Success Story
Producteca modernizes its AWS networking in 2 months: least privilege, multi-AZ high availability and a 100% as-code network
At a glance
Producteca is an Argentine SaaS platform for multichannel e-commerce management. Its AWS network had grown organically, with patchwork configurations that left a large attack surface and little resilience to zone failures. Craftech remediated the riskiest issues and moved the entire network configuration to code with Terraform. Today the network has least privilege on critical resources and high availability across multiple zones.
100%
of the networking as code
Producteca is an Argentine SaaS platform for multichannel e-commerce management. With its infrastructure already consolidated on AWS after its migration from Azure, it called on Craftech again to resolve its network's technical debt.
Solution implemented
- Complete technical survey of the network
- Security groups cleaned up and reorganized with least privilege
- Subnets and NAT Gateways in the missing availability zones
- Secured administrative access
- The entire network configuration as code with Terraform
- Documented analysis of the Ingress Controller migration for a future iteration
- Team documentation and training
Business Challenge
The AWS network had grown organically for years, with patchwork configurations: security groups with poor practices, subnets without redundancy across multiple availability zones, and administrative access with risky configurations. This meant a large attack surface and little resilience to zone failures.
Solution
Craftech carried out a complete technical survey and, instead of a full redesign, prioritized immediate stabilization by remediating the riskiest issues. It cleaned up and reorganized the security groups with least privilege, added subnets and NAT Gateways in the missing availability zones, secured administrative access, and moved the entire network configuration to code with Terraform. It also documented the Ingress Controller migration analysis for a future iteration. The project closed with team documentation and training.
Outcomes
- Reduced attack surface: least privilege on all critical resources
- High network availability across multiple availability zones
- 100% as-code networking: reproducible, auditable and versioned
- Critical administrative access secured
- Producteca team trained to operate and evolve the network
Stack & technologies
