Case studies · PrimaSolv
PrimaSolv removed a single point of failure and automated patching and file transfer on AWS
PrimaSolv's vehicle diagnostics and connected-vehicle platform moved from legacy on-premises servers to a multi-AZ AWS design with automated patching.
- Client
PrimaSolv- Industry
- Automotive technology
- Location
- Wixom, Michigan, United States
- Engagement
- Managed services
What Cypik delivered
- Migrated the application to a multi-AZ design in an Amazon VPC
- Deployed Citrix Virtual Apps on AWS, with session hosts provisioned through Machine Creation Services
- Automated patching with AWS Systems Manager Patch Manager
- Replaced the legacy SFTP server with AWS Transfer Family on Amazon S3
- Centralized monitoring, security and audit logging, and Site-to-Site VPN connectivity
Results in brief
- Single point of failure removed by running across two Availability Zones
- Peak data-processing demand handled with MCS-provisioned session hosts
- Patching automated, which cuts manual maintenance and security exposure
- Legacy SFTP replaced with a managed, S3-integrated transfer service
The client
About PrimaSolv
PrimaSolv is an automotive technology company specializing in software engineering for connected vehicles and vehicle diagnostics. It brings together more than two decades of automotive experience with cloud engineering, artificial intelligence and generative AI to develop and operate solutions that help organizations improve vehicle quality, identify issues earlier and reduce warranty and maintenance costs.
Its services include connected vehicle engineering, telematics, cloud and data platforms, predictive analytics, automotive cybersecurity, offshore development and operations, platform modernization and ongoing maintenance. PrimaSolv serves automotive manufacturers, Tier-1 suppliers, electric vehicle manufacturers and fleet operators.
Challenge
Legacy infrastructure with a single point of failure
Vehicle diagnostics and connected-vehicle data support decisions about vehicle quality and warranty cost, so an outage hits the people who rely on that data.
The diagnostics and connected-vehicle applications ran on-premises on legacy infrastructure with a single point of failure. A server outage could disrupt vehicle data processing, diagnostic workflows and access to critical operational information.
- 01
Downtime risk. the environment could not scale for growing telematics data volumes or peak processing demand.
- 02
Manual effort and exposure. maintenance, monitoring and patching were largely manual, which increased overhead and security exposure.
- 03
Data exchange risk. the legacy SFTP server used for automotive data exchange raised security concerns, and complex VPN configurations were hard to manage.
- 04
Visibility. without centralized logging and proactive monitoring, application performance and infrastructure health were hard to see, which delayed issue detection and resolution.
Solution
What Cypik delivered
Architecture
- We migrated the application to AWS and redesigned it across two Availability Zones in an Amazon VPC, with an internet gateway for client access.
- Public subnets hold NAT gateways, Citrix ADM and NetScaler. Private subnets hold StoreFront, Active Directory (AD01 and AD02), delivery controllers (DDC01 and DDC02), SQL01, Citrix licensing, a DIR/RDS server and the application servers.
- We deployed Citrix Virtual Apps in AWS, using Machine Creation Services (MCS) to provision scalable session hosts from a standardized master image. This removed the single point of failure and improved performance.
- Site-to-Site VPN, with a VPN gateway, VPN connection and customer gateway, keeps traffic to the customer office encrypted.
Operations
- AWS Systems Manager Patch Manager automates patching, and Run Command controls services through tags.
- AWS Lambda stops and starts instances on a schedule.
- Amazon CloudWatch and AWS CloudTrail centralize monitoring and logging.
Secure file transfer
- We replaced the legacy SFTP server with AWS Transfer Family, a managed service integrated with Amazon S3.
Security and audit
- AWS CloudTrail, GuardDuty, AWS Config, Security Hub and Amazon Inspector cover API activity, threats, compliance, security posture and vulnerabilities.
- Amazon Detective supports investigation when something needs a closer look.
Architecture
How it is built.
Select a diagram to open it at full size.
Outcome
Higher availability, less manual maintenance
The new architecture improved the availability, scalability and resilience of PrimaSolv's vehicle diagnostics and connected-vehicle data platform.
- 01
Removing the single point of failure reduced downtime risk for vehicle data processing and diagnostic workflows, and MCS-enabled provisioning improved performance during peak data-processing demand.
- 02
Automated patching, secure file transfer and centralized monitoring strengthened the security posture and reduced manual maintenance effort.
- 03
PrimaSolv gained a secure, scalable and cost-efficient cloud environment that supports business continuity and future growth.
Technology
Migration work and technology used
The engagement also covered these migration and upgrade tasks, alongside the technology below.
Migration and upgrade work
- VPN migration from strongSwan and OpenVPN to AWS VPN.
- Windows OS upgrade from 2022 to 2025.
- Driver upgrades for NVMe, ENA and EC2Launch v2.
Technology used
- Citrix MCS, used to update application servers with AWS hosting connections.
- VPN options in use were AWS Site-to-Site VPN, custom strongSwan and OpenVPN.
Services and technology
What the environment runs on.
Networking
- Amazon VPCTwo Availability Zones with public and private subnets
- Internet gateway and NAT gateways
- AWS Site-to-Site VPNVPN gateway and VPN connection to the customer office
Operations and automation
- AWS Systems ManagerPatching with Patch Manager
- AWS LambdaAutomated instance stop and start
Security and audit
- Amazon GuardDutyContinuous threat monitoring
- AWS ConfigCompliance tracking
- AWS CloudTrail and VPC Flow LogsLog monitoring
- AWS Security HubSecurity posture
- Amazon InspectorVulnerability scanning
- Amazon DetectiveSecurity investigation
Monitoring
- Amazon CloudWatchLogs and alerts
Transfer and storage
- AWS Transfer FamilyManaged secure file transfer
- Amazon S3Object storage
Other technology
- Citrix Virtual AppsDelivery controllers, StoreFront and licensing, with MCS-provisioned session hosts
- Citrix ADM and NetScalerApplication delivery in the public subnets
- Microsoft Active DirectoryAD01 and AD02
- strongSwan and OpenVPNEarlier VPN options
More case studies
Related work.
Want results like these in your environment?
Start with a read-only assessment. You keep the written findings either way.