Financial services · PROJECT

Move a loan document store onto private AWS networking

Northbank keeps 1.2 million scanned loan documents on one EC2 instance and a public S3 bucket. Rebuild it as a two-AZ VPC with a private application tier and KMS-encrypted storage reached over a gateway endpoint, in Terraform you can destroy and stand up again, and finish with the evidence an internal auditor asks for.

Intermediate12–16 hoursTerraform 1.9Amazon VPCAmazon S3 with KMSCloudWatch Logs and metrics
THE CHALLENGE → YOUR OUTCOME

Real context. Work that matters.

Northbank needs its loan documents off a single public-facing instance before its next internal audit, without a migration window longer than a Saturday morning. You rebuild the hosting as a private two-tier VPC in Terraform, move the objects behind a customer-managed key and a gateway endpoint, prove the service survives losing an instance, and hand back a stack the next engineer can read.

What’s at stake

The document store was built in a fortnight in 2021 so advisers could stop emailing PDFs to each other. One EC2 instance in a default VPC serves a small internal web app; the scans sit in an S3 bucket that was made public because a presigned URL "did not work" late on a Friday. It has run without incident since, which is exactly why nobody has touched it.

Your responsibility: Work as the cloud engineer, infrastructure team—investigate the requirements, implement your approach and verify the result.

Success means: Loan documents reachable only from the application tier, encrypted with a key Northbank controls, on infrastructure that survives the loss of an instance or an availability zone, with the whole stack reproducible from the repository and an evidence pack that answers the auditor’s three questions directly. Explain the decisions and checks behind your implementation.

WHAT YOU’LL BUILD
01AWS
02Terraform
03VPC

Northbank loan document store

INCLUDED WITH YOUR PROJECT

A workspace, not just a document.

Your brief, a Jira-style task board and an interview studio—all in one place.

A look inside your workspace
prepmeetsYour projects / WorkspaceYOU
Move a loan document store onto private AWS networking

Project brief

Your mission

Understand the business challenge, implement the requirements and explain the decisions behind your work.

Your tasks
  1. The situation at Northbank
  2. Your role and the brief
  3. Environment and starter stack
Expected outcome

A working result, tested in your own environment, that you can discuss with confidence.

Start with the full project brief

Explore the workspace preview

Choose a section in the sidebar. Demonstration only—not your saved progress.

prepmeetsYour projects / WorkspaceYOU
Move a loan document store onto private AWS networking

Project brief

Your mission

Understand the business challenge, implement the requirements and explain the decisions behind your work.

Your tasks
  1. The situation at Northbank
  2. Your role and the brief
  3. Environment and starter stack
Expected outcome

A working result, tested in your own environment, that you can discuss with confidence.

Build step by step Track your progress Own your interview story
YOUR PROJECT JOURNEY

Know where you’re heading.

  1. 01The situation at Northbank
  2. 02Your role and the brief
  3. 03Environment and starter stack
  4. 04Target architecture
  5. 05Build it in four phases
  6. 06Break it on purpose
  7. 07What you hand over
  8. 08Submission and cleanup
Practise explaining your decisions

Which decision mattered most in your solution, and how did you verify it?

Use your own implementation to connect Situation, Task, Action and Result into one interview story.

Before you begin · tools & running costs

Prerequisites: Your own accounts and access to Terraform 1.9, Amazon VPC, Amazon S3 with KMS, CloudWatch Logs and metrics.

Additional costs: Cloud and tool usage in your own accounts may incur charges. Set a budget and clean up after testing.

Work in your own accounts and repositories. Never share credentials or confidential data.

What’s included

Project brief, target-design guidance, assigned tasks, resource guidance and interview prompts. Detailed requirements become part of your purchased workspace.

P
MEET YOUR PROJECT EXPERT

Prepmeets

Project studio, Prepmeets

We are the team that builds Prepmeets. Between us we have run cloud platforms, delivery pipelines, analytics teams and AI governance programmes in banks, hospitals, retailers and government departments, and these projects are the work we used to hand to new joiners in their first fortnight. Every one of them is a real scenario with the client’s name changed, scoped to a week of evenings, and reviewed by the person who originally did the job.

View verified expert profile Expert review is an optional paid service, separate from project access.

What you’ll build

01AWS
02Terraform
03VPC

Concept preview · Detailed architecture and requirements are provided in the workspace.