Jerin
← All projects

AWS Multi-Account Architecture with Blue/Green Deployment

Designed and implemented a secure, scalable multi-account AWS architecture using Control Tower and Organizations, supporting blue/green deployments.

AWS Control TowerAWS OrganizationsECS FargateAurora PostgreSQLCloudFrontWAFCognitoTerraform

Challenge

A client needed a secure, scalable multi-account AWS environment to support mobile backend services with zero-downtime deployments and strict compliance requirements.

Solution

I designed the landing zone using AWS Control Tower and Organizations, then built the application platform on ECS Fargate with ALB/NLB and API Gateway integrations. Database resilience came from globally distributed Aurora PostgreSQL with automated backups and cross-region failover.

Security and Compliance

  • AWS Cognito for authentication
  • CloudFront with AWS WAF for edge security
  • AWS Network Firewall and Firewall Manager for network controls
  • AWS Audit Manager and AWS Config for compliance validation
  • Self-hosted Azure DevOps agents with TFLint and Checkov scanning

Outcome

The architecture supported blue/green deployments across regions, passed compliance reviews, and provided a secure foundation for mobile backend workloads.