[Offboard] Aaron Borden

[mogul]

All tasks should be checked and completed. For tasks that are not applicable, perhaps because the team member did not have this particular access, please confirm that the team member in fact has no access before marking the task complete.

Tasks to be performed by the outgoing team member:

• [x] Move all Data.gov related documents to team drives
• [x] Document any work in progress and schedule a hand-off for any remaining tasks

These tasks are performed by a team admin:

• [x] Remove team member's access to Google Drive
  • Data.gov
  • Data.gov Mutli Tenant
  • DatagovDevSecOps
• [x] Email the ISSO to remove the user from any Google Drive folders or documents owned by security
• [x] Remove team member from Data.gov GitHub teams
  • data-gov-admins
  • data-gov-support
  • data-gov-ckan-multi
• [x] Remove team member from the gsa-datagov organization on cloud.gov
• [x] Remove team member from GCP account
• [x] Remove team member from AWS OPP account
• [x] Remove team member from the SSB AWS accounts
• [x] Remove team member from AWS sandbox access
• [x] Remove team member from jumpbox operators
• [x] Remove team member from Data.gov email lists
  • datagov
  • datagovhelp
  • inventory-help
• [x] Remove team member from Data.gov calendar and events
• [x] Remove team member from Login.gov team.
• [x] Remove team member from New Relic
• [x] Remove team member from Docker Hub
• [x] Remove team member from Data.gov system accounts on Inventory and Catalog
• [x] Remove team member from TTS Bug Bounty access #bug-bounty-partners
• [x] Remove team member from Snyk
• [x] Remove team member from Agari (see #admins-dmarc or @adborden for access)
• [x] Remove team member from Data.gov Google Analytics account
• [ ] Rotate Ansible Vault key and update the canonical location
• [x] Remove team member from PyPI packages:
  • ckanext-dcat-usmetadata
• [x] Remove team member from Google Search Console
  • Made inquiry as to how to do this
• [x] Remove team member from any Data.gov Touchpoints

If team member is also leaving TTS:

• [x] Remove team member from Slack

If the team member is also leaving GSA:

• [x] Request the user be removed from Federalist by posting to #federalist-support with the member's GitHub username
• [x] Remove access from GSA GitHub org
• [x] Create "Offboard from GSA IT" ticket
• [x] Notify HSPD-12 if needed

[mogul]

Moving to Blocked as there are three requests in flight. I'm holding off on the Ansible Vault rekey for now, but will revisit in a couple days (because we are far along in our migration out of the Ansible-controlled environment and may just tear it down).

[mogul]

@jbrown-xentity can you take care of this one?

[ ] Remove team member from Data.gov system accounts on Inventory and Catalog

[jbrown-xentity]

@mogul done

[mogul]

OK, all that's left is rotating the Ansible key. I've put this issue back in the Sprint Backlog after the last few issues that get us onto cloud.gov... so we likely won't ever have to do that.

[jbrown-xentity]

Need to remove Aaron from inventory and catalog sysadmin list, documented https://github.com/GSA/datagov-deploy/issues/3482.