Empowering Financial Growth with AWS and Noventiq’s Managed Services

Recognizing the need to establish a secure framework and its management on an ongoing basis, the customer partnered with Noventiq, trusting our expertise in the financial sector. A successful implementation of complex and secure infrastructure for India’s leading stock exchange solidified this reputation. Since a significant client base relies on the firm’s platform for trading activities across multiple Indian exchanges, they wanted a scalable and agile infrastructure. In addition, platform security, and good user experience were also a few major considerations that the client sought. Recognizing the capacity limitations of on-premises infrastructure and the need for quick turnaround time, security, and scalability, the team strategically guided the company toward adopting the AWS cloud platform. Managed services further ensured 24/7 management and support for their AWS infrastructure, ensuring optimal performance, security, and compliance. The implementation of the solution and the AWS management services encompassed the following key aspects:

• The trading application and other internal applications were deployed on the AWS Cloud, aligning with the industry-standard cloud and security framework set by Securities and Exchange Board of India (SEBI).
• Proactive monitoring of the entire AWS infrastructure is done using AWS CloudWatch and Site24x7 for real-time issue identification and proactive resolution.
• Oracle Database High Availability with Oracle Active Data Guard and Fast Start Failover (FSFO) configuration were implemented using Observer and Data Guard Broker for seamless disaster recovery. Oracle Data Guard is used for high availability databases, with a standby database running in a different availability zone. It switches a standby database to the primary role in case a production database becomes unavailable due to planned or unplanned outage.
• 24/7 monitoring, proactive health checks, updates, patching, performance tuning and backup management is being undertaken by the managed services team for Oracle database’s high availability, security, and optimal performance.
• Complete backup management is aligned with SEBI’s compliance log retention lifecycle policies. This encompasses Amazon Elastic Block Store (EBS) Snapshot backup management, restoration, and S3 lifecycle policy creation and optimization. Monitoring of backup failures, coupled with corrective actions and re-runs, ensures data integrity.
• Creation, testing, and application of Identity and Access Management (IAM) roles and policies, Security Groups, Network Access Control Lists (NACLs) and user management, along with assisting the client in the closures of VAPT assessments by Qualys agent, is being undertaken.
• Management of the Security Operations Center (SOC) advisory notifications and implementation of necessary changes to the AWS infrastructure following integration with the client’s SOC is being done.
• A disaster recovery (DR) AWS infrastructure has been created in a different region using AWS DRS service. DR drills are conducted regularly to ensure the application’s high availability. These exercises employ either non-disruptive recovery or failover-failback methods to identify potential weaknesses and refine response procedures. 24/7 database support services are provided as well.
• The client was able to achieve compliance with SEBI’s Cloud Adoption Framework on the AWS Cloud with AWS security best practices, including data encryption at rest and in transit, and regular security audits.
• As a part of managed services, multiple cost-saving strategies are proposed and implemented through AWS Savings Plans, rightsizing instances, and reserved instances.
• Comprehensive logging and monitoring needs are taken care of using AWS CloudTrail and VPC Flow Logs, ensuring detailed activity tracking for compliance and audit purposes.
• The team ensures ongoing protection against the latest vulnerabilities by updating and patching all AWS services and connected infrastructure.