Bank of Superior
High-Availability AWS Solution for Centralized Identity in Banks or Umbrella companies managing newly acquired entities.
Bank
Overview
A multi-account AWS architecture designed to securely host multiple banks under one umbrella. It uses a Hub-and-Spoke network model with AWS Transit Gateway to ensure strict isolation between bank accounts while allowing centralized identity management and traffic inspection.
Key Features
- Centralized Identity: AWS IAM Identity Center (SSO)
- Network Isolation: Transit Gateway Hub-and-Spoke model
- Traffic Inspection: Central AWS Network Firewall
- High Availability: Multi-AZ scaling
- Governance: Service Control Policies (SCPs) and centralized logging
Tools & Technologies
AWS Transit Gateway
AWS SSO / Identity Center
AWS Network Firewall
AWS Organizations
Terraform (optional)