Reference ArchitectureAWSBanking
Web Banking Application Architecture on AWS
A reference pattern showing how the pieces fit together — not a specific deployed system.
A secure, highly available internet-banking platform on AWS: edge protection, multi-AZ application and data tiers, hybrid connectivity to core banking, and built-in operations and security.
Overview
- Customer access & edge: Route 53, CloudFront, AWS WAF and Shield, Certificate Manager and optional Cognito with MFA.
- Production VPC across two Availability Zones: Application Load Balancers, containerised web and API tiers (ECS / EKS / EC2) with auto scaling, Aurora and ElastiCache in private data subnets, plus S3, SQS, KMS, Secrets Manager and VPC endpoints.
- Hybrid connectivity: site-to-site VPN, Direct Connect or Transit Gateway to core banking and payment systems.
- Operations, security & delivery: CloudWatch, X-Ray, CloudTrail, Config, GuardDuty and Security Hub; CodeCommit → CodeBuild → ECR → CodeDeploy; Systems Manager, AWS Backup, multi-region disaster recovery and cost optimisation.
Business use case
Reference design for a bank’s customer-facing web and mobile channels: low latency, strong perimeter security and defined RTO/RPO.
My role
Architecture design and documentation.