Includes major infrastructure and security upgrades.
Enhancements and Improvements
(This section describes enhancements and improvements added for Rekor CarCheck.)
- Complete Infrastructure Migration: Transitioned from AWS Elastic Beanstalk to Amazon EKS for improved observability, scalability, reliability, and orchestration.
- Enhanced Security: Implemented AWS WAF (Web Application Firewall) with custom rule sets to filter malicious traffic and protect API endpoints
- Improved Resource Management: Configured horizontal pod autoscaling (HPA) with target CPU utilization of 10% (scaling from 20-120 pods in production),
- High Availability: Implemented pod disruption budgets (PDBs) and pod anti-affinity rules to ensure service reliability during node maintenance
- Enhanced Monitoring: Added Datadog integration for improved observability with auto multi-line log detection
- Networking Upgrades: Implemented AWS Application Load Balancer (ALB) with automatic HTTP to HTTPS redirection and health check configuration
- Secret Management: Integrated with AWS Secrets Manager and External Secrets Operator for secure credential management