Qualiphy (Healthcare – Amazon EKS + RDS + Compliance)

A structured multi-account environment was implemented for Dev, Stage, Release, and Prod, each running in dedicated Amazon VPCs across multiple Availability Zones. Infrastructure is provisioned through AWS CloudFormation to ensure consistent Infrastructure as Code deployments.
Applications run on Amazon EKS with CI/CD automated using AWS CodePipeline and CodeBuild, with container images stored in Amazon ECR. Staging mirrors production, while production EKS clusters operate across multiple AZs behind an Elastic Load Balancer with Amazon RDS MySQL in Multi-AZ mode and secure credential management through AWS Secrets Manager.
The network architecture enforces private subnet isolation for all worker nodes, databases, and sensitive workloads. Access is tightly controlled through IAM roles, NAT gateways, and security groups, with AWS Secrets Manager ensuring that credentials remain encrypted, rotated, and centrally managed. Supporting services such as AWS Systems Manager, IAM, S3, and CloudFormation provide centralized management, secure storage, and governance.
The environment is designed with high availability and failure resilience in mind. EKS worker nodes and RDS MySQL are deployed across multiple AZs, with Elastic Load Balancing distributing traffic only to healthy nodes. Amazon EKS leverages AWS’s managed control plane for fault tolerance, while NAT gateways ensure resilient outbound connectivity. At the database layer, Multi-AZ RDS MySQL ensures automatic failover, with AWS Backup providing daily snapshots and 7-day retention for point-in-time recovery. During failover or node replacement, Secrets Manager ensures uninterrupted reconnections between applications and services.
Scalability is achieved at every layer. Amazon EKS worker nodes auto scale based on CPU, memory, and custom application metrics in both Stage and Prod. Elastic Load Balancers automatically adapt to traffic spikes, and RDS MySQL supports both storages auto-scaling and read replicas to handle growing workloads. Code Pipeline manages deployments seamlessly, while Amazon S3 provides near-infinite scalability for artifacts, logs, and state files. Secrets Manager scales transparently to manage growing application secrets.
The design balances tradeoffs between Multi-AZ and Multi-Region. The current strategy favors Multi-AZ for cost-efficiency, with AWS Backup configured for crossregion recovery if needed. Similarly, managed services like Amazon EKS, RDS MySQL, and Secrets Manager are leveraged to reduce operational overhead while ensuring reliability and security. Private subnet architecture strengthens data protection but requires precise NAT Gateway and Secrets Manager integration for outbound access and connectivity.
The overall architecture is validated with evidence artifacts, including a multi-account architecture diagram showing Dev, Stage, Release and Prod environments with EKS, RDS MySQL, Elastic Load Balancers, Code Pipeline, Code Build, and Amazon ECR. Documentation highlights HA and scalability features such as Multi-AZ deployments, RDS MySQL daily backups, EKS auto scaling, and Secrets Manager integrations. Failure handling is addressed comprehensively across the application, database, networking, and credential layers. With AWS Backup, CloudFormation, and Secrets Manager forming the backbone of resilience and automation, this environment ensures that applications remain highly available, secure, and easily recoverable.