--- title: How we designed a highly scalable and secure solution for Diebold Nixdorf description: Diebold Nixdorf offers banking and retail solutions to their customers worldwide. Let us show you how we designed their new solution. image: https://www.cloudnation.nl/hubfs/CloudNation-beeld-5.jpg --- Nederlands [ English](https://www.cloudnation.nl/en/inspiration/blogs/diebold-nixdorf) an IG&H company [![_CN_Monogram_Color_White_rgb](https://www.cloudnation.nl/hubfs/_CN_Monogram_Color_White_rgb.png "Back to home") ![preview__CN_Logo_Left_Color_Black_rgb](https://www.cloudnation.nl/hubfs/preview__CN_Logo_Left_Color_Black_rgb.png "Back to home") ](https://www.cloudnation.nl) Diensten Migreer [ Cloudmigratie Efficiënt en zorgeloos naar de cloud. ](https://www.cloudnation.nl/diensten/cloud-migratie) [ Cloud Readiness Assessment Voordat je migreert naar de cloud. ](https://www.cloudnation.nl/diensten/cloud-readiness-assessment) [ Cloud Landing Zone Accelerator Het ideale startpunt voor elke cloudreis. ](https://www.cloudnation.nl/diensten/cloud-landing-zone-accelerator) [ Advies & strategie Benut de knowhow van onze beste experts ](https://www.cloudnation.nl/diensten/strategie) Verbeter & moderniseer [ Applicatiemodernisatie Moderniseer, versimpel en transformeer apps. ](https://www.cloudnation.nl/diensten/applicatiemodernisatie) [ Cloud Security & Compliance Security & compliancy voor goede nachtrust. ](https://www.cloudnation.nl/diensten/cloud-security) [ Cloud Competence Center Verminder frictie & accelereer development ](https://www.cloudnation.nl/cloud-center-of-excellence-cloudnation) Integreer [ Hybrid cloud Combineer het beste van private en public. ](https://www.cloudnation.nl/diensten/hybrid-cloud) [ Netwerk & connectivity Benut de cloud optimaal en creëer waarde. ](https://www.cloudnation.nl/diensten/networking-connectivity) [ Managed Cloud Services Breng rust met mission-critical beheer ](https://www.cloudnation.nl/diensten/managed-cloud-services) Data & AI [ AI oplossingen Benut van de kracht van artificial intelligence ](https://www.cloudnation.nl/ai-artificial-intelligence) [ Data Landing Zone Een veilige en schaalbare fundering voor je data operaties ](https://www.cloudnation.nl/diensten/data-landing-zone) [![aws-grey](https://www.cloudnation.nl/hubfs/aws-grey.svg) ](https://www.cloudnation.nl/partners/amazon-web-services) [![azure-grey](https://www.cloudnation.nl/hubfs/azure-grey.svg) ](https://www.cloudnation.nl/partners/microsoft) [![google-cloud-grey](https://www.cloudnation.nl/hubfs/google-cloud-grey.svg) ](###) [![oracle-ci-grey](https://www.cloudnation.nl/hubfs/oracle-ci-grey.svg) ](https://www.cloudnation.nl/partners) [ Diensten overzicht ](https://www.cloudnation.nl/diensten) [ Succesverhalen ](https://www.cloudnation.nl/succesverhalen) Branches Onze **cloud-native specialisten** hebben diepgaande **knowhow** en relavantie **ervaring** opgedaan in allerlei branches. [ Branches overzicht ](https://www.cloudnation.nl/branches/) [ Fintech Realiseer Fintech innovaties versneld met hoogstaande security. ](https://www.cloudnation.nl/branches/finance-fintech) [ ISV Blijf toekomstbestendig en transformeer je applicaties door de cloud optimaal te benutten. ](https://www.cloudnation.nl/branches/isv) [ Productie-industrie Verbeter de operationele efficiëntie, veiligheid en schaalbaarheid van je productie- en fabricageprocessen. ](https://www.cloudnation.nl/branches/productie-industrie) [ Digital Natives Versnel je groei en innovatie met onze *knowhow*, specifiek afgestemd op digitale voorlopers. ](https://www.cloudnation.nl/branches/digital-natives) [ Inspiratie ](https://www.cloudnation.nl/inspiratie) Over ons [ Over CloudNation ](https://www.cloudnation.nl/over-ons) [ Werken bij ](https://www.cloudnation.nl/werken-bij) [ Onze partners ](https://www.cloudnation.nl/partners) [ CloudNation Academy ](https://www.cloudnation.nl/cloud-academy) [ Contact ](https://www.cloudnation.nl/contact) [Plan een call ](https://www.cloudnation.nl/afspraak-maken) [![_CN_Monogram_Color_White_rgb](https://www.cloudnation.nl/hubfs/_CN_Monogram_Color_White_rgb.png "Back to home") ![preview__CN_Logo_Left_Color_Black_rgb](https://www.cloudnation.nl/hubfs/preview__CN_Logo_Left_Color_Black_rgb.png "Back to home") ](https://www.cloudnation.nl) Diensten Migreer [ Cloudmigratie Efficiënt en zorgeloos naar de cloud. ](https://www.cloudnation.nl/diensten/cloud-migratie) [ Cloud Readiness Assessment Voordat je migreert naar de cloud. ](https://www.cloudnation.nl/diensten/cloud-readiness-assessment) [ Cloud Landing Zone Accelerator Het ideale startpunt voor elke cloudreis. ](https://www.cloudnation.nl/diensten/cloud-landing-zone-accelerator) [ Advies & strategie Benut de knowhow van onze beste experts ](https://www.cloudnation.nl/diensten/strategie) Verbeter & moderniseer [ Applicatiemodernisatie Moderniseer, versimpel en transformeer apps. ](https://www.cloudnation.nl/diensten/applicatiemodernisatie) [ Cloud Security & Compliance Security & compliancy voor goede nachtrust. ](https://www.cloudnation.nl/diensten/cloud-security) [ Cloud Competence Center Verminder frictie & accelereer development ](https://www.cloudnation.nl/cloud-center-of-excellence-cloudnation) Integreer [ Hybrid cloud Combineer het beste van private en public. ](https://www.cloudnation.nl/diensten/hybrid-cloud) [ Netwerk & connectivity Benut de cloud optimaal en creëer waarde. ](https://www.cloudnation.nl/diensten/networking-connectivity) [ Managed Cloud Services Breng rust met mission-critical beheer ](https://www.cloudnation.nl/diensten/managed-cloud-services) Data & AI [ AI oplossingen Benut van de kracht van artificial intelligence ](https://www.cloudnation.nl/ai-artificial-intelligence) [ Data Landing Zone Een veilige en schaalbare fundering voor je data operaties ](https://www.cloudnation.nl/diensten/data-landing-zone) [![aws-grey](https://www.cloudnation.nl/hubfs/aws-grey.svg) ](https://www.cloudnation.nl/partners/amazon-web-services) [![azure-grey](https://www.cloudnation.nl/hubfs/azure-grey.svg) ](https://www.cloudnation.nl/partners/microsoft) [![google-cloud-grey](https://www.cloudnation.nl/hubfs/google-cloud-grey.svg) ](###) [![oracle-ci-grey](https://www.cloudnation.nl/hubfs/oracle-ci-grey.svg) ](https://www.cloudnation.nl/partners) [ Diensten overzicht ](https://www.cloudnation.nl/diensten) [ Succesverhalen ](https://www.cloudnation.nl/succesverhalen) Branches Onze **cloud-native specialisten** hebben diepgaande **knowhow** en relavantie **ervaring** opgedaan in allerlei branches. [ Branches overzicht ](https://www.cloudnation.nl/branches/) [ Fintech Realiseer Fintech innovaties versneld met hoogstaande security. ](https://www.cloudnation.nl/branches/finance-fintech) [ ISV Blijf toekomstbestendig en transformeer je applicaties door de cloud optimaal te benutten. ](https://www.cloudnation.nl/branches/isv) [ Productie-industrie Verbeter de operationele efficiëntie, veiligheid en schaalbaarheid van je productie- en fabricageprocessen. ](https://www.cloudnation.nl/branches/productie-industrie) [ Digital Natives Versnel je groei en innovatie met onze *knowhow*, specifiek afgestemd op digitale voorlopers. ](https://www.cloudnation.nl/branches/digital-natives) [ Inspiratie ](https://www.cloudnation.nl/inspiratie) Over ons [ Over CloudNation ](https://www.cloudnation.nl/over-ons) [ Werken bij ](https://www.cloudnation.nl/werken-bij) [ Onze partners ](https://www.cloudnation.nl/partners) [ CloudNation Academy ](https://www.cloudnation.nl/cloud-academy) [ Contact ](https://www.cloudnation.nl/contact) [Plan een call ](https://www.cloudnation.nl/afspraak-maken) [![_CN_Monogram_Color_White_rgb](https://www.cloudnation.nl/hubfs/_CN_Monogram_Color_White_rgb.png "Back to home") ![preview__CN_Logo_Left_Color_Black_rgb](https://www.cloudnation.nl/hubfs/preview__CN_Logo_Left_Color_Black_rgb.png "Back to home") ](https://www.cloudnation.nl) [ Let's talk ](https://www.cloudnation.nl/afspraak-maken) Menu [![_CN_Monogram_Color_White_rgb](https://www.cloudnation.nl/hubfs/_CN_Monogram_Color_White_rgb.png "Back to home") ![preview__CN_Logo_Left_Color_Black_rgb](https://www.cloudnation.nl/hubfs/preview__CN_Logo_Left_Color_Black_rgb.png "Back to home") ](https://www.cloudnation.nl) [ Let's talk ](https://www.cloudnation.nl/afspraak-maken) Menu Diensten Migreer [ Cloudmigratie ](https://www.cloudnation.nl/diensten/cloud-migratie) [ Cloud Readiness Assessment ](https://www.cloudnation.nl/diensten/cloud-readiness-assessment) [ Cloud Landing Zone Accelerator ](https://www.cloudnation.nl/diensten/cloud-landing-zone-accelerator) [ Advies & strategie ](https://www.cloudnation.nl/diensten/strategie) Verbeter & moderniseer [ Applicatiemodernisatie ](https://www.cloudnation.nl/diensten/applicatiemodernisatie) [ Cloud Security & Compliance ](https://www.cloudnation.nl/diensten/cloud-security) [ Cloud Competence Center ](https://www.cloudnation.nl/cloud-center-of-excellence-cloudnation) Integreer [ Hybrid cloud ](https://www.cloudnation.nl/diensten/hybrid-cloud) [ Netwerk & connectivity ](https://www.cloudnation.nl/diensten/networking-connectivity) [ Managed Cloud Services ](https://www.cloudnation.nl/diensten/managed-cloud-services) Data & AI [ AI oplossingen ](https://www.cloudnation.nl/ai-artificial-intelligence) [ Data Landing Zone ](https://www.cloudnation.nl/diensten/data-landing-zone) [Diensten overzicht ](https://www.cloudnation.nl/diensten) [ Succesverhalen ](https://www.cloudnation.nl/succesverhalen) Branches [ Fintech ](https://www.cloudnation.nl/branches/finance-fintech) [ ISV ](https://www.cloudnation.nl/branches/isv) [ Productie-industrie ](https://www.cloudnation.nl/branches/productie-industrie) [ Digital Natives ](https://www.cloudnation.nl/branches/digital-natives) [Branches overzicht ](https://www.cloudnation.nl/branches/) [ Inspiratie ](https://www.cloudnation.nl/inspiratie) Over ons [ Over CloudNation ](https://www.cloudnation.nl/over-ons) [ Werken bij ](https://www.cloudnation.nl/werken-bij) [ Onze partners ](https://www.cloudnation.nl/partners) [ CloudNation Academy ](https://www.cloudnation.nl/cloud-academy) [ Contact ](https://www.cloudnation.nl/contact) [Let's talk ](https://www.cloudnation.nl/afspraak-maken) Nederlands [ English](https://www.cloudnation.nl/en/inspiration/blogs/diebold-nixdorf) [Terug ](https://www.cloudnation.nl/inspiratie/blogs/) [Cloud Security](https://www.cloudnation.nl/inspiratie/blogs/tag/cloud-security) # How we designed a highly scalable and secure solution for Diebold Nixdorf ![](https://www.cloudnation.nl/hubfs/CloudNation%20logo%20in%20zwarte%20cirkel.png) **CloudNation** Enable. Empower. Deliver. Publicatiedatum: 20 juli 2022 ![](https://www.cloudnation.nl/hs-fs/hubfs/CloudNation-beeld-5.jpg?width=1600) [mailto:info@example.com?&subject=&body=https://www.cloudnation.nl/inspiratie/blogs/diebold-nixdorf](mailto:info@example.com?