{"id":15039,"date":"2022-10-31T10:52:59","date_gmt":"2022-10-31T08:52:59","guid":{"rendered":"https:\/\/www.weare.fi\/?page_id=15039"},"modified":"2026-01-26T12:50:16","modified_gmt":"2026-01-26T10:50:16","slug":"cloud-infrastructure-key-benefits","status":"publish","type":"page","link":"https:\/\/weare.fi\/en\/palvelut\/pilvipalvelut\/cloud-infrastructure-key-benefits\/","title":{"rendered":"Our Cloud Infrastructure"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\n\t\n<\/svg>\t\t<\/div>\n\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Key Benefits<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Cloud infrastructure refers to the collection of features needed to enable cloud computing. Our approach to cloud infrastructure is to bring together all the best practices AWS and Azure has to offer so our client’s cloud deployments are cost-effective, scalable, secure and automated, so you can focus on your core business.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

Core Features of the Shelf<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
  1. Base foundation built with Managed Services<\/li>
  2. All applications are containerized<\/li>
  3. High availability and scalability<\/li>
  4. Disaster recovery<\/li>
  5. CI\/CD<\/li>
  6. Test automation<\/li>
  7. Secrets<\/li>
  8. Centralized (shared) integration layer for all applications<\/li>
  9. Centralized logging<\/li>
  10. Centralized monitoring<\/li>
  11. Shared components<\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t
    Example of our AWS Cloud Maturity level<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t

    Base foundation built with Managed Services<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t
      \n
    1. If there’s any<\/strong><\/span> managed service<\/strong> available for some specific use case, we have taken that service in use<\/span><\/li>\n
    2. Focus to develop something new: <\/span>no need for oversized infra team<\/strong> to do all the maintenance work and troubleshooting all kind of infra related problems<\/span><\/li>\n
    3. Fault tolerance<\/strong>: all services are automatically distributed between multiple data centers (availability zones) in case of one\/multiple data center failure(s) inside the same region<\/span><\/li>\n
    4. Operate your infrastructure more efficiently and securely<\/span>\n
        \n
      • Almost all services meet different <\/span>compliance requirements (ISO, PCI etc.)<\/strong><\/li>\n<\/ul>\n<\/li>\n
      • You can have automatic updates<\/span><\/strong> for all managed services without any manual admin actions<\/span><\/li>\n<\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t

        All applications are containerized<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t\t\t\t\t
        1. Applications consist of many different services (containers) running inside the same stack.<\/span><\/li>
        2. For better: isolation, splitting\/sharing of the components\/services between different applications<\/span><\/li>
        3. All data are stateless<\/span>
          • enables <\/span>horizontal scaling<\/strong> support instead of only vertical<\/span><\/li>
          • all data is stored in external services<\/strong><\/li>
          • enables all containers to have <\/span>read-only files systems to minimize the attack surface<\/strong><\/li><\/ul><\/li>
          • All container images are hardened where all the unnecessary OS command are already removed e.g. cp, rm<\/span><\/li>
          • Automatic OS patching using scheduled deployments: builds new container images with latest OS security patches included even week basis (if required)<\/span><\/li>
          • Scan for any vulnerabilities<\/strong> during container image creation (still at PoC phase)<\/span><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
            \n\t\t\t\t
            \n\t\t\t\t\t

            High availability and scalability<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
            \n\t\t\t\t
            \n\t\t\t\t\t\t\t\t\t
            1. All production load are distributed between <\/span>two data centers<\/strong> (at minimum) with automatic failover<\/span><\/li>
            2. All applications are running in AWS Elastic Beanstalk or Azure App Service which handles the deployment, from capacity provisioning, load balancing, auto-scaling to application health monitoring<\/span>
              • You can scale up (or down)<\/strong> based on several statistics including latency, disk I\/O, CPU utilization, and request count<\/span><\/li><\/ul><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                \n\t\t\t\t
                \n\t\t\t\t\t

                Disaster recovery <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                \n\t\t\t\t
                \n\t\t\t\t\t\t\t\t\t
                1. All resources are built\/managed with Terraform Cloud (<\/span>Infrastructure as code<\/strong>)<\/li>
                2. Application code are stored in Bitbucket Cloud<\/span><\/li>
                3. All secrets are stored in 1Password (+ <\/span>Secrets Automation<\/strong>)<\/span><\/li>
                4. All databases can be restored ”live” up to 72 hours back<\/span>
                  • After 72h 35 days back with 1s interval.<\/span><\/li>
                  • After 35 days from weekly image (1y retention)<\/span><\/li><\/ul><\/li>
                  • All other static data are stored in S3 storage e.g. uploaded files, images…<\/span><\/li>
                  • All services\/servers can re-deployed<\/strong> with Terraform or by running deployment pipelines again<\/span><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                    \n\t\t\t\t
                    \n\t\t\t\t\t

