We were challenged by a health-tech startup to build a secure and scalable solution on AWS.

The combination of health-data and a startup meant that we had to build a solution with very strict data protection and isolation requirements, with a relatively short-time to market, while remaining economically efficient.

By using Amazon Cognito and AWS AppSync (both deployed with CDK), we leave most of the heavy lifting to AWS, in accordance with the shared responsibility model. Minimising the amount of custom code and relying on implicit security mechanisms provided by these services, we can move quickly and easily adapt to changes, all while staying compliant. AWS Amplify CLI and JS/UI components enable us to easily integrate a React SPA with Amazon Cognito and AWS AppSync services, all while following a schema-first approach.

In this session, we share and discuss the technical insights that went into designing and implementing such a solution. Expect code samples.