OpsGuru Achieves AWS Energy & Utilities Competency Status. Read the announcement.⟶
OpsGuru Achieves AWS Energy & Utilities Competency Status. Read the announcement.⟶
OpsGuru Achieves AWS Energy & Utilities Competency Status. Read the announcement.⟶
OpsGuru Achieves AWS Energy & Utilities Competency Status. Read the announcement.⟶
Goal: Migrate approximately 100 virtual machines from a co-location facility to a secure, multi-account AWS Landing Zone aligned to ISO 27001 controls, enabling FPN to meet credit bureau partners' compliance requirements and position the company for long-term growth.
OpsGuru Services: Cloud Migration, Landing Zone Design, Application Re-Platforming, CI/CD Modernization, Managed Cloud Operations, Engineering on Demand
Tech Stack: AWS Organizations, AWS WAF, AWS Shield, AWS GuardDuty, AWS KMS, Amazon ECS on AWS Fargate, Amazon Aurora, Amazon ElastiCache for Redis, AWS Transfer Family, ClickHouse, HashiCorp Vault, GitHub Actions, OpenTofu, Amazon Aurora Global Database
100 Virtual Machines Migrated: Production workloads are fully operational in AWS with zero reliance on the physical data center.
RPO of 1–5 Minutes, RTO under 90 Minutes: Pilot Light DR delivers enterprise-grade recovery at an estimated $882.09/month.
ISO 27001 Alignment Maintained: Security controls meet the strict compliance requirements of Experian and Equifax.
On Time and On Budget: Completed slightly under the planned budget of $352,250.
Strategic Readiness: FPN's infrastructure successfully advanced capabilities for technical and compliance standards desired by potential investors and/or acquirers.
As a Credit Reporting Agency (CRA), the business is data-intensive and depends entirely on access to real-time financial records. Companies in this space don't just need reliable infrastructure. They need infrastructure that meets the strict compliance standards set by the credit bureaus and financial institutions that provide that data. For FPN Data, this dependency was both a competitive advantage and a long-term vulnerability.
FPN Data is a FinTech company operating a data exchange platform for pre-qualification, Lead Acquisition, and Portfolio Management. Its customers are financial institutions, and its products depend on real-time data feeds from major credit bureaus, including Experian and Equifax. These partnerships underpin FPN Data's product, and maintaining them requires demonstrating that FPN Data's infrastructure meets enterprise-grade security and compliance standards, specifically ISO 27001 controls covering data isolation, access management, encryption, and incident response.
At the start of 2026, FPN’s on-premises infrastructure was reaching its limits. FPN’s rapid growth was outpacing the scalability of its existing environment, and leadership needed a platform that could scale on demand, reduce infrastructure costs, and give the team better visibility into and management of potential security vulnerabilities.
Beyond the immediate operational need, FPN’s leadership had a strategic objective the infrastructure had to support: strengthening the company’s position with current and future investors and/or acquirers. Both would expect a modern, secure, cloud-native platform built on managed services, with documented compliance and disaster-recovery capabilities. That same foundation also gives FPN the confidence to launch new products or enter new markets when the opportunity is right. The gap between where FPN was and where it needed to be was significant, and the timeline for closing it was inflexible. FPN engaged OpsGuru to close it.
FPN's migration started with a clear objective but required navigating challenges that would define both the pace and the architecture of everything that followed.
Rapid Growth on a Fixed Timeline: FPN’s growth trajectory meant its infrastructure had to scale faster than a standard migration timeline typically allows. The migration had to succeed on a fixed schedule, with no option to extend the runway once work was underway.
100 Virtual Machines with Complex Dependencies: FPN's production environment spanned approximately 100 virtual machines running a mix of application workloads, self-managed databases, caching layers, and file transfer services. Each had its own configuration, dependencies, and data residency requirements. Migrating one workload without its dependencies in place would cause production failures, requiring a discovery and wave-planning process that accounted for every interdependency before the first cutover.
