- We unified back-office flows for credit origination, payments, and portfolio management.
- Serverless API foundation with secure identity flows and notification pipelines.
- Infrastructure and repeatable deployments with CloudFormation and CI/CD in GitLab.
Scope note: I owned the web platform, the APIs, and the infrastructure. The mobile client was delivered by a separate team.
Architecture overview
A high-level view of Woko's request flow, the serverless services, the identity layer, and operational telemetry.
- Request path: Route 53 routes customer traffic through API Gateway to Lambda services.
- Service layer: domain functions manage user identity, credit lifecycle, and payment operations.
- Controls: Cognito, SNS notifications, and CloudWatch logs support security and traceability.
SRE approach
- Edge: Route 53 + API Gateway for managed ingress and routing.
- Services: Lambda-based domains for user flows, credit, and payments.
- Data: DynamoDB tables tuned for customer access and credit requests.
- Identity: Cognito user pools and token validation in APIs.
- Access: IAM roles scoped per Lambda service.
- Auditability: CloudWatch logs and notification traces for operations.
- IaC: CloudFormation templates for API and service stacks.
- CI/CD: GitLab pipelines for build, test, and deploy.
- Ops: Repeatable environment setup and automated releases.
Results
AMKA now provides a reliable, secure operational backbone for credit flows, keeping deployments lightweight and operations lean.
A unified back-office platform that enables daily credit operations and portfolio oversight.
Modular Lambda services backed by DynamoDB and IaC-driven deployments.
Project URL
Public marketing site for Woko.
Lessons learned
Owning the full-stack platform reinforced the value of clear domain boundaries, serverless scale, and repeatable infrastructure. Designing the admin experience, APIs, and operations together helped the team ship faster and with higher reliability.