Secure and Automate Infrastructure for one the largest Insurance
Farhan Ahmad
Cloud Infrastructure Architect
DevOps Engineer
Azure DevOps
Kubernetes
Terraform
Overview
We engaged with one the largest Insurance provider in Asia pacific for implementation of Nexus of insurance portal to their cloud.
Nexus for insurance is a tech-based portal which helps the insurance providers to accelerate their business. We helped them to deploy the application and automated the same using CI/CD. We had also helped them to create reusable templates to deploy their infrastructure using scripts and pipelines. We also helped them with multiple integrations and connectivity with On prem servers.
We also helped them in migrating their code repos automatically and, migrating their boards from another ADO, so that they can manage their tasks from a single central location.
Use Case
Now let’s understand the typical uses cases for the migrating resources from one region to another.
· Automate application deployment using pipelines on AKS,Azure WebApps and Azure VMs.
· Automate infrastructure deployments.
· Manage Security for public facing applications.
· Migrating of the Infra, Code, and Work items.
· Manage integration with 3rd party API’s.
· Connectivity with ON prem servers and Services.
Solution Provided
Automation:
Automating application deployment using Azure DevOps CI/CD.
Building pipelines with Java and React applications.
Deploying the application on AKS and Azure WebApps.
Deploying the Jar files on Windows VMs.
Automating Infrastructure deployment using Terraform (Infrastructure as a code). Created reusable terraform modules to trigger and deploy the infrastructure.
Migration
Migrating the code from one repo to another using automated scripts.
Migrating the Azure Boards with Attachments using VSTS migrator.
Integration
Integrating the application with the on prem API’s.
Integrating the api’s with unqork.
Security
Implement WAF for the public facing application.
Manage WAF rules to allow the operations to work.
Manage rewrite rules to manage headers.
Manage CSP and CORS.
Scanning the code to make sure there is no vulnerable code is getting onto production environment.
Implementing azure policies
Monitoring
Monitoring the application using application insights.