ISO 27001 Compliance Without Disrupting Bureau Partnerships: FPN's integrations with Experian and Equifax required continuous compliance with ISO 27001 controls. Any gap in FPN's security posture during or after the migration, including lapses in network isolation, access controls, or encryption, could jeopardize these partnerships. The new AWS environment had to meet these standards from day one, not as a post-migration remediation effort.
Building a Modern Disaster Recovery Capability: FPN’s existing continuity measures were not designed for the cloud-native environment the migration would create. A modern Disaster Recovery capability, with defined RPO and RTO targets, needed to be planned alongside the migration, not after it. Getting the right stakeholders aligned on DR scope early, and integrating FPN’s internal technical team into the planning process, was essential to a smooth handoff between migration and post-migration operations.
CI/CD Pipelines Tied to Self-Managed Infrastructure: FPN's deployment pipelines ran on self-managed GitLab runners. Moving workloads to AWS without modernizing these pipelines would have transferred the maintenance overhead to the cloud rather than eliminating it. Addressing CI/CD as part of the migration required additional planning but was essential to achieving the operational simplification FPN needed.
OpsGuru structured the engagement around its OpsGuru Delivery Blueprint (ODB), a SCRUM-based Agile framework that let the team course-correct quickly as unknowns emerged during discovery. The engagement opened with a comprehensive assessment of FPN's existing workloads, mapping dependencies across all 100 virtual machines and organizing them into migration waves sequenced to preserve production stability. Simultaneously, OpsGuru designed the AWS Landing Zone architecture: a six-account structure with centralized logging, least-privilege IAM controls, and a multi-layered security posture aligned to ISO 27001. OpsGuru provisioned the entire foundation using OpenTofu, ensuring every infrastructure decision was codified and auditable from day one.
With the foundation in place and migration waves validated, OpsGuru executed the engagement's core workloads across four parallel streams.
Secure AWS Landing Zone: OpsGuru deployed a six-account AWS environment using Terraform, implementing centralized logging with AWS CloudTrail; network isolation with VPCs and security groups; AWS GuardDuty for continuous threat detection; AWS WAF and AWS Shield for application and DDoS protection; and AWS KMS for encryption at rest and in transit. The Landing Zone enforces least-privilege access across all accounts, making unauthorized access structurally difficult rather than policy-dependent. This architecture directly addresses the ISO 27001 controls required by FPN's credit bureau partnerships.
Workload Re-Platforming to Amazon ECS on AWS Fargate: Application workloads running on VMware virtual machines were re-platformed to Amazon ECS on AWS Fargate, eliminating the EC2 instance management overhead that came with self-managed servers. Fargate containers scale automatically, require no operating system patching, and integrate directly with the Landing Zone's IAM-controlled security model. FPN's engineering team no longer needs to manage server fleets to run containerized workloads.
Managed Database and Cache Adoption: FPN's self-hosted Percona MySQL clusters were replaced with Amazon Aurora, and self-managed Redis clusters were replaced with Amazon ElastiCache for Redis. Both services handle automated patching, backups, and scaling, removing the database administration burden from FPN's team. Aurora's replication architecture also serves as the foundation for the Disaster Recovery design.
CI/CD Modernization from GitLab to GitHub Actions: FPN's deployment pipelines were migrated from self-managed GitLab runners to GitHub Actions, eliminating the infrastructure required to operate GitLab and significantly improving pipeline execution times. The new pipelines deploy directly to the AWS environment using OIDC-based authentication, removing the long-lived access keys that had been a security concern in the legacy setup.
Pilot Light Disaster Recovery Architecture: The standout deliverable of the engagement is FPN’s Pilot Light DR architecture. Amazon Aurora Global Database replicates production data continuously to a secondary AWS region, maintaining a Recovery Point Objective (RPO) of one to five minutes: in the event of a primary region failure, no more than five minutes of transactions would be at risk. The secondary region operates in a downscaled state during normal operations to minimize costs, with the capability to scale to full production capacity within 90 minutes. This Recovery Time Objective (RTO) of under 90 minutes gives FPN a documented DR posture it can demonstrate to credit bureau partners and potential investors and/or acquirers. Total estimated monthly cost: $882.09.