                    Continuous Integration \/ Continuous Deployment (CI\/CD) <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                    \n\t\t\t\t
                    \n\t\t\t\t\t\t\t\t\t
                      \n \t
                    1. Fully automated deployment pipelines<\/strong> without any manual admin interaction<\/span><\/li>\n \t
                    2. Releases can be deployed every hour (if you want)<\/span><\/li>\n \t
                    3. Unit tests<\/strong> are part of the pipelines<\/span><\/li>\n \t
                    4. Every pull request creates\u00a0temp. environment<\/strong>\u00a0(full stack of services) to run test against feature branches (manual and automated) and the URL for this environment will be available via Slack channel\n
                        \n \t
                      • Merge or decline will trigger the removal of the temp. env.<\/li>\n<\/ul>\n<\/li>\n \t
                      • Revert back to the old release with a click<\/strong>\u00a0of the button<\/strong> (of course database restore also required, if applied migrations failed) Run exactly the same releases in staging before going into production env.<\/span><\/span><\/li>\n<\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                        \n\t\t\t\t
                        \n\t\t\t\t\t

                        Test automation<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                        \n\t\t\t\t
                        \n\t\t\t\t\t\t\t\t\t
                        1. Cypress.io is <\/span>continuously testing<\/strong> for any broken features<\/span><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                          \n\t\t\t\t
                          \n\t\t\t\t\t

                          Secrets<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                          \n\t\t\t\t
                          \n\t\t\t\t\t\t\t\t\t
                            \n \t
                          1. All secrets are stored in 1Password Cloud<\/span><\/li>\n \t
                          2. All secrets can be fetched from 1Password Secrets Automation service during application startup process\n
                              \n \t
                            • Most of the secrets are created by Terraform (by using 1Password module) and fetched by Terraform in later steps\u00a0<\/span>no visible secrets anywhere<\/span><\/strong><\/li>\n<\/ul>\n<\/li>\n<\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                              \n\t\t\t\t
                              \n\t\t\t\t\t

                              Centralized (shared) integration layer for all applications<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                              \n\t\t\t\t
                              \n\t\t\t\t\t\t\t\t\t
                              1. Transforms all requests to be compatible example with <\/span>different ERP systems<\/strong> (different countries), so that the same application code can be used for all countries<\/span><\/li>
                              2. Totally serverless solution<\/span><\/li>
                              3. Supports also inbound requests from 3rd party vendors<\/span><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                                \n\t\t\t\t
                                \n\t\t\t\t\t

                                Centralized logging <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                                \n\t\t\t\t
                                \n\t\t\t\t\t\t\t\t\t
                                1. All important application logs are streamed\/stored in Splunk Cloud<\/span>
                                  • Create <\/span>dashboards based on business KPI’s<\/strong><\/li>
                                  • Makes troubleshooting easy, when you see the whole picture from all of these streams<\/span><\/li>
                                  • Audit stream<\/strong> from the whole environment<\/span><\/li><\/ul><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                                    \n\t\t\t\t
                                    \n\t\t\t\t\t

                                    Centralized monitoring<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                                    \n\t\t\t\t
                                    \n\t\t\t\t\t\t\t\t\t
                                    1. All created, modified or deleted resources are dynamically updated\/fetched into external monitoring system.<\/span><\/li>
                                    2. Find problems before end users<\/strong> and creates tickets automatically to SD from these outages<\/span><\/li>
                                    3. SLA reporting<\/strong><\/li>
                                    4. Anomaly Detection and automatic RCA reports<\/span><\/strong><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                                      \n\t\t\t\t
                                      \n\t\t\t\t\t

                                      Shared components <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                                      \n\t\t\t\t
                                      \n\t\t\t\t\t\t\t\t\t
                                      1. Applications are sharing the same components via <\/span>centralized component library no need to implement\/code same functionality for every application<\/span><\/strong><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                                        \n\t\t\t\t
                                        \n\t\t\t\t\t\t\t
                                        \n\t\t\t
                                        <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                                        \n\t\t\t\t
                                        \n\t\t\t\t\t\t\t
                                        \n\t\t\t
                                        <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

                                        Key Benefits Cloud infrastructure refers to the collection of features needed to enable cloud computing. Our approach to cloud infrastructure is to bring together all the best practices AWS and Azure has to offer so our client’s cloud deployments are cost-effective, scalable, secure and automated, so you can focus on your core business. Core Features […]<\/p>\n","protected":false},"author":2,"featured_media":2165,"parent":6215,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_improvement_type_select":"improve_an_existing","_thumb_yes_seoaic":false,"_frame_yes_seoaic":false,"seoaic_generate_description":"","seoaic_improve_instructions_prompt":"","seoaic_rollback_content_improvement":"","seoaic_idea_thumbnail_generator":"","thumbnail_generated":false,"thumbnail_generate_prompt":"","seoaic_article_description":"","site-sidebar-layout":"no-sidebar","site-content-layout":"page-builder","ast-site-content-layout":"full-width-container","site-content-style":"unboxed","site-sidebar-style":"unboxed","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"disabled","ast-breadcrumbs-content":"","ast-featured-img":"disabled","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"class_list":["post-15039","page","type-page","status-publish","has-post-thumbnail","hentry"],"_links":{"self":[{"href":"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/pages\/15039","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/comments?post=15039"}],"version-history":[{"count":59,"href":"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/pages\/15039\/revisions"}],"predecessor-version":[{"id":23355,"href":"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/pages\/15039\/revisions\/23355"}],"up":[{"embeddable":true,"href":"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/pages\/6215"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/media\/2165"}],"wp:attachment":[{"href":"https:\/\/weare.fi\/en\/wp-json\/wp\/v2\/media?parent=15039"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}