&subject=&body=https://www.cloudnation.nl/inspiratie/blogs/diebold-nixdorf) ### The Customer Diebold Nixdorf offers banking and retail solutions to their customers worldwide and it’s essential for their offerings to be secure and flexible in nature. Their products range from ATM machines to self-service kiosk solutions (such as the ones you see in supermarkets) which means there’s no room for error when it comes to uptime and processing speed. ### The Challenge The team at Diebold Nixdorf Dieren came to us with the request to design a highly scalable and secure solution for their retail solutions on AWS. Their application was previously hosted on Virtual Machines in a private hosting solution. It should be migrated and modernized, simplified where possible, but also adhere to modern security standards such as vulnerability scanning on workloads *and* make sure that any load is handled within the agreed SLA processing times. ### The Tech The first focus would be to containerize the application. To be able to predictably build containers and have them available on AWS (or Azure for that matter), we decided to use Harbor to build containers from the customer’s code repository in Azure DevOps, and push containers to an AWS ECR repository in the Diebold Nixdorf “Shared” Account. *Choosing Harbor to manage and push artifacts enables Diebold Nixdorf to remain cloud-agnostic with their container pipelines. The team can now deploy to different platforms in similar manners, which is perfect, given that Diebold Nixdorf hosts applications on both AWS and Azure.* Other accounts that need a specific container were then granted access to the relevant container repository to ensure we deploy the exact same container to TST first, and only then to Staging and Production based on tags. Pushing a new container image triggers an AWS CloudWatch Event to automatically deploy the container to AWS ECS in the respective account / environment, according to the tags attached.              AWS ECS was configured to use a range of families and types of EC2 spot instances as hosts, with CloudWatch alerting set to scale up and down automatically based on SQS Queue depth (yes, the application was decoupled! This made everyone’s life so much easier). All in all, the solution is robust while keeping costs limited, saves time in the day-to-day workload, and adheres to customer SLA’s, all while keeping track of the security of the environment and applications. ### Security First Security posture was something to always keep in the front of our minds when designing or implementing. The team at Diebold Nixdorf needs to be able to keep track of any vulnerabilities within their containers and / or AWS Landing Zone and be notified as soon as something is off. To make sure they adhere (now and in the future) to AWS and CIS best practices, we enabled AWS Security Hub and onboarded the accounts in the Organization. For vulnerability management and threat detection, Orca Security was chosen and integrated into the AWS Landing Zone. Both were then configured to notify the team at Diebold Nixdorf for any threats found by means of PagerDuty, since PagerDuty allows for multi-team configurations, each with their own timeslot configuration. Result is that the team does not have to worry about management for incident response, as the team responsible will automatically be informed during their respective timeslots. After all said and done, Diebold Nixdorf has migrated to AWS with relative ease and experiences increased time to allocate to development and less time looking after their resources. Meanwhile, they also have a great, much improved security posture all-round, along with improved response times to incidents. Diebold Nixdorf and AWS are a great match and will be for years to come. ### The AWS Services and tooling used in the Diebold Nixdorf AWS environment: - AWS ECS - AWS KMS - AWS ALB - AWS ECR - AWS IOT - AWS SSM - AWS Config - AWS Security Hub - AWS SSO - AWS Secrets Manager - AWS CodePipeline - AWS CodeCommit - AWS EC2 - AWS Transit Gateway - AWS VPC Peering - AWS Customer Gateway - AWS Lambda - AWS ACM - AWS Route53 - AWS S3 - AWS RDS - Orca Security - Harbor ### CloudNation CloudNation brings public