<\/p>\n
Omise<\/a>, a leading FinTech in Southeast Asia, provides payment gateway services to merchants. Since launching in Thailand in 2013, the company has expanded to Japan and Singapore, and it plans to start operating in other countries in the region in 2021.<\/p>\n While Omise\u2019s core products are its application programming interfaces (APIs) for processing debit and credit cards, the business also offers more than a dozen other products. These include mobile-based PayNow QR payments in Singapore, PromptPay in Thailand, and convenience-store payments in Japan. In its move to meet the increasing demand for broader solutions supporting localized payment options, Omise recognized the need to take another look at its infrastructure to ensure compliance in different markets, launch new products quickly, and maintain high availability for its customers.<\/p>\n Until 2018, Omise had a multi-cloud strategy in place, successfully running workloads on Amazon Web Services (AWS) while experimenting with different cloud platforms to find the best fit for its technical requirements and development culture. That year, Omise decided to fully migrate to AWS because of the platform\u2019s robust managed service offering and its integration with DevOps practices.<\/p>\n Reducing complexity was another motive for the migration. Since moving to the AWS Cloud, Omise\u2019s compliance management process has become more straightforward. Omise is required to conduct annual audits for the government and banks in each country of operation, a process that is expedited with readily available documentation from the\u00a0AWS Artifact<\/a>\u00a0repository.<\/p>\n \u201cBy choosing AWS as our single cloud provider, we can extend our cloud infrastructure to any country while adhering to the Payment Card Industry Data Security Standard (PCI DSS),\u201d says Frederico Araujo, the chief information security officer at Omise.<\/p>\n<\/div>\n Shortly after going all-in on AWS, Omise containerized its applications with Kubernetes by taking advantage of\u00a0Amazon Elastic Kubernetes Service<\/a>\u00a0(Amazon EKS). Araujo says that this shift has unlocked an agile DevOps culture within his team and engineering departments. \u201cAll our developers have access to staging and production environments, so they can quickly deploy new applications as a microservice using Amazon EKS.\u201d<\/p>\n Omise used to require a couple of months to launch a new product, but now engineers can take an idea from conception through testing to production in just three weeks. Time-to-market is particularly important in Japan, where Omise has many competitors that are domestic incumbents. Compared to a majority of its competitors, Omise has the advantage of modern technology with Kubernetes, which allows it to react quickly to changing market demands and provide real-time APIs.<\/p>\n<\/div>\n Furthermore, because a containerized approach allows for isolated development with microservices, applications can be deployed outside the strict parameters of PCI DSS compliance, which applies to card transactions only. Araujo explains, \u201cBy using Amazon EKS, we don\u2019t have to re-audit appliances each time we launch a product. We can use existing security certifications to get a product to market right away.\u201d<\/p>\n Having a fixed IP address for Omise products also ensures new products can easily integrate with its banking partners\u2019 systems. The company uses\u00a0AWS Global Accelerator<\/a>\u00a0and a\u00a0Network Address Translation (NAT) Gateway<\/a> to provide banks with static customer-facing IPs for each of its products. \u201cBanks have a lot of firewalls, and changes to their white list of preapproved IP addresses can take anywhere from one to three months,\u201d Araujo explains.<\/p>\n<\/div>\n Omise\u2019s success as a FinTech is tied to its ability to guarantee high-availability systems. The enterprises it currently serves, such as Allianz and True Corporation, demand high availability even during peak processing times. Omise solutions offer 99.99% of high availability and are built to scale. By going all-in on AWS, the company has increased its maximum transaction volume tenfold, processing 10,000 transactions per minute during peak periods.<\/p>\n The use of\u00a0Amazon Relational Database Service<\/a>\u00a0(Amazon RDS) is instrumental in maintaining Omise\u2019s high-availability architecture. Multi-AZ database instances include cross-region replication, so even if a server goes down in Japan, servers in the AWS Asia Pacific (Singapore) Region can take over. \u201cThe best parts of Amazon RDS are the availability and automation. Managing databases is a hard job we can offload to AWS, while still maintaining the flexibility to customize and add database extensions,\u201d says Araujo.<\/p>\n<\/div>\n Pricing is another reason Omise stays loyal to AWS. The company has started using\u00a0AWS Savings Plans<\/a>\u00a0as a flexible alternative for its viable dynamic workloads. With its broad range of products, Omise requires different\u00a0Amazon Elastic Compute Cloud<\/a>\u00a0(Amazon EC2) instance types to match each workload\u2019s particular requirements. AWS Savings Plans give engineers the flexibility to use next-generation Amazon EC2 instances as soon as they are released, ensuring Omise\u2019s technology stack is fully modernized.<\/p>\n \u201cWe are very confident we have a solid infrastructure with AWS and also very confident in the cost,\u201d says Araujo. \u201cWe can better plan business expansion and have visibility into spending over the long term.\u201d<\/p>\n<\/div>\n Amazon Elastic Kubernetes Service (Amazon EKS)<\/strong> gives you the flexibility to start, run, and scale Kubernetes applications in the AWS cloud or on-premises.<\/p>\n AWS Global Accelerator<\/strong> is a networking service that sends your user\u2019s traffic through Amazon Web Service\u2019s global network infrastructure, improving your internet user performance by up to 60%.<\/p>\n Amazon Relational Database Service (Amazon RDS)<\/strong> makes it easy to set up, operate, and scale a relational database in the cloud.<\/p>\n AWS Artifact<\/strong> is your go-to, central resource for compliance-related information that matters to you. It provides on-demand access to AWS\u2019 security and compliance reports and select online agreements.<\/p>\nSingle Cloud Strategy Reduces Complexity<\/h2>\n
Containers Unlock DevOps Culture<\/h2>\n
Efficient Product Launches<\/h2>\n
Clients Demand High Availability<\/h2>\n
Visibility into Spending<\/h2>\n
Benefits of AWS<\/h2>\n
\n
AWS Services Used<\/h2>\n
About VTI Cloud<\/h2>\n