Hi Marley migrated to a self-hosted environment on AWS to regain control and simultaneously adopted DevOps best practices

Solution

Hi Marley engaged Caylent to architect and perform the migration from the Rackspace to a self-managed AWS account. Terraform was employed as an Infrastructure-as-Code tool to create and manage Cloud infrastructure enabling the creation of multiple application environments in a consistent, repeatable manner. AWS Organizations was leveraged to manage IAM so the team could have a login to centralize the identity management and set up organization-wide control policies. DNS architecture and management was set up through Route 53. 

The team began to address Business Continuity Planning and Disaster Recovery by provisioning a new AWS account and deploying a VPC with all of the associated resources. S3 buckets, SFTP service, SSM parameters, KMS keys, ALB and other services were deployed. IAM roles were established and policies were updated for the users to assume those roles in DR. Data replication (DynamoDB, S3, and RDS) was implemented and DR domains set up in Route 53. Finally, the backups of the production environment were addressed through AWS Backup to automate the process of taking manual snapshots of Aurora, RDS MySQL and DynamoDB and sharing those snapshots cross-account, cross-region. 

The Caylent team then turned their efforts to improving the developer experience and ease with which local development environments could be created. Applications were containerized via Docker and migrated to EKS Fargate to take advantage of Serverless Kubernetes. A key part of the success of this project centered around knowledge transfer from the Caylent team to Hi Marley’s engineers. 

As an InsureTech company, security was of utmost concern for Hi Marley as they prepared for SOC 2 compliance. Initially, there was a mix of identity-based and resource-based IAM policies in the environment. The Caylent and Hi Marley teams worked together to enforce consistency in how permissions were managed and implemented least privilege access. 

Results

The velocity of the organization is dramatically faster than when Hi Marley began the engagement with Caylent. The migration was completed on time and on budget. The infrastructure is now nearly defined 100% by code, whereas pre-migration, no IaC was used. This means that environments are now spun up in days vs. several weeks previously. 

Hi Marley now has complete control of their environment and has improved the developer experience. 

The next phase of Hi Marley’s infrastructure modernization includes a MongoDB migration, redefining and improving the CI/CD pipeline, improving their fault tolerance through multi region replication, further work on the Backup and DR environment and doing the groundwork to comply with SOC 2 requirements.