IntegrationIgnite Solutions2023

AWS Cloud Customer Document Unlocking Service

Developed an automated document unlocking and decryption service using AWS Lambda and SSM.

The API service automates the decryption of banking partner documents using AWS Lambda and SSM.

By eliminating manual key retrieval, the solution accelerates document processing for OCR analysis.

Operating within a private VPC ensures security and compliance with financial regulations.

The serverless architecture reduced infrastructure costs by up to 99%, optimizing performance and scalability.

Outcomes

What the platform unlocked once it landed in production. Each one is a measured behaviour change, not a feature promise.

  1. 01

    Eliminate manual key retrieval

    An API endpoint replaces a manual support process — passwords resolved on demand, no human in the loop for the routine case.

  2. 02

    Accelerate OCR throughput

    Documents unlock as soon as they arrive, so downstream OCR analysis isn't blocked waiting on the operations team.

  3. 03

    Operate inside a private VPC

    All decryption happens behind the bank's network boundary, with SSM-managed secrets and no inbound public surface.

  4. 04

    Cut infrastructure costs sharply

    Serverless on demand — Lambda + SSM + SAM means you pay for invocations, not idle servers.

  5. 05

    No servers to manage

    Deployed via CodePipeline + SAM; the support team never logs into a box.

Architecture

Serverless · private VPC · plaintext never lands on disk
PRIVATE VPCOCR ServiceInternal pipeline · partner docs inAPI GatewayPer-partner throttle · IAMUnlock LambdaValidate · resolve · decryptIN-MEMORY ONLYS3Encrypted documentSSM Parameter StorePartner password · SecureString1 · REQUEST2 · AUTHENTICATE3 · FETCH + DECRYPT4 · RETURN PLAINTEXT

Want the longer story behind this one? Get in touch.