Case Study · FMCG
A leading FMCG company needed to host a high-traffic, customer-facing website built on .NET technology — and needed the underlying infrastructure to hold up to three demands at once: strong security, consistent performance under heavy traffic, and near-continuous uptime. For an FMCG brand, the website isn't a side project; it's a direct extension of the brand's presence with consumers, and any security incident, slowdown, or outage carries visible, immediate reputational risk. The company needed an AWS environment purpose-built around those priorities, not a generic hosting setup adapted after the fact.
We designed and deployed an AWS architecture specifically structured around security, performance, and availability as first-order requirements:
Compute & Traffic Management
The .NET application was hosted on Amazon EC2, with an Application Load Balancer (ALB) distributing traffic across instances to maintain performance and resilience under load.
Global Performance
Amazon CloudFront was implemented to cache and deliver content closer to end users, reducing latency and offloading traffic from origin servers.
Static Asset & Storage Layer
Amazon S3 was used for scalable, durable storage of static assets, integrated with the CloudFront delivery layer.
Security Perimeter
AWS WAF (Web Application Firewall) was deployed to filter and block malicious traffic and common web exploits before they could reach the application layer.
Secure Connectivity
AWS VPN was configured to provide secure, private connectivity for administrative and backend access, keeping sensitive management traffic off the public internet.
Continuous Threat Monitoring
Amazon GuardDuty was enabled for continuous, intelligent threat detection across the AWS environment, flagging suspicious activity in real time.
Database High Availability
The database layer was built on Microsoft SQL Server Enterprise Edition, configured in an Always On Availability Group across two EC2 instances, ensuring the database layer itself had no single point of failure and could fail over without manual intervention.
Each component was chosen to work together as a single security- and availability-focused system, rather than as disconnected services layered on top of a basic hosting setup.
01
WAF and GuardDuty working together to block malicious traffic at the edge and continuously monitor for threats across the environment.
02
CloudFront and ALB working together to keep the site fast and responsive as traffic scaled.
03
A SQL Server Always On configuration across two instances, removing the database as a single point of failure.
04
AWS VPN ensuring backend and administrative connectivity stayed off the public internet.
Tell us about your challenge. We'll show you how we'd approach it.
Talk to Us About Your Project