Automated DevSecOps Process for APIs on GCP

Overview

Our client is a leading medical device company that relies on secure, HIPAA-compliant API infrastructure to support performance, scalability, and cybersecurity across its product lines.

Business Complexity

The client needed to quickly update APIs while keeping end user data HIPAA-compliant, requiring rigorous testing for performance, scalability, and cybersecurity ahead of future expansion into mobile and IoT.  

Action

  • Architected and deployed a fully automated DevSecOps process for the client's APIs on GCP using Docker & Google Kubernetes Engine (GKE).
  • Automated the process with REST-based APIs to call Bamboo server for build and test, including multi-stage build workflows triggered by code-commit.
  • Automated the creation and deployment of Docker images using Gradle as the build tool, deployed on GKE using GKE APIs.
  • Automated unit, integration, and regression testing to reduce risk and speed up bug detection, with automated publishing of test artifacts, logs, and reports to Bamboo.

Tech Stack

  • Docker
  • Google Kubernetes Engine (GKE)
  • Gradle
  • Bamboo

Impact

  • 3% Uptick in Incremental Value
  • 2%-3% Higher Incidence Rates
  • 4% Consumption Value Growth Across Categories