Amazon CloudFront on top of Amazon EKS, optimizing content delivery and reducing single points of failure.
Modernizing the enterprise networking architecture on AWS enabled Comfandi to realize benefits such as:
These results allowed Comfandi to strengthen cloud security, simplify the management of its infrastructure and consolidate a business networking architecture prepared to accompany the growth of its digital services.
Comfandi, Caja de Compensación Familiar de Occidente, is a Colombian organization dedicated to improving the quality of life of its members through health, housing, education, credit, subsidies and recreation services.
Solution Components:
AWS Transit Gateway
Amazon VPC
Subnets
AWS Site-to-Site VPN Route
Tables
AWS WAF
Security Groups
Network ACLs
VPC Flow Logs
Amazon CloudWatch
Amazon Route 53
Amazon CloudFront
Amazon S3
Amazon EKS
Amazon ECS
AWS Fargate
Amazon ECR
Amazon RDS
Amazon Aurora
AWS Lambda
Amazon API Gateway
More Stories