MTB Digital Payments — Documentation Portal

Interactive architecture, network, and infrastructure diagrams. Generated from Terraform and ArgoCD evidence.

DEV Environment AWS 315894674298
Architecture

DEV Architecture Overview

High-level view: EKS, services, GitOps (ArgoCD), Traefik ingress, RDS, Kafka, VPN to bank, VPC peering.

21 components · 18 connections · 3 guided views
Network

DEV Network Topology

VPC 10.0.0.0/16, subnets (public/private), NAT, NLBs, VPN to MTB Bank, VPC Peering (INFRA + MTB360).

19 components · 13 connections · 4 guided views
EKS Cluster

DEV EKS Topology

EKS 1.33: node groups, namespaces (dev/esb/infra), 12 payment services, Kafka, Redis, observability stack.

17 components · 9 connections · 3 guided views
IAM Access Model

DEV IAM & Access Control

14 IAM users, 7 groups, 2 service accounts, 8 IRSA roles, 16 EKS access entries. Full access matrix.

17 components · 9 connections · 3 guided views
Backend Services MPS Product
Service Architecture

MGate Payment Service

Payment gateway: RSA/AES decryption, OperationType routing (26 ops), OpenFeign to MTransfer, Provision, Alias Token, Request-to-Pay.

11 components · 10 connections · 3 guided views
Service Architecture

MTransfer Payment Service

Core transfer processing: BIN lookup, limits, G2B PGI (mTLS), B2 Bank Core (SOAP), Visa Direct, PostgreSQL, Redis, RabbitMQ.

12 components · 10 connections · 3 guided views
PROD Environment AWS 613890646300
Architecture

PROD Architecture Overview

Production payment processing environment with HA configuration.

INFRA Environment AWS 957849199084
Architecture

INFRA Architecture

Shared infrastructure: Grafana, Loki, Tempo, Vault, ArgoCD, SonarQube, GitHub runners.

INVERSE Environment AWS 725753017196
Architecture

INVERSE Architecture

Client onboarding platform: Traefik, VPN to bank, isolated namespaces.

Generated with Archify · Source of truth: hub-infra (Terraform) + apps-hub (ArgoCD) · Internal use only