Industry

Technology

Amazon EKS
Amazon EC2
Amazon EFS
AWS Control Tower
AWS Transit Gateway
AWS Network Firewall

Overview

Established in 2018, the bank has rapidly emerged as a key player in Cambodia’s financial landscape. Thriving in the digital age, the bank brands itself around technological innovations and seamless customer experience through personalized financial solutions across digital, retail, business banking. With a growing customer base and a strategic focus on cloud technologies, the bank aimed to build a secure, scalable, and cost-efficient cloud infrastructure on Amazon Web Services (AWS).

This project, a collaborative effort between the bank and Renova Cloud, centers on implementing AWS Landing Zone and AWS Elastic Kubernetes Service (EKS). The initiative aims to transform operations, drive technological advancement, and deliver enhanced services, setting new benchmarks in operational efficiency and customer satisfaction.

Key Challenges

As a young, technology-focused commercial bank in Cambodia, the institution faced the challenge of scaling its IT infrastructure to meet the rapid growth of its customer base. Plus, its strong commitment to providing personalized banking services entails a robust, flexible infrastructure capable of handling increasing transaction volumes, while ensuring seamless integration across various banking channels.

Security also became a top priority for the bank, given its responsibility for handling sensitive financial data for both retail and business customers.The bank must safeguard customer information while adhering to stringent local laws and regulations. This involves not only implementing robust security protocols but also ensuring that its IT infrastructure can handle evolving cybersecurity threats. Furthermore, as the bank continues to expand its digital offerings, it will need to maintain agility in integrating emerging technologies and innovations, all while managing operational costs and ensuring high availability to deliver uninterrupted services.

Discover more about DEVSECOPS & CLOUD SECURITY

Solution

The bank opted for AWS Landing Zone and AWS Elastic Kubernetes Service (EKS) as the core components of its cloud strategy. This solution allowed the bank to establish a scalable, secure, and well-architected cloud infrastructure while supporting modern application deployment and orchestration. After a long and meticulous selection process, Renova Cloud was proud to be nominated the official implementation partner for this project.

Key technologies deployed in the solution included:

  • Amazon EKS
  • Amazon EC2
  • Amazon EFS
  • AWS Control Tower
  • AWS Transit Gateway
  • AWS Network Firewall
[High-level Infrastructure Diagram of the Bank’s Solution]
[High-level Infrastructure Diagram of the Bank’s Solution]
The solution for enhancing the bank’s IT infrastructure involved the implementation of AWS Landing Zone and AWS Elastic Kubernetes Service (EKS). To ensure a smooth and effective deployment, the implementation strategy followed AWS best practices for building a robust Landing Zone. A series of workshops were conducted to gather crucial customer information related to account management, user administration, networking, security, and workload planning. 

Utilizing AWS Elastic Kubernetes Service (EKS) and Amazon EC2 enabled the bank to orchestrate and manage its applications seamlessly, providing the scalability needed to handle increasing transaction volumes and customer demand. Plus, the integration of Amazon EFS for shared storage between EKS nodes promoted efficient data management, which was essential for maintaining high performance and availability of banking services.

Additionally, AWS Transit Gateway was implemented to connect multiple Amazon Virtual Private Clouds (VPCs) and on-premises networks through a single hub, simplifying network architecture and eliminating complex peering relationships. This solution also included the AWS Network Firewall, which allowed for the definition of detailed firewall rules to control network traffic.

Benefits

The implementation of AWS Landing Zone and EKS brought significant financial and operational improvements for the bank.

Financial Benefits

  • Cost Optimization: Migrating to AWS allowed the bank to reduce costs by eliminating legacy infrastructure and utilizing a pay-as-you-go model, aligning spending with growth.

Operational Benefits

  • Reduced Manual Tasks: AWS migration automated many operational tasks, such as firewall management and system patching, reducing the workload for IT staff and enabling them to focus on strategic initiatives.
  • Improved Security: The implementation of AWS Network Firewall and Firewall Manager provided advanced security controls, ensuring strong protection across the bank’s cloud environment.
  • Auto Scalability: The infrastructure and applications automatically scaled to meet demand, allowing the bank to handle increased workloads without downtime or performance issues.
  • Redundancy: AWS architecture provided redundancy at both the infrastructure and application levels, enhancing system resilience and ensuring business continuity.

Find more information about AWS WELL-ARCHITECTED REVIEW

Conclusion

The Bank’s transition to AWS, using Landing Zone and EKS, was a successful implementation that enabled the bank to establish a modern, scalable, and secure cloud infrastructure. By leveraging AWS’s advanced technologies, the bank improved its operational efficiency, reduced costs, and laid the foundation for future growth, further manifesting its commitment to driving financial innovations.