Success Story
GinkoFS launches its multi-tenant SaaS platform on AWS, designed from scratch in 8 months
At a glance
GinkoFS is a Bogotá-based fintech startup that provides digital transformation solutions to financial institutions through a multi-tenant SaaS model. It had no previous cloud infrastructure and needed to deploy its platform to multiple customers in an isolated, reproducible way, with PCI DSS compliance. In 8 months, Craftech designed the AWS platform from scratch, and Ginko's first customer is already running in production.
8 months
to design the platform from scratch and take it to production
3
service tiers with automated onboarding
GinkoFS is a fintech startup from Bogotá, Colombia, that provides digital transformation solutions to banks, credit unions, insurers and other financial institutions through a multi-tenant SaaS model.
Solution implemented
- AWS Organizations with separate accounts per environment (DEV/QA, Shared, Staging and Production) and a centralized identity account
- Amazon EKS in every environment with autoscaling
- Amazon RDS and MongoDB Atlas in lower environments, multi-AZ Amazon Aurora in production, and Kafka and RabbitMQ for messaging
- CI/CD on GitLab with integrated infrastructure and application repositories
- Per-customer environment provisioning with ArgoCD and Crossplane, with service tier selection
- Monitoring with Prometheus, Thanos, Loki, Promtail and Grafana
- Automated nightly shutdown of non-production environments
- AWS Foundational Security Best Practices and a PCI DSS baseline
- EKS upgrade to version 1.31 and team training on every component
Business Challenge
GinkoFS had no previous cloud infrastructure. It needed to design from scratch an architecture to deploy its platform to multiple financial customers in a scalable, isolated and reproducible way, with three service tiers (low, mid and high tier), high availability in production and compliance with financial security standards (PCI DSS).
Solution
Craftech built a complete AWS infrastructure with isolated development, staging and production environments. It organized the accounts with AWS Organizations, separated by environment (DEV/QA, Shared, Staging and Production) and with a centralized identity account, and deployed Amazon EKS with autoscaling in every environment. Data relies on Amazon RDS and MongoDB Atlas in lower environments and on multi-AZ Amazon Aurora in production, with Kafka and RabbitMQ for messaging. It implemented CI/CD on GitLab with the infrastructure and application repositories integrated, and automated per-customer environment provisioning with ArgoCD and Crossplane, with service tier selection. It added real-time monitoring with Prometheus, Thanos, Loki, Promtail and Grafana, automated nightly shutdown of non-production environments and a security baseline with AWS Foundational Security Best Practices and PCI DSS. It also upgraded EKS to version 1.31 and trained the team on every component.
Outcomes
- Production platform on AWS designed from scratch in 8 months, with Ginko's first customer in production
- Automated CI/CD on GitLab across all three environments
- Real-time metrics and logs across a multi-account infrastructure
- Automated onboarding of new customers with 3 service tiers
- Lower costs in non-production environments thanks to nightly shutdown
- Security baseline: AWS Foundational Security and PCI DSS
Stack & technologies
