Meet Our Customer
InsureDigital is an insurance-technology business focused on reshaping the insurance experience through four products: Open Insurance, Insurance Insight, Aggregator and Tasweya. Together, these solutions improve connectivity across the insurance ecosystem, support data-driven decision-making, streamline operational processes and enable digital customer experiences.
The platform model depends on secure, continuously available digital services that integrate with insurers, brokers, partners and external service providers. As usage grows across markets and product lines, the cloud platform must support increasing API traffic, rapid service deployment, strong data protection, consistent governance and reliable day-to-day operations.
Challenge
InsureDigital required an AWS platform capable of supporting containerised insurance applications across production and user-acceptance-testing environments without creating a large internal infrastructure-management burden. The target operating model needed to combine high availability, security and scalability with disciplined ongoing management after go-live.
- Maintaining reliable service and predictable performance as API traffic and transaction volumes change.
- Operating Kubernetes infrastructure, supporting components and managed databases across multiple environments.
- Monitoring application, cluster, network and database behaviour through a consistent observability model.
- Protecting application credentials, customer data and service-to-service communications.
- Managing upgrades, worker-node maintenance, vulnerabilities, certificates, backup and recovery without disrupting customer-facing services.
- Providing clear incident ownership, stakeholder communication, SLA reporting and continual optimisation.
Vision
To scale connectivity, analytics and aggregation capabilities across the insurance value chain on a secure, continuously available platform, while the engineering team stays focused on product innovation.
Implication
Without a governed managed-services model, infrastructure and operational complexity could divert InsureDigital’s engineering capacity away from product innovation. Delayed detection, inconsistent maintenance, uncoordinated changes or unclear incident ownership could affect platform availability, customer confidence and the ability to onboard new insurance integrations efficiently.
Solution
stc Bahrain designed a cloud-native AWS operating model for the workload. The architecture separates production and UAT, uses Amazon EKS for containerised microservices, and combines managed AWS services with ongoing operational support from the stc Bahrain AWS Managed Services Practice.
Production is deployed across multiple Availability Zones, while UAT mirrors the functional architecture using right-sized capacity for validation. The platform supports API-driven workloads through load balancing, container orchestration and managed database services, with security, logging and monitoring applied consistently across environments. Istio provides service-mesh traffic management and Argo CD supports controlled GitOps delivery.
AWS Services
- Compute and containers: Amazon EKS with managed node groups or EKS Auto Mode
- Networking and ingress: Amazon VPC, Application Load Balancer, Network Load Balancer, AWS Load Balancer Controller, VPC Flow Logs
- Database and storage: Amazon RDS for MySQL (Multi-AZ in production), Amazon EFS
- Container delivery: Amazon ECR, Argo CD GitOps
- Observability: Amazon CloudWatch, Container Insights, AWS X-Ray, AWS Distro for OpenTelemetry
- Security and governance: AWS WAF, Amazon GuardDuty, AWS Config, AWS CloudTrail, AWS Secrets Manager, AWS IAM
Development
The platform was built around governed environments with isolated application and data tiers, ingress managed through health-aware load balancing, and microservices deployed via Argo CD from version-controlled definitions. After go-live, stc Bahrain provides remote 8/5 managed services for the AWS infrastructure, with responsibilities defined separately from InsureDigital’s application ownership through an agreed RACI model.
- Monitoring: EKS cluster health, resource utilisation, certificate expiry and application-performance signals using CloudWatch, Container Insights, X-Ray, ADOT and VPC Flow Logs.
- Incident management: 8/5 response using agreed P1–P4 classifications, stakeholder communication, escalation paths and root-cause analysis for major incidents.
- Maintenance and security: worker-node patching, Kubernetes version upgrades, vulnerability monitoring, security-policy compliance and IAM access review support.
- Resilience: cluster backup implementation and verification, plus monitoring of RDS backups, logs, maintenance windows and Multi-AZ health.
- Optimisation: utilisation review and scaling recommendations, independently right-sized UAT, and ECR lifecycle policies to control image storage growth.
- Governance: monthly performance and SLA-compliance reporting, incident-trend review and formal change planning with agreed maintenance windows.
Results
- More reliable digital service operations through proactive monitoring, multi-AZ production design and defined incident ownership.
- Reduced infrastructure-management burden, allowing teams to concentrate on product development, insurer connectivity and customer experience.
- Improved security and audit readiness through centralised controls, logging, threat detection, configuration monitoring and monthly reporting.
- Controlled platform evolution via planned patching, Kubernetes upgrades, vulnerability remediation and GitOps-aligned deployment.
- Improved scalability and efficiency using EKS scaling, performance reviews and right-sized UAT capacity.
- Continual improvement driven by monthly SLA reporting and incident-trend analysis.
