KPay Helps Merchants Establish Resilient, Reliable Payment Businesses on AWS

KPay Merchant Service Limited (KPay) is a financial technology company that started in Hongkong in 2020. When building its business, KPay needed service stability, geographical availability, and strict compliance with Payment Card Industry Data Security Standard (PCI DSS) and other financial industry data security standards. It also needed a cloud provider that can offer a platform with reliable infrastructure and services to support its rapid growth.

By running on the Amazon Web Services (AWS) cloud, KPay can benefit from best security practices, get alarms, and fix breaches automatically. The Amazon Security Hub provides KPay with Cloud Security Posture Management (CSPM), Security Orchestration, Automation and Response (SOAR) workflow capacities. Amazon GuardDuty, Amazon WAF and Amazon CloudTrail protects KPay’s AWS accounts and business workloads from risks of unauthorized activities and malicious actions, allowing it to defend against web threats. It also relies on AWS’s PCI DSS Level 1 Service Provider certification for industry compliance, while enhancing internal control for the stability and security of each transaction.

Finance and payment involve the processing of massive data which contain insights for business development. By building a data warehouse on Amazon RedShift, KPay obtains more data-driven insights for fraud protection, credit extension, business analysis and other scenarios. With these data insights, its merchants could continuously explore innovations beyond their POS collection services.

KPay uses Amazon Lambda to pre-process business data in a serverless manner, decoupling its system while reducing operation and maintenance workloads. The integration of Amazon CloudFormation and Amazon WAF automatically updates configuration sets and rules, which lets its collection platform defend new web threats more rapidly. Amazon Key Management Service (KMS) allows KPay’s operation and maintenance team (O&M) to create, manage and track encryption keys more easily, reducing the people need for O&M from 6 to 3. The technical team can now focus on innovating its fintech solutions.

Going forward, KPay plans to adopt Amazon Fargate, Amazon Elastic Kubernetes Service (EKS) and other services to fully containerize its fintech business, and use AWS’s DevOps solutions for a unified and continuous integration and delivery on the cloud. This cloud-native and serverless approach will make KPay’s product R&D, testing and launch more stable and efficient.