Infrastructure¶

Overview¶

This architecture provides a high-level view of how the Insurance Compliance Application will be deployed on Microsoft Azure. The system emphasizes security, scalability, and reliability while supporting document processing, storage, rule-based validation, and scheduled automation.

The application relies on managed Azure services such as Azure Kubernetes Service, Azure PostgreSQL Database, Azure Blob Storage, Azure Cache for Redis, Azure Front Door, and Azure Virtual Network.

Core Components¶

Azure Kubernetes Service (AKS)¶

AKS is the main compute environment where the application backend and frontend containers run. It provides:

Autoscaling node pools
Secure pod networking inside the VNet
Private access to data services
Zero-downtime rolling updates

Azure PostgreSQL Database¶

A fully managed relational database. Azure PostgreSQL offers automated backups, scaling, advanced threat detection, and supports secure VNet integration.

Azure Blob Storage¶

Blob Storage is used for:

Storing uploaded COIs, endorsements, and full policies
Keeping audit versions of documents
Storing extracted metadata or preprocessed documents
Serving static frontend content (if needed)

Blob Storage integrates securely with AKS via managed identities — ensuring no hard-coded secrets.

Azure Front Door or Azure CDN¶

For global delivery and low-latency content distribution:

Caches static assets near users
Adds an additional security layer (DDoS, bot filtering)
Speeds up dashboard loads for PMs and Admins

Deployment Environment¶

The entire application is deployed within an Azure Virtual Network (VNet) split into public and private subnets. High availability is achieved through replication across multiple Azure Availability Zones. Isolation ensures sensitive data and internal APIs never touch the public internet.

Environments¶

Environment	URL	Purpose	Deploy Trigger
Local	localhost:9990 (API), localhost:5173 (Web)	Development	Manual
Development	TBD	Integration testing	Push to development branch
Staging	TBD	Pre-production review	Push to staging branch
Production	TBD	Live	Tag release on main branch