PayPay Corporation Infrastructure Technology Department Cloud Infrastructure Tech Lead AWS IAM Identity Center (AWS SSO) Favorite AWS* Service *Amazon Web Services (AWS)
(as of Feb 2023) *2. Calculated by PayPay based on "Survey on QR Code Payment Usage Trends in Japan in FY2021", published by PAYMENTS JAPAN. Leading QR Code Payment Provider in Japan in both Uptake and Number of Transactions
in Japan in both Uptake and Number of Transactions 55 Million registered PayPay users (as of Feb 2023) *2. Calculated by PayPay based on "Survey on QR Code Payment Usage Trends in Japan in FY2021", published by PAYMENTS JAPAN.
Market Yearbook 2022”. Most Downloaded Apps in Japan 1. PayPay Digital Wallet / Payment 2. LINE Communications 3. ZOOM Cloud Meetings Conference/Business tool 4. Instagram Social media 5. Myna Point Digital Wallet / Payment 6. YouTube Video Sharing / Entertainment 7. Google Maps Navigation 8. TikTok Social media 9. Amazon Prime Video OTT/Entertainment 10 Gmail Email No. 1 App Downloads in the country in FY2021
Bills/ Government Services Convenient Services Food & drink Supermark ets Convenien ce stores Drugstores Boo ksto res Online Merchants Beauty Retail History Split Bill Themes Analysis Send/Receive T-CARD Bill Payment KYC Hometown tax PCR testing COVID-19 Notifications Myna Points Flea market Sales Revenue Top-up Add Bank PayPay Bank Carrier Billing Credit cards ATM Top-up Pay Later Loan Earn Points Invest PayPay Insurance Food Delivery Coupons Takeout Taxi Table Order Mobile Charge Stamp card Pay Requests Flyer A super app that allows you to meet all your daily needs with just one smartphone Making life more convenient with PayPay
is not as fast as synchronization between AZs and old data may be accessed - APIs that guarantee Strong Consistency cannot be used between regions (Eventual Consistency is used) - Between regions, you must consider write-read data races (prioritize last write/read) Ensuring data integrity and consistency across regions - As resources are created for each region, human labor and financial costs need to be controlled - An unintended setting in one region may cause architecture to run incorrectly Ease of managing resources AZ: Availability Zone
DynamoDB Amazon S3 AWS Key Management Service (AWS KMS) AWS Secrets Manager These tips will focus on AWS-managed services with a particular focus on Amazon S3!
As the replication of global databases takes place in the Storage layer, it is faster than binlog Tokyo Region Writer Reader Storage Osaka Region Reader Reader Storage Replicated Primary Cluster Secondary Cluster
with the Primary Cluster, the Secondary Cluster can be promoted to handle data writes Tokyo Region Writer Reader Storage Osaka Region Reader Reader Storage Primary Cluster Secondary Cluster Replicated
with the Primary Cluster, the Secondary Cluster can be promoted to handle data writes Tokyo Region Writer Reader Storage Osaka Region Reader Storage Writer Primary Cluster Secondary Cluster
promote Osaka and complete the process Tokyo Region Writer Reader Storage Osaka Region Reader Storage Primary Cluster Secondary Cluster Writer Execute removal from Osaka side
by dividing up the DBs to be written to by system Strong Consistency Configuration Eventual Consistency Configuration Bidirectional replication Bidirectional replication
by dividing up the DBs to be written to by system Strong Consistency Configuration Eventual Consistency Configuration Bidirectional replication Eventual consistency cannot be guaranteed between regions - even when using Consistent Read. Bidirectional replication
by dividing up the DBs to be written to by system Strong Consistency Configuration Eventual Consistency Configuration Bidirectional replication Cost must be checked when replicating huge tables/indexes Bidirectional replication
along with Secret and run paypay-sec-key Promoted paypay-sec-key Promoting it from replica means it is also possible to change the Secret Value etc. Tokyo Region Osaka Region
with Amazon Dynamo DB, we are building the system by dividing up the DB to be written to by system Strong Consistency Configuration Eventual Consistency Configuration Osaka to Tokyo Replication Tokyo to Osaka Replication Osaka to Tokyo Replication Tokyo to Osaka Replication
permission for replication between the source Bucket and destination Bucket Tokyo Region Osaka Region How to create an Amazon S3 multi-region architecture
Region paypay-source-bucket paypay-destination-bucket Tokyo Region Osaka Region Osaka to Tokyo Replication Tokyo to Osaka Replication How to create an Amazon S3 multi-region architecture
existing Objects paypay-source-bucket Tokyo Region Osaka Region paypay-destination-bucket Osaka to Tokyo Replication Tokyo to Osaka Replication 1 2 How to create an Amazon S3 multi-region architecture
Region Osaka Region paypay-destination-bucket Osaka to Tokyo Replication Tokyo to Osaka Replication 1 2 3 3 How to create an Amazon S3 multi-region architecture
paypay-source-bucket Tokyo Region Osaka Region paypay-destination-bucket Osaka to Tokyo Replication Tokyo to Osaka Replication 1 2 3 3 1 2 How to create an Amazon S3 multi-region architecture
Objects paypay-source-bucket paypay-destination-bucket Tokyo Region Osaka Region Osaka to Tokyo Replication Tokyo to Osaka Replication Batch Operations How to create an Amazon S3 multi-region architecture
as Permissions and Policies, should be consistent. - Anyone in the team should be able to create a replication of equal quality. - Make sure that any initial settings required are not left out (making it easier to review). - At the same time, there should be flexibility for the setting of names, tags, and other specific settings such as lifecycles and timeout values. How can we easily manage resources by region? PayPay achieves this using Terraform Module
that allows you to put the settings and resources you want to create into a template, without having to define resources individually. What is Terraform Module? Example: I want to create an endpoint to expose externally You can achieve this just by specifying the endpoint names and instance sizes from the Amazon Route53 + Amazon Load Balance + Amazon EC2 configuration.
codes in the application source - We call region codes and resource names from environment variables - Easily manage the release of apps for each region simply by changing the environment variables Check the usage method of each resource and made sure the application side has the same understanding - Check if Strong Consistency is required, of if Eventual Consistency will work, in addition to whether the usage method is compatible with a multi-region architectures - As we wanted to control the IAM Roles for each usage method, we also checked this What we have done with the application side apart from the infrastructure
architecture In the same region, you can specify security groups as the source or the destination. Multi-region security groups If using different regions, this needs to be specified using an CIDR block. AWS IAM Identity Center (AWS SSO) For services released only in the Tokyo region - Only available to use in one region, such as the Tokyo region, and has no replication functionalities etc. - An independent IAM User management platform has been built separately to prepare for unavailability of AWS IAM Identity Center AWS Transfer Family - While this can be used in the Osaka region, as users are independent for each region, this needs to be created for each User.
architecture Inevitably more expensive than one region Multi-region costs It is not simply about reducing costs, but judging cost-effectiveness and business needs Moving towards greater availability and scalability
services Implemented as necessary in consideration of the labor and financial costs It ensures interregional data integrity and consistency We could accurately configure settings and points for each resource PayPay's multi-region architecture - AWS KMS: Multi-region keys - Separately, we can put other resources into templates, and mandate them without missing out any settings
over 50 countries A modern developing environment synonymous with a young startup Technical challenges and a scale consistent with a fast-growing business More opportunities for growth as the company evolves Delivering great value to users and making an impact on society Value and challenge for PayPay developers