Sucess Stories – La Caja


DinoCloud implements AWS Cognito for user authentication in La Caja

Grupo La Caja is an Argentine company with a long history in the Argentine insurance market, with a 7% share of all insurances in force. La Caja offers comprehensive insurance packages, including home, vehicle, health, and life insurance, among many others.

DinoCloud is a leading AWS Premier Partner company in Latin America, with expertise in the creation, optimization, and evolution of products deployed in the cloud. DinoCloud’s technical expertise plays an essential role in accompanying companies belonging to various industries on their way to digital transformation.

The professional relationship between the two companies started from the need La Caja had to implement an authentication stack for the Web Empresas business site due to the sensitivity of the data that the insurance company manages for the distribution of its services. 

DinoCloud, as an AWS Premier Partner, brought the entire AWS ecosystem of services to La Caja to address this need and tackle the problem with operational excellence. La Caja was unfamiliar with all the AWS services. Because of this, in the preliminary stage of the project, DinoCloud introduced the engineering team to the AWS Cognito service, a fundamental piece to carrying out the authentication of users on the Web Empresas.

Stages, technologies, and services implemented

The project lasted two months and was divided into four stages:

  1. The creation of an AWS account for La Caja and a basic security application.
  2. IAM configuration for user login federation to your Active Directory.
  3. Support in implementing AWS Cognito for authentication and authorization of the use of La Caja’s business applications. 
  4. AWS Security Session.

On the other hand, Terraform was implemented for the deployment of services in AWS and AWS SDK NodeJS for the integration of services with the Web Empresas site.

In turn, the AWS services implemented were as follows:

  1. AWS IAM: For the deployment of configurations to use Azure AD as IDP.
  2. AWS Cognito: Customer Identity and Access Management for the Web Empresas site
  3. DynamoDB: Saving of registered user data through AWS Cognito
  4. Lambda: Creation of automatic user approval function for development in test environments.
  5. Amazon Simple Email Service (SES): Emails are sent to users when AWS Cognito makes it available to execute a particular event. (e-mail validation, password recovery, etc.)
  6. AWS WAF: Application of a geolocation security rule that prevents any user not located within the Argentine territory from registering or authenticating in AWS Cognito.
  7. CloudWatch: Logging for the services mentioned above.

Conclusion and results

As mentioned earlier, La Caja did not know about AWS services and its ecosystem. Thanks to this project, it was possible to transfer the knowledge to the developers so that they could work on the continuous integration of authentication with a basic understanding of all the services configured, along with detailed documentation on each attribute used in the configuration. 

As a result of this project, La Caja now has a secure and low-cost authentication stack without the need to have intervened in highly complex services.

Get in touch

(*) Required fields