To give back to the local communities, each Sainsbury’s store announces a shortlist of local charities it could support for the next 12 months. Support includes awareness-raising, in-store fundraising, volunteering and donations. Customers can then vote online using this site for the charity they wish for their local store to partner with. The results of each store are announced on the site once voting closes.
Key Points:

• Lead Devops Engineer on the project
• Architected and implemented the whole platform for all environments with a comprehensive infrastructure-as-code approach using Ansible, Cloudformation and Vagrant
• Security remained a primary focus.
  • Platform security was tested and passed by an independant Penetration Testing company
  • All data transferred between the client’s browser and application servers was encrypted using a CA-signed, SHA-256 with RSA Encryption, SSL certificate
  • All environments contained within separate private VPC’s
  • Data-sensitive nodes like PostgreSQL RDS, Redis cache and webservers were contained within private subnets
  • Database instances and snapshots were encrypted at rest
  • Non-production environment domains were IP restricted
  • AWS console login enforced 2-factor authentication
• Scalable and robust performance was sustained at peak times by putting the EC2 instances behind an ELB and using auto scaling groups. A performance-tuned Nginx web server was also used to proxy requests to the NodeJS webserver.
• Full platform and application monitoring was implemented using AWS Cloudwatch and an ELK stack

Technologies Used

	AWS EC2		AWS ELB		GOCD
	AWS AMI		AWS Cloudformation		Ansible
	AWS Cloudwatch		AWS SES		Vagrant
	AWS R53		AWS ASG		NodeJS
	AWS RDS (PostgreSQL)		AWS S3
	AWS Elasticache (Redis)		ELK Stack