- The situation at BlueEagle
- Your role and the brief
- Environment and prerequisites
Secure a customer document service on AWS
BlueEagle Financial Services needs somewhere to host an internal document-retrieval service before its compliance deadline. Build the two-tier AWS environment by hand: a VPC, public web and private application tiers behind two load balancers, a locked-down S3 bucket reached through a scoped role, and proof that each tier replaces itself when an instance dies.
PReal context. Work that matters.
A case handler asks for a verified customer document by reference. The request enters the public load balancer, passes through Nginx and the internal load balancer, and reaches the Python service, which reads the document from a private S3 bucket using its instance role. You build every hop, prove only the application role can read the bucket, and show each tier recovering from the loss of an instance.
Case handlers currently request customer documents by emailing a shared mailbox. Compliance wants an internal retrieval service this sprint, and the application already exists. What does not exist is anywhere safe to run it: the team’s one test server was built by hand two years ago, has a public address, and nobody remembers how.
Success means: A hosting environment compliance can inspect: a clear traffic path, a bucket that only the application role can read, and evidence that losing an instance in either tier does not take the service down. The handover is a diagram, a README, permission notes and two fault write-ups. Explain the decisions and checks behind your implementation.
BlueEagle document retrieval service
A workspace, not just a document.
Your brief, a Jira-style task board and an interview studio—all in one place.
Know where you’re heading.
- 01The situation at BlueEagle
- 02Your role and the brief
- 03Environment and prerequisites
- 04Target architecture
- 05Build it in five phases
- 06Break it on purpose
- 07What you hand over
- 08Submission and cleanup
Practise explaining your decisions
Which decision mattered most in your solution, and how did you verify it?
Use your own implementation to connect Situation, Task, Action and Result into one interview story.
Before you begin · tools & running costs
Prerequisites: Your own accounts and access to Amazon VPC and security groups, Application Load Balancers and Auto Scaling, Amazon S3 and IAM roles, Nginx and systemd.
Additional costs: Cloud and tool usage in your own accounts may incur charges. Set a budget and clean up after testing.
Work in your own accounts and repositories. Never share credentials or confidential data.
What’s included
Project brief, target-design guidance, assigned tasks, resource guidance and interview prompts. Detailed requirements become part of your purchased workspace.
Prepmeets
Project studio, PrepmeetsWe are the team that builds Prepmeets. Between us we have run cloud platforms, delivery pipelines, analytics teams and AI governance programmes in banks, hospitals, retailers and government departments, and these projects are the work we used to hand to new joiners in their first fortnight. Every one of them is a real scenario with the client’s name changed, scoped to a week of evenings, and reviewed by the person who originally did the job.
View verified expert profile Expert review is an optional paid service, separate from project access.