Network Diagram

Network Diagram

• Edge Layer: CloudFront CDN with WAF protection for global content delivery and security
• Application Services: Multiple microservices running on ECS including:
  • Payment processing (POP and WOP variants)
  • Checkout and merchant portals
  • IAM/authentication services
  • Tokenization for sensitive data
• Data Layer: Multi-database architecture with PostgreSQL (RDS), DynamoDB, and Redis for caching
• Security: Comprehensive security stack including GuardDuty, Inspector, Security Hub, WAF, and third-party tools (Rapid7, Vanta)
• Monitoring: Full observability with CloudTrail, CloudWatch, Sumo Logic, and AWS Config
• Storage: Dedicated S3 buckets for public assets, logs (CDN, WAF, CloudTrail), and compliance data
• Multi-Region: Infrastructure spans us-east-1 (primary), eu-central-1, and has presence in 30+ AWS regions

Supporting Services

Business Architecture

Key Business Insights I Derived:

1. Core Business: Payment-as-a-Service platform for e-commerce
   • Evidence: Payment services (POP/WOP), checkout, tokenizer, merchant portal
2. European Fintech: Italian company (based on Italian staff names: Simona, Diego, Angelo, Matteo, etc.)
   • Primary region: eu-central-1, with US expansion (us-east-1)
3. B2B2C Model:
   • Merchants (B2B): Use APIs and portal to manage payments
   • End Customers (C): Use checkout to make purchases
   • Partners: Banks and card networks
4. Revenue Streams: Transaction fees + merchant subscriptions
5. Key Differentiators:
   • PCI DSS compliant tokenization
   • European data residency (GDPR)
   • Multi-currency support
   • Fraud prevention (add-on service)
6. Business Workflows: Complete payment processing and merchant onboarding flows mapped to AWS services