ContentLens is an AI-powered content intelligence platform that helps organizations protect and manage their digital media assets at scale. As its user base and workload complexity grew, ContentLens needed a modern cloud foundation capable of supporting compute-intensive AI/ML workloads alongside its core application services, with consistent security, monitoring, and governance built in from the ground up.
As ContentLens scaled its AI-driven platform, the team needed a network foundation that could isolate application and database tiers from public access, a managed approach to identity and access control, and a unified observability and cost-governance framework built for growth. The platform needed a resilient, highly available network foundation that could isolate application and database tiers from public access while still exposing services securely to end users. It also needed a managed approach to identity and access control across the environment, a purpose-built data layer capable of supporting multiple database engines with automated failover, and a unified observability and cost-governance framework to support the platform as it scaled. Migrating to AWS gave ContentLens the opportunity to rebuild this foundation on infrastructure purpose-built for high-availability, compute-intensive, security-conscious workloads.
Comprinno designed and deployed a three-tier AWS environment for ContentLens in the Mumbai region, built around a dedicated VPC spanning three Availability Zones, with public, private application, and private database subnets in each zone. An Internet Gateway handles inbound traffic through the public subnets, where the Application Load Balancer and bastion host reside, while application and database tiers remain fully isolated in private subnets with no direct route to the internet.
The ContentLens AWS environment is built around a dedicated VPC spanning three Availability Zones, each with a public, application, and database subnet. Incoming user traffic passes through an Internet Gateway to the Application Load Balancer in the public subnet, which routes requests to backend EC2 instances running in an Auto Scaling group across the application subnets, giving the platform the ability to scale compute capacity in line with demand. A NAT Gateway in the public tier provides controlled outbound internet access for instances in the private application subnets, which otherwise have no direct route to the internet. Each Availability Zone's database subnet hosts a Multi-AZ ElastiCache Redis cluster alongside Multi-AZ RDS instances for both PostgreSQL and MySQL, fully isolated from public access and reachable only from the application tier. Account-level services, including IAM Identity Center, AWS WAF, ACM, Secrets Manager, and CloudTrail, provide a consistent identity, security, and audit foundation across the environment, while Amazon S3 supports application and log storage, and CloudWatch with SNS delivers unified monitoring and alerting across the stack.
By migrating ContentLens's infrastructure from Microsoft Azure to Amazon Web Services, Comprinno built a secure, resilient, and highly observable foundation purpose-built to support ContentLens's AI-driven content intelligence platform. Combining a highly available three-tier network architecture, GPU-ready compute for AI/ML workloads, Multi-AZ managed databases and caching, and a layered security and cost-governance framework, Comprinno delivered an infrastructure that gives ContentLens the scalability, security, and operational visibility it needs to support its continued growth.
Comprinno Achieves AWS Data and Analytics Competency | Read More →
