Overview
A major health insurance provider in India was hampered by a decentralized, costly, and complex legacy IT setup spanning on-premises infrastructure and over 20 fragmented AWS accounts. This environment created security gaps, performance bottlenecks, and limited their ability to scale.
SourceFuse partnered with the insurer to execute a comprehensive cloud transformation. The solution involved implementing a centralized, security-first network architecture (unique Ingress/Egress model), migrating and modernizing core applications to managed AWS services (like Amazon Aurora), and integrating advanced DevSecOps automation.
This transformation delivered immediate, measurable results: significant cost reduction, a dramatically improved security posture, and a resilient, compliant foundation for future growth and regional expansion.
The Challenge
The health insurer’s fragmented infrastructure was severely restricting its operational efficiency and growth potential:
- Fragmented Management: Decentralized network management across 20+ AWS accounts led to inconsistent security policies and high operational complexity.
- Cost Bottlenecks: Reliance on expensive legacy on-premises infrastructure, including unmanaged databases and Windows-based workloads, drove up costs and hampered performance.
- Security & Visibility Gaps: A lack of centralized governance made it difficult to monitor traffic, increasing the risk of security breaches in a highly regulated industry.
- Scalability Limitations: The architecture wasn't built for modern scale, making new application deployments slow and inefficient.
The Solution
SourceFuse delivered a multi-phase solution focused on centralization, modernization, and automation:
- Centralized Networking & Security: Implemented an AWS Transit Gateway hub-and-spoke model and a unique Individual Ingress/Central Egress architecture, routing all outbound traffic through centralized Palo Alto NGFWs for unified policy enforcement.
- Migration & Modernization: Successfully migrated 15+ core applications to AWS. Modernized workloads from Windows to RHEL Linux to cut licensing costs and transitioned unmanaged databases to Amazon Aurora for enhanced performance and reduced overhead.
- Automation & DevSecOps: Established a centralized Jenkins CI/CD pipeline and used Terraform (IaC) to ensure fast, secure, and repeatable deployments.
- Compliance & Resilience: Set up an AWS Control Tower Landing Zone for streamlined governance and built a robust hybrid network with AWS Direct Connect and a strong Disaster Recovery (DR) capability for business continuity.
Results
The modernization delivered measurable outcomes across key business metrics:
- 35–40% Reduction in Operational Overhead through automation and managed services.
- Enhanced Security & Compliance with centralized egress and consistent policies.
- 3x Faster Deployments via automated DevSecOps pipelines.
- Improved Performance & Reliability with managed AWS databases and modernized workloads.
- Resilient Operations with a hybrid network and disaster recovery capabilities, ensuring business continuity.
Technologies & AWS Services Used
AWS Services:
- AWS Transit Gateway
- AWS Direct Connect
- Amazon Aurora
- Amazon EC2
- Amazon VPC
- ALB/NLB, Amazon S3
- Amazon EFS
- Amazon ElastiCache
- Route 53
- IAM Identity Center
- AWS Security Hub
- AWS Config
- AWS Secrets Manager
- AWS CloudTrail
- Amazon CloudWatch
- VPC Flow Logs
Technologies:
- Palo Alto NGFWs
- Jenkins
- Terraform
- RHEL Linux
- Coralogix
- New Relic
