Guidance for SWIFT Alliance Connect Virtual on AWS
Overview
How it works
These technical details feature an architecture diagram to illustrate how to effectively use this solution. The architecture diagram shows the key components and their interactions, providing an overview of the architecture's structure and functionality step-by-step.
Well-Architected Pillars
The architecture diagram above is an example of a Solution created with Well-Architected best practices in mind. To be fully Well-Architected, you should follow as many Well-Architected best practices as possible.
Operational Excellence
AWS CloudFormation automates the deployment of AWS resources required for SWIFT connectivity to help ensure consistency and reduce manual errors. CloudWatch logs centralize logging for SWIFT connectivity components, facilitating analysis of operational data across multiple AWS services and enabling the creation of metrics and alerts based on log patterns. AWS Config maintains a detailed inventory of AWS resources and configuration changes, tracking modifications to critical resources involved in SWIFT message processing and ensuring compliance with internal policies and industry regulations.
Security
AWS Key Management Service (AWS KMS) safeguards SWIFT connectivity by enabling secure creation and management of cryptographic keys, providing centralized control over data encryption across AWS services. Systems Manager centrally manages AWS resources, including patch management and automation of security tasks, while allowing secure access to instances without open inbound ports. Amazon VPC isolates the network environment, enabling precise control of network traffic and secure connections to on-premises networks. AWS Transit Gateway simplifies network architecture and enhances security posture by centralizing connectivity between VPCs and on-premises networks.
Reliability
AWS KMS enhances the reliability of SWIFT connectivity by providing secure key management for data encryption for compliance with SWIFT's security framework. Amazon DynamoDB, a highly available database solution, improves data availability and consistency, supporting critical SWIFT data storage and access requirements. Systems Manager automates the management, patching, and configuration of EC2 instances running SWIFT components, reducing downtime and human error.
Performance Efficiency
Amazon EC2 provides scalable compute resources for hosting critical SWIFT components, enabling efficient performance tuning and load balancing. Amazon RDS, a managed database service optimized for high-volume data operations, enhances database performance for SWIFT transactions. AWS KMS helps ensure efficient encryption and decryption processes, essential for maintaining the speed of secure financial communications. Systems Manager proactively manages and monitors the SWIFT infrastructure, helping to prevent performance issues. AWS Direct Connect establishes dedicated network connections, reducing latency and improving performance for SWIFT connectivity.
Cost Optimization
Amazon EC2, Amazon RDS, and AWS KMS offer flexible pricing models and resource allocation options, optimizing costs for SWIFT connectivity. Systems Manager automates management tasks and provides insights into resource utilization, reducing operational overhead and identifying cost-saving opportunities. Transit Gateway centralizes network management, simplifying the network architecture and potentially reducing data transfer costs. DynamoDB, a fully managed NoSQL database service, optimizes resource usage and energy consumption by automatically scaling to meet demand.
Sustainability
Amazon EC2 and Amazon RDS offer energy-efficient instance types and enable better resource utilization through features like auto-scaling, reducing idle capacity and energy waste. AWS KMS contributes to sustainability by enabling efficient encryption at scale without significant additional computational overhead. Transit Gateway centralizes network management, potentially reducing the number of network devices needed and improving overall network efficiency.
Disclaimer
The sample code; software libraries; command line tools; proofs of concept; templates; or other related technology (including any of the foregoing that are provided by our personnel) is provided to you as AWS Content under the AWS Customer Agreement, or the relevant written agreement between you and AWS (whichever applies). You should not use this AWS Content in your production accounts, or on production or other critical data. You are responsible for testing, securing, and optimizing the AWS Content, such as sample code, as appropriate for production grade use based on your specific quality control practices and standards. Deploying AWS Content may incur AWS charges for creating or using AWS chargeable resources, such as running Amazon EC2 instances or using Amazon S3 storage.
References to third-party services or organizations in this Guidance do not imply an endorsement, sponsorship, or affiliation between Amazon or AWS and the third party. Guidance from AWS is a technical starting point, and you can customize your integration with third-party services when you deploy the architecture.
Did you find what you were looking for today?
Let us know so we can improve the quality of the content on our pages