Success Story
Betwarrior centralizes traffic from 18 domains and 9 brands in an API Gateway with WAF and full logging, in under 2 months
At a glance
Betwarrior is an online sports betting and casino platform active in more than 10 countries. It ran on a monolithic infrastructure inherited from an external provider, with no visibility into traffic per brand. In under 2 months, Craftech put into production an API Gateway on AWS that centralizes traffic from 18 domains and 9 brands, with a single WAF and full operational logging.
18
domains centralized into a single entry point
9
brands under a single WAF
Betwarrior is an online sports betting and casino platform active in more than 10 countries, mainly in Latin America and Canada. It is part of the Hipódromo de Palermo entertainment holding, operates in Argentina under license and is an official sponsor of the Argentina national football team. Its production infrastructure runs on AWS.
Solution implemented
- Implemented Amazon API Gateway (REST) as a proxy to the backends, with multi-brand routing
- Configured AWS WAF with allowlist rules, geo-blocking, rate limiting and AWS managed rules
- Handled authentication to the backends with AWS Secrets Manager
- Centralized logging in Amazon CloudWatch, with access logs and WAF logs
- Defined the infrastructure as code with custom Terraform modules
Business Challenge
Betwarrior ran on a monolithic infrastructure inherited from an external provider and had no visibility into traffic per brand: it could not segment logs or metrics by brand, and the entire operation depended on a single point of failure outside its direct control.
Solution
Craftech implemented an API Gateway layer on AWS that gives Betwarrior direct control over and visibility into the traffic of its 9 brands, independently of the external provider. Amazon API Gateway (REST) acts as a proxy to the backends, with multi-brand routing, and unifies 18 domains into a single entry point. Protection is provided by AWS WAF, with allowlist rules, geo-blocking, rate limiting and AWS managed rules. Authentication to the backends uses AWS Secrets Manager, and access logs and WAF logs are centralized in Amazon CloudWatch. All of the infrastructure is defined as code with custom Terraform modules.
Outcomes
- API Gateway in production, with traffic from 18 domains and 9 brands centralized under a single WAF and full operational logging
- From zero per-brand visibility to metrics, access logs and traffic control segmented by domain
Stack & technologies
