When Real Authentication came to Poeta, they had already worked with two other service providers on their new application without seeing improvements. Poeta’s experience in designing over 300 mobile applications across 5 continents and implementing well-architected infrastructure services to fulfill software and business traffic goals led Real Authentication to ask for an application audit. They also wanted recommendations on how to solve service disruptions and slow response times.
Poeta Digital’s audit identified and validated many of the same concerns Real Authentication had about application stability, reliability, and security. Real Authentication engaged us to help them solve these challenges quickly and restore their path to growth and success.
Poeta first stabilized the software layer, refactored where necessary, and rebuilt and replaced code where required to get the company back on a stable footing. We next identified the baseline resource requirements for their application and designed and implemented a new auto-scaling architecture. These efforts made the application more reliable with significantly higher uptime. Poeta Digital’s project also ensured cost optimization for Real Authentication’s application in AWS cloud using Amazon Web Services as their infrastructure platform.
Backed by an Amazon Aurora database, the multi-zone and multi-region configuration we developed was fronted by AWS web application firewall and deployed and managed using AWS CloudFormation and well-structured CI/CD deployment pipelines. Poeta leveraged AWS services to monitor application health and implemented structured load-balancing and network routing to handle traffic load. We implemented fail-over procedures and ensured that backup and recovery tools were properly implemented.
During the course of the project, Poeta also performed a full security audit of the entire technology stack and made multiple recommendations for implementing better security protocols, processes, and procedures. Specifically, Poeta used AWS WAF (web application firewall) Security Automations as part of a DDoS mitigation strategy to automatically deploy a set of AWS WAF rules that filter common web-based attacks. The rules implemented have been tested at scale using live traffic modelling techniques, and are dynamically updated to include newly identified threats.
Post launch, we performed ongoing optimization monitoring to evaluate if the configuration required adjustments once in production. Active monitoring and alerting rules are built in to provide awareness to our support team if or when issues are detected.
