DotPe

GYSP used a progressive migration approach — standing up the GCP environment with Terraform IaC while AWS remained live, then migrating workload by workload using Blue/Green deployment strategies. AWS DMS handled data replication with minimal lag during the cut-window. Traffic was switched at the DNS level only after each component was fully validated in GCP, with instant rollback paths available throughout.

Google Cloud Armor is a managed DDoS protection and web application firewall (WAF) service sitting in front of GCP load balancers. It filters malicious traffic before it reaches the application, applies rate limiting, and enforces WAF rules against OWASP Top 10 threats. For DotPe, processing growing transaction volumes, Cloud Armor provided the first line of defence against volumetric and application-layer attacks without adding application-side latency.

GYSP built compliance into the infrastructure from day one. KMS encryption was applied to all data at rest and in transit, IAM controls enforced least-privilege access, and audit logging was enabled across all GCP services. Real-time threat response playbooks defined the incident management process required by all three frameworks. Automated reporting meant audit evidence was continuously generated rather than manually assembled at audit time.

AWS Database Migration Service (DMS) is a managed service that replicates data between source and target databases with minimal downtime. GYSP used DMS to continuously replicate DotPe's transactional data from the AWS source to the GCP target during the migration window — ensuring the new data warehouse was fully populated and in sync before the application-layer cutover, with no data loss during the transition.