Case Study - Ezywallet

Home Client List Case Studies Building a Secure and Scalable AWS Infrastructure for Ezywallet

Client Overview

Ezywallet, a venture of Apexaxis India Pvt Ltd, is a financial platform that empowers agents across India to provide essential digital financial services. These services include AEPS (Aadhaar Enabled Payment System), secure money transfers, mobile recharges, utility bill payments, PAN services, and income tax filing. The platform serves both urban and rural customers, requiring robust uptime, advanced security, and elastic scalability.

Industry

FinTech | Digital Payments | Government Services

Business Challenges
  • Security & Data Protection: Safeguarding financial data and user transactions from unauthorized access and cyber threats.
  • Dynamic Scalability: Supporting a growing volume of agents and transactions with seamless backend scaling.
  • Regulatory Compliance: Aligning with Indian financial regulations and data protection standards.
  • Performance Optimization: Delivering low-latency access even in rural regions with inconsistent connectivity.
  • Secure Remote Access: Enabling internal teams and partners to connect to backend systems securely from on-premise locations.
Why AWS?

Ezywallet chose AWS to build a secure, resilient, and future-proof infrastructure that offers:

  • Built-in security mechanisms such as encryption, access control, and traffic filtering.
  • On-demand scalability for workloads that spike during peak usage periods.
  • Regulatory alignment with government mandates for financial services.
  • Global performance reliability for nationwide reach and access.
Solution Overview

Deployed in the AWS Hyderabad Region, the cloud architecture integrates high availability, multi-layered security, and autoscaling capabilities.

Key Architecture Components

  1. Network & Security
  • Amazon VPC: Hosts all infrastructure components within isolated subnets.
  • AWS WAF (Web Application Firewall): Inspects and filters malicious HTTP/S traffic.
  • Internet Gateway: Facilitates internet connectivity for resources in the public subnet.
  • NAT Gateway: Allows private subnet instances (App/DB servers) to securely access the internet for updates and patching, without exposing them to inbound traffic.
  • Network Load Balancer: Handles high-throughput traffic routing to EC2 application servers.
  • Amazon EC2 (OpenVPN): Enables encrypted remote access from on-premise offices.
  1. Application Hosting
  • Amazon EC2 (App Servers): Hosts core application logic and transaction processing, residing in private subnets.
  • Amazon EC2 (DB Servers): Supports legacy data systems, protected by private subnet isolation.
  • Amazon RDS: Manages relational databases with Multi-AZ deployments, automatic failover, and encryption. Key benefits:
    • High availability and disaster recovery.
    • Automatic backups and patching.
    • Secure storage with encryption at rest and in transit.
    • Seamless read replicas for load distribution and analytics.
  1. On-Premise Integration
  • Open VPN: Maintains a secure, persistent connection between AWS and the on-premise network for synchronized operations.
  1. Monitoring & Governance
  • Amazon CloudWatch: Centralizes monitoring, metrics, and log management.
  • AWS Config: Tracks configuration changes and ensures compliance posture.
  • AWS GuardDuty: Continuously analyzes for threats and anomalies.
  • AWS IAM: Controls permissions with role-based access.
  • AWS Security Centre & KMS: Manages encryption keys and enforces security baselines.
  1. Auxiliary Services
  • Amazon S3: Stores user documents, reports, and backups securely.
  • AWS Lambda: Powers background services such as report generation, event processing, and system notifications.
Results & Benefits

Defense-in-Depth Security
By leveraging WAF, IAM, NAT, GuardDuty, and KMS, the platform enforces strong security across all network and data layers.

High Availability & Uptime
The combination of Multi-AZ EC2, RDS, and load balancing ensures uninterrupted service and disaster recovery readiness.

Elastic Scalability
RDS replicas, stateless EC2 instances, and autoscaling groups enable the platform to support surging user demand with no disruption.

Performance & Access Optimization
NAT Gateway and Internet Gateway streamline secure outbound traffic and update access while protecting private workloads.

Operational Visibility & Control
CloudWatch and AWS Config provide real-time observability and continuous compliance.

Conclusion

With its AWS-powered infrastructure, Ezywallet has built a secure, high-performance foundation to deliver financial services across India at scale. The refined architecture—with Amazon RDS, NAT Gateway, and layered security—positions Ezywallet to expand rapidly while maintaining compliance, reliability, and cost efficiency.

Why i2k2?

As an AWS Advanced Consulting Partner & Managed Amazon cloud services provider, i2k2 provides comprehensive folio of cloud solutions along with prompt and reliable support. Our partnership with AWS goes several years back, even before we formalized our association with the company in 2013. Key reason to choose i2k2 was 20 years of proven business. Talent is vast due to extensive IT exposure in India.

About i2k2 Networks

i2k2 Networks is the No.1 Dedicated Web Hosting company in India and a trusted name in the IT cloud hosting services industry that offers a full gamut of cutting edge enterprise solutions which drive business in today's Internet-powered world. Our folio includes Dedicated Servers, Cloud Hosting- Public, Private and Hybrid, Data Center Services, Business Email Solutions, Managed IT Services, Backup, and DR Solutions, DevOps Services, Cloud Enablement, Enterprise Hardware solutions, and various other integrated services. A team of dedicated and professionally driven IT experts conversant with diverse client requirements are available 24x7x365 to provide extended support. With superior technologies to host, design and develop high-quality websites and applications, we ensure to deliver unmatched value to our clients.

Please fill in the details to download Files


Enter Captcha: captcha

Request A Call Back