Financial services · PROJECT

Secure a customer document service on AWS

BlueEagle Financial Services needs somewhere to host an internal document-retrieval service before its compliance deadline. Build the two-tier AWS environment by hand: a VPC, public web and private application tiers behind two load balancers, a locked-down S3 bucket reached through a scoped role, and proof that each tier replaces itself when an instance dies.

Intermediate14–18 hoursAmazon VPC and security groupsApplication Load Balancers and Auto ScalingAmazon S3 and IAM rolesNginx and systemd
THE CHALLENGE → YOUR OUTCOME

Real context. Work that matters.

A case handler asks for a verified customer document by reference. The request enters the public load balancer, passes through Nginx and the internal load balancer, and reaches the Python service, which reads the document from a private S3 bucket using its instance role. You build every hop, prove only the application role can read the bucket, and show each tier recovering from the loss of an instance.

What’s at stake

Case handlers currently request customer documents by emailing a shared mailbox. Compliance wants an internal retrieval service this sprint, and the application already exists. What does not exist is anywhere safe to run it: the team’s one test server was built by hand two years ago, has a public address, and nobody remembers how.

Your responsibility: Work as the platform engineer, platform team—investigate the requirements, implement your approach and verify the result.

Success means: A hosting environment compliance can inspect: a clear traffic path, a bucket that only the application role can read, and evidence that losing an instance in either tier does not take the service down. The handover is a diagram, a README, permission notes and two fault write-ups. Explain the decisions and checks behind your implementation.

WHAT YOU’LL BUILD
01AWS
02VPC
03ALB

BlueEagle document retrieval service

INCLUDED WITH YOUR PROJECT

A workspace, not just a document.

Your brief, a Jira-style task board and an interview studio—all in one place.

A look inside your workspace
prepmeetsYour projects / WorkspaceYOU
Secure a customer document service on AWS

Project brief

Your mission

Understand the business challenge, implement the requirements and explain the decisions behind your work.

Your tasks
  1. The situation at BlueEagle
  2. Your role and the brief
  3. Environment and prerequisites
Expected outcome

A working result, tested in your own environment, that you can discuss with confidence.

Start with the full project brief

Explore the workspace preview

Choose a section in the sidebar. Demonstration only—not your saved progress.

prepmeetsYour projects / WorkspaceYOU
Secure a customer document service on AWS

Project brief

Your mission

Understand the business challenge, implement the requirements and explain the decisions behind your work.

Your tasks
  1. The situation at BlueEagle
  2. Your role and the brief
  3. Environment and prerequisites
Expected outcome

A working result, tested in your own environment, that you can discuss with confidence.

Build step by step Track your progress Own your interview story
YOUR PROJECT JOURNEY

Know where you’re heading.

  1. 01The situation at BlueEagle
  2. 02Your role and the brief
  3. 03Environment and prerequisites
  4. 04Target architecture
  5. 05Build it in five phases
  6. 06Break it on purpose
  7. 07What you hand over
  8. 08Submission and cleanup
Practise explaining your decisions

Which decision mattered most in your solution, and how did you verify it?

Use your own implementation to connect Situation, Task, Action and Result into one interview story.

Before you begin · tools & running costs

Prerequisites: Your own accounts and access to Amazon VPC and security groups, Application Load Balancers and Auto Scaling, Amazon S3 and IAM roles, Nginx and systemd.

Additional costs: Cloud and tool usage in your own accounts may incur charges. Set a budget and clean up after testing.

Work in your own accounts and repositories. Never share credentials or confidential data.

What’s included

Project brief, target-design guidance, assigned tasks, resource guidance and interview prompts. Detailed requirements become part of your purchased workspace.

P
MEET YOUR PROJECT EXPERT

Prepmeets

Project studio, Prepmeets

We are the team that builds Prepmeets. Between us we have run cloud platforms, delivery pipelines, analytics teams and AI governance programmes in banks, hospitals, retailers and government departments, and these projects are the work we used to hand to new joiners in their first fortnight. Every one of them is a real scenario with the client’s name changed, scoped to a week of evenings, and reviewed by the person who originally did the job.

View verified expert profile Expert review is an optional paid service, separate from project access.

What you’ll build

01AWS
02VPC
03ALB

Concept preview · Detailed architecture and requirements are provided in the workspace.