Vitayou – Case Study
Vitayou is a Turkey-based healthcare company building a digital healthcare platform designed to deliver healthcare experiences securely and at scale. As a company new to AWS, Vitayou engaged Onkatec to establish a secure and automated cloud foundation for its platform from the outset.
Customer Challenge
As a greenfield build, every decision set a precedent. Networking, identity, encryption, and delivery tooling all had to be production-grade from day one, with no existing AWS footprint to build on.
The healthcare domain added a second layer of requirements. Data privacy, availability, and auditability are commercially and regulatorily critical, so the platform needed encryption at rest and in transit, least-privilege access, and environment isolation from the start.
Finally, the platform spans multiple independently deployed services — backend, frontend, Directus, and the API — each of which needed a fast, automated, and repeatable release path across development and production.
Partner Solution
Onkatec delivered a complete cloud-native platform defined in Terraform and operated across a three-account AWS Organizations structure in eu-central-1. Amazon EKS runs the platform on Kubernetes 1.35, with separate production and development clusters using private endpoints and Graviton worker nodes — On-Demand in production and Spot in development for cost optimization.
Delivery is automated through Jenkins, with environment-specific pipelines and branch separation between development and production. A private HTTPS Application Load Balancer handles GitHub webhook triggers, so a push or merge to a target branch automatically starts the build and deployment for the right environment. Each job is mapped to its branch, AWS account, ECR registry, and EKS cluster.
The data layer uses Amazon RDS for both PostgreSQL and MariaDB — PostgreSQL for Directus and other services, MariaDB for the backend — with encryption and automated daily snapshots. Amazon ElastiCache for Valkey provides managed caching with encryption at rest and in transit. AWS Secrets Manager centralizes application environment variables and sensitive data, automatically synchronizing them into the EKS environment so no long-lived static credentials are needed.
Security and governance run through IAM Identity Center for SSO, AWS KMS for managed encryption keys, and IRSA for pod-level permissions. Separate management, production, and development VPCs span three Availability Zones, connected by VPC peering, with AWS Client VPN providing secure administrative access. Cost is governed through AWS Budgets, Cost Explorer anomaly detection, and Spot capacity in development.
Results and Benefits
Starting from a greenfield initiative with no cloud estate, Vitayou now runs a production-grade healthcare platform on AWS: a three-account topology (management, production, development) with two Amazon EKS clusters on Kubernetes 1.35, four encrypted RDS instances, three ElastiCache Valkey groups, and seven production container repositories, all defined in Terraform under a single delivery model, with budgets and anomaly detection keeping cost under control.
Jenkins pipelines removed manual deployment steps, and build optimization reduced build time for selected applications from about 10 minutes to about 3 minutes, a 70% reduction against the 5-minute target, as measured by comparing CI/CD pipeline logs before and after the changes.
Migrating to appropriately sized Graviton-based compute and tuning workload resources, including PHP-FPM worker capacity and Directus CPU limits, brought API response times down from 2–3 seconds to sub-second, millisecond-level responses, confirmed by measuring representative requests before and after the changes and through performance testing.
Security is enterprise-grade from day one, with IAM Identity Center SSO, KMS-managed keys, Secrets Manager, encryption at rest and in transit, and three-account isolation with Client VPN access.
About the Partner
Onkatec specializes in Cloud DevOps and infrastructure optimization, delivering SLA-driven solutions on AWS for organizations with mission-critical workloads. With proven AWS expertise and a team of certified professionals, Onkatec offers comprehensive services across cloud migration, infrastructure as code (IaC), CI/CD pipelines, observability, and cloud-native development.
Our AWS-validated capabilities ensure secure, scalable, and high-performing cloud environments tailored to customer needs. Through expert-led automation, proactive support, and architectural best practices, we help organizations reduce cloud complexity and accelerate digital transformation. Onkatec has consistently delivered measurable business outcomes, such as 30–50% reductions in IT operational costs, improved uptime, and faster time-to-market.
