Livewell

Overview

We designed and supported a containerized application platform using Amazon EKS deployed within a dedicated VPC in the ap-south-1 region, following a tiered network design with separated public, private, and intra subnets.

Architecture

End-user traffic routed through Cloudflare for edge protection, then through Amazon CloudFront for content delivery. Requests enter via Internet Gateway and are routed to EKS clusters in private subnets. Multi-AZ deployment for availability and fault tolerance.

Data & Backend Services

• Amazon RDS for relational data storage.
• Amazon ElastiCache (Redis) for in-memory caching and low-latency data access.
• MongoDB for specific application data requirements.
• Network access restricted using subnet isolation and security group rules.

Security Controls

• AWS Secrets Manager for sensitive configuration values and credentials.
• AWS KMS for encryption at rest for S3 and database storage.
• Three-tier network isolation: Public (NAT + Bastion), Private (EKS), Intra (databases).
• CloudWatch, CloudTrail, and SNS for monitoring, auditing, and alerting.

Business Outcomes

This Amazon EKS-based architecture enables Livewell to run containerized workloads in a scalable and secure manner while maintaining strong separation between application and data layers. The DevOps practices support consistent deployments, improved operational visibility, and secure configuration management.