Migrated a monolithic HealthTech SaaS platform from EC2 to EKS with Helm and Istio, maintaining full HIPAA compliance throughout the transition.
The client operated a monolithic application on EC2 instances with manual scaling and fragile deployments. Releases required 2-hour maintenance windows, and the lack of service mesh made inter-service communication unreliable. HIPAA compliance was maintained through manual processes that consumed 40% of engineering time.
We decomposed the monolith into domain-driven microservices deployed on Amazon EKS with Helm charts for reproducible releases. Istio service mesh provided mTLS, traffic management, and canary deployments. We implemented OPA Gatekeeper for policy enforcement and automated HIPAA evidence collection with tamper-proof audit logs.
Kubernetes
AWSIstio