Skip to main content

Architecture that explains itself

The right platform for each service, documented—EKS, ECS Fargate, and EC2.

Multi-runtime approach

Each service runs on the platform that best serves its requirements—documented decisions, not defaults.

Amazon EKS

Core APIs

Kubernetes-native services with horizontal pod autoscaling, pod disruption budgets, and network policies.

Services

  • Accounts API
  • Catalog API
  • Cart API
  • Orders API

Benefits

  • Auto-scaling based on load
  • Rolling updates with zero downtime
  • Network isolation
  • Resource optimization

ECS Fargate

Stateless Web

Serverless containers for web applications and stateless services with automatic scaling.

Services

  • Next.js Frontend
  • Payments Gateway
  • API Gateway

Benefits

  • No server management
  • Pay-per-use pricing
  • Fast cold starts
  • Automatic scaling

Amazon EC2

Batch & Reports

Virtual machines for services requiring OS-level control, scheduled jobs, and batch processing.

Services

  • Daily Reports
  • Data Processing
  • CSV Generation
  • Backup Jobs

Benefits

  • Full OS control
  • Custom runtime environments
  • Persistent storage
  • Scheduled processing

Data architecture

Clear ownership, secure access, and reliable backups with defined recovery targets.

PostgreSQL Cluster

One PostgreSQL server with dedicated per-service databases for clear ownership and isolation.

Least Privilege Access

Each service has access only to its own database with role-based permissions.

Backup & Recovery

Automated backups with defined RPO/RTO targets and point-in-time recovery capabilities.

Data Encryption

Encryption at rest and in transit with AWS KMS key management.

Edge & DNS

Route 53 hosts acmecorp.live and subdomains with ACM-issued certificates and public ALBs providing host-based routing.

  • Route 53 DNS management
  • ACM SSL certificates
  • Application Load Balancer
  • Host-based routing
  • HTTPS everywhere
  • HSTS headers

Global Edge Network

Content delivered from the edge with automatic SSL termination and DDoS protection.

Complete observability

OpenTelemetry traces, centralized logs, and comprehensive monitoring for operational excellence.

OpenTelemetry Traces

Distributed tracing across all services with correlation IDs for request tracking.

Centralized Logging

Structured logs aggregated in CloudWatch with searchable fields and alerting.

Health Monitoring

Health and readiness probes for every service with automated failover.

SLO Dashboards

Real-time dashboards tracking service level objectives and key metrics.

Ready to build with confidence?

Dive deeper into our products or meet the team behind them.