About
The customer is a leading India-based platform for real estate investment, enabling fractional ownership in premium commercial properties. Registered with SEBI as an investment manager for Small & Medium REITs, the platform allows investors to access Grade A, income-generating properties through a seamless digital experience. It offers regulated oversight, rental income, capital appreciation, and liquidity, while eliminating the complexities of real estate ownership.
As a technology-driven real estate investment company’s AWS environment rapidly scaled, the team identified key opportunities to enhance operational visibility and cost efficiency. Observability across ECS workloads was initially limited due to the absence of a centralized monitoring system, and varying configurations across environments made it difficult to compare performance data consistently. While AWS CloudWatch Container Insights was evaluated, a more cost-effective solution was implemented using ECS exporters, CloudWatch, and centralized Grafana dashboards. Prometheus integration posed a minor challenge due to the lack of native ECS service discovery, which required manual updates to scrape targets.
Operational tasks such as patching, releases, and change management had room for standardization and automation, prompting the creation of structured runbooks and workflows. On the compliance front, manual audit preparations highlighted the need for continuous monitoring and predefined processes for security investigations. From a financial perspective, the team saw an opportunity to improve cost attribution, forecast accuracy, and resource optimization.
To address these challenges, the technology-driven real estate investment company partnered with Comprinno to implement a comprehensive solution that spanned observability, operations, and financial management, and compliance. A dedicated Observability VPC was provisioned to host Prometheus and Grafana, which were deployed using AWS Fargate to ensure scalability and eliminate server management. These services were securely connected to the Workload VPC via VPC peering, enabling internal-only communication across all environments. ECS services were configured with sidecar containers running ecs-exporter to expose metrics on a standardized port. This enabled services to self-describe their metric endpoints, eliminating manual configuration. This structure was further strengthened by onboarding all accounts into Tevico.
To solve the ECS service discovery challenge, a dynamic sidecar container was introduced to query ECS APIs and generate the Prometheus ecs_file_sd.yml configuration automatically. This allowed Prometheus to detect new services in real time. Internal Application Load Balancers were used within private subnets to securely route internal traffic to Prometheus and Grafana, and IAM roles were scoped down to follow least privilege principles for discovery and metric collection. Hence, the data was sent to the old Grafana dashboard while centralizing the dashboards.
Operational management was significantly improved by developing standardized runbooks for tasks such as patching, IAM management, application lifecycle events, tagging enforcement, and change requests. These runbooks were integrated into a structured incident management workflow. Alerts generated by Grafana were routed through PagerDuty, which triggered notifications via Slack, email, and Exotel. Engineers responded to initial alerts by creating Jira tickets and investigating issues. All incidents concluded with Root Cause Analysis (RCA) documentation, promoting operational maturity and learning.
In parallel, the organization formalized its compliance and auditing framework. A Roles and Responsibilities matrix was defined to establish accountability across AWS, the partner, and internal teams. Using AWS Config and custom rules, continuous compliance monitoring was enabled for key AWS services. Tools like AWS Security Hub and Amazon Inspector were leveraged for vulnerability scanning and detection. Cleanroom environments and incident response playbooks were introduced for forensic analysis, ensuring swift and secure responses to any security breaches.
Cloud Financial Management practices were embedded across teams. A cost allocation model was implemented using tagging, AWS cost categories, and account-level filtering, which enabled showback and unit economics analysis. Shared services costs were tracked and distributed fairly. Integration with AWS Cost and Usage Reports (CUR) provided granular usage insights that powered dashboards and forecasting models. Historical trend analysis and linear regression techniques were used to generate predictive spend forecasts. Optimization mechanisms were also established, including EC2/RDS right-sizing recommendations, EBS volume lifecycle management, and idle resource cleanups. Purchase options such as Savings Plans and Reserved Instances were analyzed to reduce long-term costs. Budget alerts were configured to notify relevant teams via Slack and ITSM tools in case of overspending.
As part of cloud financial management, Tevico’s Detailed Cost Dashboard enabled the organization to track and optimize AWS costs effectively. By leveraging AWS Cost & Usage Reports, it provided clear visibility into cost trends, top spending areas, right-sizing opportunities, and savings plan recommendations across multiple accounts. This helped stakeholders make informed budgeting decisions and achieve better cost control.
It also includes features like resource right-sizing, savings plan recommendations, EC2 cost coverage, tag explorer, AWS budget integration, and cost distribution across major AWS service categories. These insights are available for both the primary organization account and its child accounts, with support for timeline-based filtering.
Tevico provides an Advanced Security Assessment tool that helped a technology-driven real estate investment company identify security vulnerabilities and ensure compliance across their AWS environments. Supporting 22 compliance standards, including SEBI, HIPAA, and GDPR, the tool presents a structured interface divided into sections like Account Summary, Finding Details, Compliance-Based Status, and Failed Findings by Service. Users can generate comprehensive reports in PDF or Excel formats and view categorized compliance findings with severity ratings, affected services, and suggested remediations. This enables a streamlined approach to maintaining security and regulatory compliance across cloud deployments.
Additionally, cost anomalies were automatically detected and flagged for review. Monthly variance analysis reports were introduced to compare forecasted vs. actual spend, and stakeholder training sessions were conducted to drive a culture of accountability and financial ownership within the engineering teams.
As illustrated in the architecture diagram below, workloads are distributed across multiple VPCs with a clearly defined separation between production and recovery environments. Key services such as Amazon EC2, RDS, EBS, Lambda, and S3 are integrated with AWS Backup, CloudWatch, and Route 53 to facilitate rapid detection, failover routing, and restoration during DR events. IAM policies enforce least privilege access during DR operations, and automated runbooks are executed via Lambda for tasks such as DNS updates, instance restart, and data integrity checks.
This architecture diagram strategy not only aligns with compliance requirements but also complements the overall observability and operations management setup by maintaining telemetry pipelines and metric collection during failover scenarios.
By integrating observability, operations management, compliance, and financial optimization into a unified architecture, the technology-driven real estate investment company significantly improved the efficiency, resilience, and cost-effectiveness of its AWS infrastructure. The scalable monitoring setup, combined with structured operational and compliance workflows, ensures the organization remains audit-ready, financially optimized, and operationally agile. As part of this initiative, Tevico was instrumental in reinforcing financial visibility and compliance management. This transformation has laid a strong foundation for continued growth, proactive performance management, and long-term scalability.
Comprinno Achieves AWS Data and Analytics Competency | Read More →
