Card Tokenization Service
Go gRPC services with credit card tokenization and DynamoDB storage for a payments client, with least-privilege IAM and OWASP validation.
- Year
- 2023
- Role
- Backend engineering
- Stack
- Go, gRPC, DynamoDB, AWS
Contents
Overview
A payments client needed card tokenization behind Go gRPC services with DynamoDB-backed storage. The work ran from February to June 2023.
The problem
Card data demands a minimal blast radius: storage and services with the narrowest possible permissions, and security controls that are validated rather than assumed.
What I built
- Implemented Go gRPC web and credit card tokenization services.
- Built DynamoDB CRUD operations with minimal IAM permissions.
- Applied OWASP security validation across the services.
Impact
- Tokenization shipped with least-privilege data access and validated security controls.