Directorate of Technical Education - TN
Migrating Scalable LMS Application environment to AWS
Project Overview
The Directorate of Technical Education (DoTE), Tamil Nadu, oversees engineering and technical institutions across the state. Their legacy education application handles large-scale student records, examination data, institution management, and academic workflows. The existing infrastructure lacked scalability, performance, and high availability, especially during peak academic cycles.
DoTE partnered with us to modernize their application platform and migrate it to AWS to support over 200,000+ concurrent users, reduce operational overhead, and ensure robust security and compliance.
Project Objectives
Modernize the legacy education platform into a scalable, cloud-native architecture
Support large volumes of students, institutions, and examination data
Ensure high availability, performance, and operational efficiency
Strengthen security, governance, and monitoring using AWS native services
Reduce downtime and improve system reliability during academic workloads
Enable future-ready modernization using microservices and containerization
Solution Overview
The modernization involved designing a multi-account AWS Landing Zone, deploying the DOTE application on Amazon EKS, migrating databases to Amazon RDS MySQL and MongoDB Atlas, and implementing centralized monitoring and automated operational workflows.
AWS Migration Acceleration Program (MAP) Phases:
Assess
Mobilize
Migrate
Modernize
Architecture Overview
Detailed Components
AWS EKS
Application Cluster & Worker Nodes
Hosts the ERP & LMS application services using a managed Kubernetes cluster.
EC2 node groups provide scalable compute capacity across multiple Availability Zones.
Ensures high availability with auto-scaling, health checks, and rolling updates.
Secured using least-privilege Security Groups and IAM roles for service access.
Amazon RDS & MongoDB Atlas
Database Layer
RDS MS SQL stores core ERP transactional data, user records, workflows, and module configurations.
MongoDB Atlas manages NoSQL datasets, flexible ERP module data, and dynamic collections.
Multi-AZ RDS ensures high availability and automatic failover.
Automated backups, PITR, and encrypted storage enabled across both database engines.
Amazon S3
Document & Content Storage
Stores ERP documents, LMS content, logs, static files, and configuration backups.
Provides durable, long-term storage with lifecycle policies for cost optimization.
Used for log archiving and application artifact retention.
Application Load Balancer
Traffic Distribution & Health Management
Distributes user traffic across EKS application nodes.
Perform health checks for application pods and ensure seamless failover.
Integrated with WAF for enhanced security.
AWS WAF
Web Application Firewall
Protects the ERP portal from SQL injection, XSS, and common web exploits.
Integrated with ALB for frontend traffic filtering.
Route 53 & AWS Certificate Manager
DNS & SSL/TLS Management
Route 53 manages DNS routing for the ERP domain.
ACM issues and manages SSL/TLS certificates for secure HTTPS access.
Security
Access Control & Encryption
IAM roles ensure the least privileged access.
Data encryption at rest (S3/RDS) and in transit (SSL/TLS).
Robust authentication via API Gateway.
Monitoring & Logging
Observability & Auditing
Amazon CloudWatch: Provides real-time monitoring and alerts.
Amazon CloudTrail: Logs API calls for auditing and security.
S3 Logs: Stores access logs for analysis.