About This Architecture

DuitNow Payment Platform on AWS demonstrates a multi-AZ, enterprise-grade payment network architecture spanning six functional subnets across two availability zones in ap-southeast-1. Traffic flows from end users and merchants through a WAF-protected External ALB and API Gateway into a Core Switching Engine (ECS Fargate) orchestrated by Step Functions, with routing and validation handled by Lambda microservices. The platform integrates real-time data persistence via Aurora Primary/Standby RDS, ElastiCache session management, DynamoDB transaction state, and asynchronous processing through SQS, SNS, and EventBridge, while PayNet adapters (DuitNow, NAD, FPX) and card networks connect via VPN Gateway and Direct Connect to external banking infrastructure. This architecture prioritizes fault tolerance, compliance, and observability through Shield Advanced DDoS protection, KMS encryption, GuardDuty threat detection, and comprehensive CloudWatch, CloudTrail, and X-Ray instrumentation. Fork this diagram on Diagrams.so to customize subnets, add additional adapters, or adjust scaling parameters for your regional payment processing requirements. The design exemplifies payment industry best practices: segregated security and data tiers, event-driven settlement via Glue ETL and S3 reconciliation, and real-time analytics through Redshift and OpenSearch.

People also ask

How do you design a highly available payment platform on AWS with PayNet integration and multi-AZ failover?

This diagram shows a production DuitNow payment platform spanning two AZs with a WAF-protected API Gateway routing to an ECS Fargate Core Switching Engine, Lambda-based routing and validation, and multi-adapter support (PayNet DuitNow/NAD, FPX, MyDebit/JCB/Visa). Data flows through Aurora Primary/Standby RDS, ElastiCache sessions, DynamoDB transaction state, and asynchronous queues (SQS/SNS/EventB