Database Management & Administration
This Ukrainian startup seeks to improve the user experience of automotive blogs by incorporating a social network-style interface and enabling smooth integration with other platforms and import tools.
**Business Challenge:** There's an immediate need to adjust infrastructure costs for a basic setup and to implement best practices for the layout.
**Project Goals:**
- Review the database setup
- Optimize database costs and verify capacity
- Create a unified Terraform Infrastructure as Code (IaC) setup from various manifests
- Refine access to DynamoDB
- Implement CloudFront instead of direct hosting from an S3 Bucket
- Establish an AWS Web Application Firewall for CloudFront
- Transition away from using Lambda functions for traffic-heavy operations due to the product's inherent limitations.
**Solution Overview:** Following our assessment, we concluded that the initial database setup was overly complex for its intended purpose, with some configurations posing potential vulnerabilities. Although the infrastructure was set up using Terraform, it lacked a unified deployment and proper state management.
**Resources:** AWS, RDS Postgres, EC2 Fleet, Terraform, Route53, WAF2, DynamoDB, S3, API Gateway
**Results:** The application is performing better than expected, exceeding MVP goals. We have established foundational security measures and addressed vulnerabilities in S3 bucket access by implementing an AWS policy that restricts data access to CloudFront only. Additionally, we successfully optimized our costs, leading to a significant reduction. The IaC has been refined, and its modular design facilitates the easy creation of new environments with minimal adjustments. It is now prepared for further use.