Success Story
Extrimian migrates from Google Cloud to AWS in 4 months with a multi-account architecture, CI/CD and centralized observability
At a glance
Extrimian is an Argentine blockchain technology company specializing in decentralized digital identity and the creator of QuarkID. It needed to migrate from Google Cloud to AWS with a team that had little AWS experience. In 4 months, Craftech built a multi-account platform from scratch with CI/CD, centralized observability and complete documentation, and trained the team to carry on independently.
4 months
from Google Cloud to AWS
Extrimian is an Argentine blockchain technology company specializing in decentralized digital identity (SSI). It is the creator of QuarkID, the self-sovereign identity protocol adopted by the City of Buenos Aires to provide digital IDs to more than 3.6 million active users. It has around 270 employees and operates across Latin America.
Solution implemented
- Multi-account AWS Organization (DEV, SHD and PRD) with Amazon EKS clusters per environment
- Infrastructure as code with Terraform and Terragrunt
- Monitoring with Prometheus, Loki, Amazon Managed Grafana and Grafana Alloy
- CI/CD with GitHub Actions, self-hosted runners and Helm charts
- SSO with Google Workspace and VPN
- ExternalSecrets and Reloader
- Amazon RDS (PostgreSQL) and a MongoDB cluster
- Training on IAM, AWS networking, CI/CD and monitoring
Business Challenge
Extrimian needed to migrate from Google Cloud to AWS to gain operational control and cost efficiency and to modernize its architecture. Its team had little AWS experience, so the project had to combine implementation and training. On top of that, the product was constantly evolving, which led to scope adjustments during the project.
Solution
Craftech built a cloud platform on AWS from scratch, with separate development, staging and production environments. On a multi-account AWS Organization (DEV, SHD and PRD) it deployed Amazon EKS clusters per environment, with the infrastructure defined in Terraform and Terragrunt. It automated application deployment with GitHub Actions, self-hosted runners and Helm charts, and implemented monitoring with real-time dashboards on Prometheus, Loki, Amazon Managed Grafana and Grafana Alloy. It added SSO with Google Workspace and VPN, ExternalSecrets and Reloader, and databases on Amazon RDS (PostgreSQL) and a MongoDB cluster. The project closed with complete technical documentation and training on IAM, AWS networking, CI/CD and monitoring.
Outcomes
- Baseline AWS architecture running in production: DEV, SHD and PRD accounts and EKS following security best practices
- Centralized monitoring and logs across every critical environment
- Documented, operational CI/CD pipeline
- Extrimian's team self-sufficient to continue the migration and run new deployments
Stack & technologies
