Publication Date:
To keep up with the growth of its digital services, Compensar needed to modernize its network architecture on Amazon Web Services (AWS). Hand in hand with their organization, we implemented a hybrid connectivitysolution that allowed them to centralize communications, strengthen cloud security, and establish a scalable infrastructure, prepared to guarantee operational continuity.
Compensar’s digital operation required an infrastructure capable of connecting multiple environments on Amazon Web Services (AWS) with its on-premises systems and Microsoft Azure. In this context, the organization needed to strengthen its hybrid connectivity, reducing the complexity of point-to-point connections and facilitating secure communication between its different technological environments.
In addition to maintaining the continuity of its services, it was essential to improve security in the cloud by centrally inspecting inbound, outbound, and inter-virtual network traffic. In addition, Compensar requireda high-availability hybrid cloud architecture that would maintain connectivity in the event of major main link failures, without impacting the operation of its applications.
We modernized Compensar’s infrastructure on AWS through a Hub & Spoke architecture that allowed us to integrate hybrid cloud environments, centralize security inspection, and automate the management of its infrastructure, strengthening operational continuity.
This allowed us to:
Integration of hybrid cloud environments.We connected five AWS environments with On-Premise infrastructure and Microsoft Azure through AWS Transit Gateway, simplifying communication between platforms.
Centralized traffic inspection.We implemented Gateway Load Balancer and Palo Alto VM-Series firewalls to strengthen cloud security and protect communications between environments.
Continuity in the face of connectivity failures.We incorporated AWS Direct Connect 100 Mbps and a contingency VPN with BGP, enabling automatic switching to maintain hybrid connectivity.
AWS infrastructure automation.We standardize deployments using Terraform, Terragrunt and Azure DevOps, incorporating validations and controls for more consistent management.
Modernizing Compensar’s infrastructure on Amazon Web Services (AWS) enabled benefits such as:
These results allowed CompensaciĂłn to strengthen security in the cloud, simplify the management of its infrastructure, and consolidate a more organized and scalable hybrid connectivity model. The solution also incorporated monitoring tools and performance targets, including response times (RTT) of less than 35 ms and additional inspection latency of less than 5 ms, as a reference to evaluate and optimize the operation.
Compensar is a Colombian Family Compensation Fund dedicated to offering services that contribute to the well-being and quality of life of its members.
Solution Components:
AWS Transit Gateway
Amazon VPC
Tablas de rutas
Subredes Multi-AZ
AWS Direct Connect
AWS Site-to-Site VPN
Gateway Load Balancer (GWLB)
GWLB Endpoints
Amazon EC2
Palo Alto Networks VM-Series
Amazon CloudWatch Dashboards
Amazon CloudWatch Metric Math
Amazon CloudWatch Alarms
Amazon SNS
Amazon VPC Flow Logs
Amazon CloudWatch Logs Insights
More Stories
Join innovation with your feet in the cloud