Skip to main content

Symbo Insurance – DevSecOps Transformation on AWS

Customer Overview

Symbo Insurance provides innovative insurance solutions with a strong focus on technology-driven processes. As part of its digital transformation strategy, Symbo needed a scalable, secure, and automated infrastructure to support its growing platform and ensure faster, more reliable releases.

Challenge

Symbo Insurance faced several infrastructure and operational challenges that affected the scalability, reliability, and efficiency of its platforms:

  • Manual Infrastructure Provisioning: Environments were provisioned manually, often resulting in inconsistencies across development, staging, and production.
  • Infrequent Release Cycles: Monthly releases were prone to high failure rates due to lack of automation and environment drift.
  • No Centralized Monitoring or Logging: Limited visibility into system health delayed incident detection and resolution.
  • Manual Logging: System and access logs were maintained manually, increasing the risk of human error and compliance issues.
  • Limited Scalability: The existing setup couldn’t handle traffic spikes efficiently, affecting performance during peak usage.
  • Single Points of Failure: Lack of redundancy reduced application availability.
  • Security Gaps: Basic firewall rules were the only security layer, with no protection against application-level threats.

Architecture Diagram:

Solution:

As the technology partner, Techpartner worked closely with Symbo Insurance to design and implement a modern, scalable, and secure AWS infrastructure using Terraform. The following solutions were delivered:

  • Infrastructure as Code with Terraform: Enabled consistent, automated, and repeatable environment provisioning.
  • AWS EKS Cluster: Migrated applications to a containerized platform using EKS, simplifying deployment and scaling.
  • Amazon ECR: Docker images are built and pushed to ECR, from where EKS nodes pull images for deployment.
  • CI/CD Automation: Integrated BitBucket with Jenkins , AWS codebuild and Helm to enable full automation. A blue-green deployment strategy was adopted to reduce downtime.
  • Auto Scaling EC2 Deployment: EKS nodes are automatically managed and scaled using the Karpenter autoscaler.
  • Application Load Balancer (ALB): Configured for efficient traffic distribution and improved fault tolerance.
  • AWS S3: Enabled centralized object storage to manage large files, such as documents or media.
  • AWS CloudFront: Configured for low-latency content delivery and to host static content for front-end services.
  • Web Application Firewall (WAF): Implemented AWS WAF to protect against web exploits and malicious traffic.
  • DNS Management with Route 53: Used for reliable DNS routing and global traffic distribution.
  • HPA (Horizontal Pod Autoscaler ) – Pods are also automatically scaled up or down using the Horizontal Pod Autoscaler (HPA) based on real-time CPU, memory, or custom metrics.

3rd Party Tools Integrated

  • Grafana : Grafana is used to visualize the metrics collected by Prometheus, which acts as the primary data source.
  • Prometheus: Implemented for real-time system and application monitoring.
  • Slack: Integrated for real-time deployment alerts and notifications.
  • Jenkins: Jenkins is used to deploy applications by integrating with AWS CodeBuild, Amazon ECR, and Helm for automated CI/CD.

DevOps Approach

Techpartner adopted a modern DevOps methodology for Symbo Insurance, focusing on automation, security, and scalability:

  • Fully Automated Provisioning & Deployments:
  • Infrastructure provisioning and application deployments were fully automated using Terraform, EKS (via Jenkins ), AWS CodeBuild and Helm. Blue/green deployments ensured seamless updates with minimal disruption.
  • Shift-Left Security: Security was integrated early in the CI/CD pipeline, including code scanning, policy compliance, and vulnerability assessments.
  • Auto-Scaling & Health Checks: All deployments included auto-scaling and health monitoring, enabling the platform to respond to demand without manual intervention.

Business & Technical Impact

  • Reduced release cycle from 15 days to 2 days.
  • Achieved a 90% improvement in deployment success rate.
  • Reached 100% compliance using AWS Config and CloudTrail automation.
  • Achieved approximately 35% cost savings by optimizing EC2 usage and leveraging Spot Instances for lower environments, along with efficient storage management.