About AppsFlyer

‍

Founded in 2011, AppsFlyer is a global leader in marketing measurement, analytics, and engagement that helps more than 80,000 companies build better products, create exceptional experiences, and preserve customer privacy. Their mobile attribution and analytics platform enables marketers, ad agencies, and app creators to measure and optimize campaigns, protect ad spend from fraud, and fuel data-driven marketing innovations.

‍

The Challenge


As one of the largest AWS consumers in EMEA, AppsFlyer’s cloud infrastructure is mission-critical. At this scale, cloud operations come with formidable challenges: ever-changing infrastructure, unmanaged resources, and configuration drifts. Eliran Bivas, Cloud Native Horizontal Leader, and his team needed better visibility and governance to ensure platform resilience and compliance across their AWS workloads.

‍

In particular, the team faced:

‍

  • Detection of unknown and unmanaged resources, including shadow IT.
    ‍
  • Configuration drift across hundreds of AWS accounts and services.
    the
  • Risk of misconfigurations impacting uptime, availability, and security of critical customer-facing services delivered via Amazon API Gateway and Amazon CloudFront.

‍

They sought a solution that would automate detection, recovery readiness, and governance, reducing the manual burden on engineering teams while strengthening resilience posture.

‍

The Firefly Solution
‍

Firefly provided AppsFlyer with a unified cloud asset inventory and Infrastructure-as-Code (IaC) governance across AWS. By integrating with core AWS services and telemetry, Firefly enabled real-time detection, prevention, and mitigation of unmanaged resources, drift, and policy violations.

‍

Specifically, Firefly integrated with:

‍

  • AWS CloudTrail – to capture resource events and configuration changes.
    ‍
  • AWS Config – to continuously evaluate AWS resources against governance rules.
    ‍
  • Amazon S3 – for centralized state and policy storage and versioning.
    ‍
  • Amazon API Gateway – to secure and monitor APIs critical to customer data pipelines, ensuring fast recovery from drift or misconfiguration.
    ‍
  • Amazon CloudFront – validating distribution configurations for resilience and optimizing global content delivery.
    ‍
  • Amazon EKS (Elastic Kubernetes Service) – to track workloads deployed on Kubernetes clusters.

‍

Firefly’s integration with AppsFlyer’s IaC workflows (Terraform)also ensured proactive governance, enforcing Open Policy Agent (OPA/Rego)-based rules during CI/CD provisioning. This shift-left resiliency model prevented drift, enforced compliance, and reduced recovery time by ensuring resilient deployments before workloads were pushed to AWS.

‍

The Results

‍

By adopting Firefly, AppsFlyer achieved:

‍

  • 84% improvement in platform engineering efficiency, reducing time spent on manual misconfiguration detection.
    ‍
  • Automated resilience checks across API Gateway and CloudFront, minimizing downtime and ensuring consistent global application delivery.
    ‍
  • Reduced Mean Time to Detect (MTTD) and Respond(MTTR) to outages through near real-time drift detection and automated rollback.
    ‍
  • Comprehensive visibility into unmanaged, codified, and drifted resources across AWS environments.
    ‍
  • Improved RTO/RPO posture, as Firefly’s point-in-time state snapshots and redeployments shortened recovery cycles.
    ‍
  • Proactive compliance enforcement, reducing risk of outages or security gaps caused by configuration errors.

‍

Strategic Impact
‍

With Firefly, AppsFlyer’s platform engineering team transformed their cloud operations model from reactive to proactive:

‍

  • Increased uptime and availability of mission-critical workloads on API Gateway and CloudFront
    ‍
  • Reduced operational overhead, freeing engineering capacity to focus on innovation.
    ‍
  • Improved compliance posture across regulated workloads by leveraging AWS-native telemetry and Firefly’s policy engine.
    ‍
  • Resiliency by default, aligned with AWS Well-Architected best practices, and scalable across one of the largest AWS footprints in EMEA.

‍

“We were constantly trying to detect misconfigurations, unmanaged resources, or even cases of shadow IT, and it required us to invest a large portion of our time. With Firefly, we can focus on innovation while knowing resilience and governance are automated.”
  Eliran Bivas, Cloud Native Horizontal Leader, AppsFlyer

‍

‍
Firefly is fully built and deployed on AWS to deliver its Infrastructure-as-Code management and cloud governance solution at scale. As part of the AWS ISV-Accelerate program and holding the AWS DevOps ISV Competency, Firefly works closely with AWS to co-sell, drive customer success, and help organizations improve their resilience posture across AWS environments.