The Challenge
The client has partially finalized the solution and distributed it for trial to a select customer group. However, with a limited number of staff members possessing experience with AWS, challenges arise when scaling up functionalities. Issues related to security, operational efficiency, and software release procedures consequently emerge.
Key problems included:
– Deployment & Release Bottlenecks: Manual software release procedures slowed down feature rollouts and increased the risk of deployment errors.
– Security & Compliance Vulnerabilities: Sensitive credentials and configurations lacked centralized, encrypted management, creating compliance risks around patient data.
– Scalability & Maintenance Limits: Complex backend workflows built on legacy step-function logic made Lambda codebase management cumbersome and hard to maintain across environments.
The client, therefore, expected CMC Global to assist them in evaluating the system according to AWS best practices, identifying and resolving issues.
The Solution
CMC Global executed a two-phase modernization strategy focused on assessment, security hardening, and infrastructure automation:
Phase 1
– AWS Well-Architected Assessment: Dedicated one month to an in-depth audit of the existing architecture against the five pillars of the AWS Well-Architected Framework
+ Security
+ Reliability
+ Performance Efficiency
+ Operational Excellence
+ Cost Optimization
Phase 2
– Event-Driven Backend Rearchitecture: Refactored backend workflows from step functions to AWS EventBridge, simplifying Lambda function source code management and improving asynchronous event handling.
– Automated Multi-Region Infrastructure (IaC): Implemented Terraform to provision all cloud infrastructure, allowing rapid, error-free deployment to new regions as new Healthcare Providers onboard.
– Automated CI/CD Pipelines: Replaced manual release steps with continuous integration and continuous deployment (CI/CD) pipelines using GitHub Actions and AWS CodePipeline.
– Enterprise Security & Secrets Management: Integrated AWS Secrets Manager to store and encrypt all sensitive database credentials, API keys, and access tokens, eliminating credential leakage risks.
– Serverless Operations Management: Leveraged the Serverless Framework to manage Amazon API Gateway and Lambda functions, streamlining operational overhead and deployment procedures.
The Result
The solution delivered measurable improvements across key operational and business performance indicators.
- 25% Increase in Business Efficiency
- Zero-Downtime Automated Deployments
- 90% Automation Coverage
