The solution.
The software development company Elastique and Xebia came on board to build and develop the new Rail Planner mobile app and the AWS infrastructure.
We set out to help Eurail to realize a secure AWS environment. To accomplish this, we customized our proven Cloud Foundation blueprint from Xebia to the requirements of the Rail Planner mobile app. We kickstarted the collaboration with a design workshop with the Eurail and Elastique Team. We agreed on the landing zone design, the application design and focused on the security of the customer data.
Our Cloud Foundation hosts the Rail Planner mobile app, developed by Elastique. The cornerstone of our Cloud Foundation is the implementation of a mature AWS multi-account structure, grounded on a highly resilient foundation that is secure and perfectly manageable. We based this on the Well Architected Framework and amended it to the Eurail case, using the most innovative services from AWS with a strong focus on serverless services like Appsync, Lambda, DynamoDB and S3. This enabled us to build a highly automated environment through Infrastructure as Code. Minimizing the risk of human error and reducing the time spent on administering the platform.
To further strengthen the security of the environment we implemented the Xebia CIS rules. Eurail’s AWS infrastructure is based in Frankfurt and Xebia can ensure that not only the data but also access to the infrastructure is controlled through fine-grained access control. With Infrastructure as code and relying on a CI/CD pipeline we are able to contain the risk of human error. For Eurail, we implemented AWS Config, Guard Duty and CloudTrail as our main pillars for the Eurail Trip Planner App, generating an audit trail and improving security at the same time.
