Success Story
TAPI: an AWS-funded optimization and FinOps project on ECS — Fargate+Spot, security and DRP
TAPI is a Mexican fintech running its infrastructure on AWS with ECS and RDS, without an in-house DevOps team. Craftech executed a four-month project (December 2025 – March 2026) funded by AWS Funding, focused on optimizing cost and performance, hardening security and leaving the infrastructure documented and resilient.
Challenge
TAPI needed to optimize a production ECS infrastructure that had grown without a dedicated DevOps team: oversized containers and services, costs to contain, secrets management and observability to tidy up, a security posture to harden, and the need for a documented disaster-recovery plan to sustain a critical financial service.
Solution
Craftech executed an end-to-end optimization and FinOps project on ECS. On compute it applied CPU and RAM rightsizing, optimized Dockerfiles to cut deployment times and enabled Fargate + Spot with a documented procedure. On networking and security it implemented VPC Endpoints to Secrets Manager, moved variable retrieval to Parameter Store, reduced CloudWatch Log Group retention, applied SCPs to restrict KMS Keys with multi-region support and ran KMS key deletion-and-recovery tests, plus a black-box pentest. On data it analyzed and optimized DocumentDB, added performance analysis with PMM/Percona, and evaluated database resizing and backup flows. It closed with a documented disaster-recovery plan (DRP) and a deliverables report with a final presentation.
Results
TAPI finished the project with a compute-optimized ECS infrastructure (rightsizing, lighter Dockerfiles, Fargate + Spot), a hardened security posture (VPC Endpoints, Parameter Store, KMS restriction via multi-region SCPs, key-recovery tests and a pentest) and a documented disaster-recovery plan. The work was formalized in a deliverables report with a final presentation, leaving the foundation for a potential continuation as a managed service.
Stack & technologies
