Sign in to track progress, unlock prep layers, and browse your pipeline.Sign in
Design a Secure Trading App on AWS
Design a secure, Robinhood-like mobile/web application on AWS, focusing on two core modules:
User Profile Management
- Functionality: Account creation, authentication (including MFA), PII storage, profile updates, and account recovery (password reset).
- Data: Store and manage user profile data such as name, email/phone, address, KYC status, and preferences.
- Security & Compliance: Emphasize strong security measures, encryption, least privilege, secrets management, WAF/rate limiting, and immutable audit trails for profile changes and access.
Stock Query
- Functionality: Search stocks by ticker or company name (prefix search) and retrieve near-real-time quotes (price, bid/ask, timestamp).
- Performance: Handle high read QPS with low latency.
- Availability: Ensure reasonable quote freshness (seconds) with graceful degradation.
Assumptions:
- This is a regulated financial product, requiring strict security and auditability.
- Order placement/execution is out of scope, but can be considered for completeness.
Deliverables:
- High-level architecture on AWS.
- Key data models and storage choices.
- Example API endpoints.
- Security model and threat mitigations.
- Scalability and reliability strategies (caching, multi-AZ/region, DR).
AI interview prep
Core dilemma
Balancing stringent security and regulatory compliance for sensitive financial data against the need for high availability, low latency, and scalability for user-facing features like real-time stock quotes.
Mid-level signals3
Senior signals3
Red flags3
3 tradeoffs and 3 stress tests locked
Interview prep
Unlock the interviewer X-Ray rubric, tradeoff matrix, stress tests, clarifying questions, and key concepts.
Design a Secure Trading App on AWS
Design a secure, Robinhood-like mobile/web application on AWS, focusing on two core modules:
User Profile Management
- Functionality: Account creation, authentication (including MFA), PII storage, profile updates, and account recovery (password reset).
- Data: Store and manage user profile data such as name, email/phone, address, KYC status, and preferences.
- Security & Compliance: Emphasize strong security measures, encryption, least privilege, secrets management, WAF/rate limiting, and immutable audit trails for profile changes and access.
Stock Query
- Functionality: Search stocks by ticker or company name (prefix search) and retrieve near-real-time quotes (price, bid/ask, timestamp).
- Performance: Handle high read QPS with low latency.
- Availability: Ensure reasonable quote freshness (seconds) with graceful degradation.
Assumptions:
- This is a regulated financial product, requiring strict security and auditability.
- Order placement/execution is out of scope, but can be considered for completeness.
Deliverables:
- High-level architecture on AWS.
- Key data models and storage choices.
- Example API endpoints.
- Security model and threat mitigations.
- Scalability and reliability strategies (caching, multi-AZ/region, DR).