Secure production logs - Githubissues

HumanCellAtlas / dcp

Data Coordination Platform manifest and integration tests.

3 stars 1 forks source link

Secure production logs #296

Open mweiden opened 5 years ago

mweiden commented 5 years ago

Need

Access to production logs (in CloudWatch logs and Stackdriver logs in production GCP projects) is currently too wide. Access should be restricted, probably just to DCP security leads.

Approach

[ ] MUST Configure dcp-infra to restrict read, write, and delete access to AWS CloudWatch production logs
[ ] STRETCH GOAL - put GCP projects into dcp-infra and restrict same permissions to GCP StackDriver logs

mweiden commented 5 years ago

@rhiananthony this was the ticket I mentioned before. Do you or someone on your team have expertise here?