cloud knowledge, skill and experience to companies in order to accelerate IT transformations. We enable, empower and deliver successful cloud solutions, while focusing on people and process. We support organizations of all sizes with Cloud Native Consulting and Engineering to accelerate their journey in the Cloud. CloudNation is an AWS Advanced Tier Consulting Partner and is an AWS Program Partner for 7 different programs, among which the AWS Well-Architected Partner Program and the AWS Solution Provider Program. For more information on CloudNations partner highlights, see [https://partners.amazonaws.com/partners/0010L00001tByAoQAK/CloudNation](https://partners.amazonaws.com/partners/0010L00001tByAoQAK/CloudNation)  #### Meer weten? Neem contact op met Bart. We delen graag kennis en koffie. [Let's talk ](https://www.cloudnation.nl/contact) ![CloudNation, Contact met Bart](https://7979774.fs1.hubspotusercontent-na1.net/hubfs/7979774/CloudNation%2c%20Contact%20met%20Bart.jpg) [mailto:info@example.com?&subject=&body=https://www.cloudnation.nl/inspiratie/blogs/diebold-nixdorf](mailto:info@example.com?&subject=&body=https://www.cloudnation.nl/inspiratie/blogs/diebold-nixdorf) ![](https://www.cloudnation.nl/hubfs/CloudNation%20logo%20in%20zwarte%20cirkel.png) **CloudNation** Enable. Empower. Deliver. Publicatiedatum: 20 juli 2022 ## Meer kennis, updates en howto's over de cloud [![](https://7979774.fs1.hubspotusercontent-na1.net/hubfs/7979774/shutterstock_2300231543.png) Cloud Security ## Van reactief naar proactief: de toekomst van cybersecurity in cloudomgevingen Lees verder ](https://www.cloudnation.nl/inspiratie/blogs/van-reactief-naar-proactief-de-toekomst-van-cybersecurity-in-cloudomgevingen) [![](https://7979774.fs1.hubspotusercontent-na1.net/hubfs/7979774/CloudNation-beeld-34-1.jpeg) Azure Cloud Security ## Compliance & beveiliging: blijf voorop lopen in een gereguleerde wereld met Azure Lees verder ](https://www.cloudnation.nl/inspiratie/blogs/compliance-beveiliging-blijf-voorop-lopen-in-een-gereguleerde-wereld-met-azure) [![](https://7979774.fs1.hubspotusercontent-na1.net/hubfs/7979774/Kopie%20van%20Brown%20Gradient%20Minimalistic%20Training%20Microsoft%20Teams%20Background.png) Cloud Security ## Versterken van Cloudbeveiliging: Begrijpen Wat Veilig Is Lees verder ](https://www.cloudnation.nl/inspiratie/blogs/versterken-van-cloudbeveiliging-begrijpen-wat-veilig-is) Volg ons op social: ##### Contact Kosterijland 10 3981 AJ Bunnik [![blue-chat-icon](https://www.cloudnation.nl/hubfs/Development%20assets/blue-chat-icon.svg)   Chat met ons ](https://www.cloudnation.nl/inspiratie/blogs/diebold-nixdorf#hs-chat-open) [![blue-phone-call](https://www.cloudnation.nl/hubfs/Development%20assets/blue-phone-call.svg)   +31 (0)6 48 016 896 ](tel:0031648016896) [![blue-mail](https://www.cloudnation.nl/hubfs/Development%20assets/blue-mail.svg)   info@cloudnation.nl ](mailto:info@cloudnation.nl) ![iso 27001](https://www.cloudnation.nl/hubfs/iso%2027001.svg)  ![gdpr compliant](https://www.cloudnation.nl/hubfs/gdpr%20compliant.svg)   ![iso 27001](https://www.cloudnation.nl/hubfs/iso%2027001.svg)  ![gdpr compliant](https://www.cloudnation.nl/hubfs/gdpr%20compliant.svg)   ##### Bedrijf [ Over CloudNation ](https://www.cloudnation.nl/over-ons) [ Werken bij ](https://www.cloudnation.nl/werken-bij) [ CloudNation Academy ](https://www.cloudnation.nl/cloud-academy) [ Contact ](https://www.cloudnation.nl/contact) ##### Partners [ Alle partners ](https://www.cloudnation.nl/partners) [ AWS ](https://www.cloudnation.nl/partners#aws-partner) [ Azure ](https://www.cloudnation.nl/partners#microsoft-azure-partner) [ En heel veel meer... ](https://www.cloudnation.nl/partners) ##### Kennis, howto's en inzichten van CloudNation direct in je mailbox