OpsGuru executed migration cutovers in two waves, moving staging workloads first to validate the environment before committing production traffic. Following successful production cutover, the team conducted formal knowledge transfer sessions covering the OpenTofu infrastructure codebase, GitHub Actions pipeline configuration, and AWS operational tooling. FPN was transitioned into a combined Engineering on Demand (EoD) and Managed Cloud Operations (MCO) engagement, providing continued access to OpsGuru expertise for post-migration optimization while building FPN's internal cloud capabilities.
"The communication and financial transparency were exceptional, but what really stood out was the outcome. One hundred virtual machines migrated, a fully compliant AWS foundation, and rock-solid disaster recovery capabilities, all delivered on time and under budget. OpsGuru is the kind of partner you want for work that actually matters." — Tyler Sawyer, President & Chief Strategy Officer, FPN Data.
The FPN engagement delivered outcomes on three fronts: operational stability in the new environment, a documented security and compliance posture, and a strategic foundation that positions the company for its next phase of growth.
100 Virtual Machines Fully Operational in AWS: All production workloads from the co-location facility have been successfully migrated and are operating in the AWS environment with functional parity. FPN has zero remaining reliance on the legacy physical data center, along with its associated maintenance costs and operational overhead.
Pilot Light DR with RPO of 1–5 Minutes and RTO under 90 Minutes: FPN now has a documented, deployed disaster recovery posture built for the cloud. Amazon Aurora Global Database replicates transactions continuously to the secondary region, capping data loss exposure at one to five minutes. The secondary region can be brought to full production scale in under 90 minutes, a modern capability that strengthens FPN’s prior continuity measures. This is deployed infrastructure, at an estimated monthly cost of $882.09, that FPN can demonstrate to partners and potential investors and/or acquirers as evidence of operational resilience.
ISO 27001 Alignment Across the Entire Platform: The six-account Landing Zone architecture enforces the controls required by credit bureau partnerships: network isolation, least-privilege IAM, encryption at rest and in transit using AWS KMS, centralized audit logging via AWS CloudTrail, and continuous threat detection with AWS GuardDuty. The architecture makes compliance structural rather than procedural.
Accelerated CI/CD Execution: Moving from self-managed GitLab runners to GitHub Actions significantly reduced pipeline execution times. Deployment tests now run in GitHub's hosted runner environment, with OIDC-based AWS authentication replacing long-lived access keys. FPN's engineering team deploys faster and with fewer infrastructure dependencies to maintain.
Delivered On Time, On Budget: The engagement completed slightly under the planned budget of $352,250, with OpsGuru's financial process described by FPN's President and Chief Strategy Officer as clear, transparent, and predictable. This level of financial precision on a complex, 100-VM migration over four months is a direct result of OpsGuru's structured wave-planning and budget-tracking methodology.
Readiness Achieved: FPN's stated objective when entering the engagement was to strengthen the company's operational and technical foundation for long-term growth. The migration provides the foundation that objective requires: a documented, ISO 27001-aligned security posture; a modern cloud-native architecture running on managed Amazon Web Services; a Disaster Recovery capability with quantified RPO and RTO; and infrastructure-as-code that supports ongoing scalability and operational resilience.
Reduced Operational Overhead Through Managed Services: By replacing self-hosted Percona MySQL with Amazon Aurora and self-managed Redis with Amazon ElastiCache, FPN eliminated the database administration burden that had previously consumed engineering time. Automated patching, backups, and scaling are now handled by AWS, freeing FPN's team to focus on product development rather than infrastructure maintenance.
A Post-Migration Roadmap for Continuous Improvement: The transition into Engineering on Demand and Managed Cloud Operations gives FPN a structured path for ongoing work: Pilot Light DR failover testing, cost optimization through AWS Savings Plans and rightsizing, Vault modernization to AWS Secrets Manager, and event-driven job architecture. OpsGuru remains FPN's strategic partner for this next phase, operating as an embedded extension of the team.
