- Geography: India
- Industry: Financial Services
- Employees: 5K
- Solution: Cloud
- Services: Cloud Migration
The client
A leading Financial Services / Wealth Management organization operating a mission-critical digital investment platform engaged enreap to modernize its Disaster Recovery (DR) strategy. The platform processes high-value financial transactions and sensitive investor data, making high availability, data integrity, and regulatory compliance non-negotiable. The production environment was hosted entirely on-premises, creating scalability and resilience limitations.
Client requirements
Near-Zero Data Loss & Rapid Recovery
Achieve RPO ≤ 1 minute and RTO ≤ 15 minutes for mission-critical financial workloads.
Secure & Compliant DR Architecture
Ensure encrypted replication, audit visibility, and controlled failover.
Cost-Optimized & Operationally Simple DR
Reduce operational overhead with a managed database approach while maintaining cost parity or savings.
Our approach
enreap designed and implemented a secure On-Premises to AWS Disaster Recovery architecture, leveraging Amazon EC2 for the application tier and Amazon RDS for SQL Server for the database tier. The solution incorporated encrypted replication, controlled DNS failover, real-time monitoring, and structured DR drills to validate recovery objectives and operational readiness.
Our solution
Secure DR Infrastructure
The solution was built on a secure AWS foundation with a Virtual Private Cloud (VPC) configured with public and private subnets, along with Site-to-Site VPN connectivity to the AWS Mumbai Region. The application tier was deployed on multi-AZ Amazon EC2 instances, while Amazon RDS for SQL Server was implemented with KMS encryption and SSL/TLS to ensure secure, high-availability database operations.
Reliable Replication & Failover
Database replication was configured using SQL Server Log Shipping from the on-premises environment to Amazon RDS, ensuring minimal data lag and reliable synchronization. Application files were continuously synced using GoodSync, while Cloudflare DNS enabled controlled traffic redirection during disaster recovery events.
Monitoring, Security & Compliance
Security and governance were enforced using IAM with least-privilege access controls to ensure secure resource access. Operational visibility and compliance were maintained through Amazon CloudWatch dashboards and alarms, AWS CloudTrail audit logging, and Amazon S3 for centralized backup and log storage.
Business benefits
- RPO ≤ 1 minute and RTO ≤ 15 minutes achieved during DR drills
- Secure, encrypted replication validated over Site-to-Site VPN
- Reliable database replication with minimal data lag
- Reduced operational overhead using Amazon RDS (managed database)
- Real-time visibility through CloudWatch monitoring and alerts
- DR costs aligned with or lower than existing on-prem investments
- Fully documented runbooks and SOPs for ongoing DR readiness
- Scalable, cloud-ready foundation for future modernization
Technology stack
