GRCLens Architecture & Deployment

Technical / Solutions Architect · Module 1 · Self-paced + Lab (~3 hours) · 10-question quiz (80% to pass).

Learning objectives

Describe the architecture and components, the deployment model, multi-tenant isolation & security, integration points and the API, and complete the deploy-and-report lab.

1. Architecture overview

• Frontend: React + Vite (TypeScript) SPA — public site + authenticated portal.
• Backend: Python FastAPI REST API (auth, assessments, evidence, reports, admin).
• Database: PostgreSQL (SQLAlchemy).
• Edge: Nginx terminates TLS and proxies /api — the only internet-facing service.
• Orchestration: Docker Swarm with zero-downtime rolling updates + auto-rollback.
• Host: Microsoft Azure (Ubuntu VM) with scheduler + nightly backup services.

2. Deployment model

Cloud-native SaaS on Azure (multi-tenant); typical customer implementation 8–12 weeks. Deployed via swarm-deploy.sh, start-first rollouts with auto-rollback, auto-renewing Let’s Encrypt TLS.

3. Multi-tenancy & security

Schema-per-tenant isolation — shared public schema for global data/accounts; each tenant has its own PostgreSQL schema, so cross-tenant reads are impossible. Provisioning auto-creates the schema, tables, admin user and a blank assessment per control. Security: bcrypt + short-lived JWT, mandatory MFA, HTTPS/HSTS, internal-only API, SSL + firewalled PostgreSQL, per-tenant evidence storage.

4. Integration points & API

Integrates with SIEM tools, vulnerability scanners, identity providers (SSO/SAML/OIDC designed), Jira/ServiceNow, email, and EASMLens. REST API under /api/v1, JWT-authenticated, covering auth/MFA, catalog, assessments + evidence, dashboard, reports (PDF/Word), notifications, tenants/users and admin.

5. Scalability & operations

Scale by adding backend replicas behind Nginx; new tenants are schema additions (no new infra). Update via git pull && bash deploy/swarm-deploy.sh; Azure PITR + nightly validated dumps for backup.

6. Lab

Deploy/connect the sandbox tenant → configure a framework, user and role → connect a sample source (CSV import or SIEM feed) → run and export a PDF/Word report. Submit screenshots of the dashboard and report.

7. Assessment

Complete the 10-question Knowledge Check (80% to pass) below.