NASA-IMPACT / csdap-cumulus

SmallSat Cumulus Deployment
Other
1 stars 1 forks source link

Remove AWS Account ID from Prod bucket names #50

Closed chuckwondo closed 2 years ago

chuckwondo commented 2 years ago

Issue

Our buckets in Prod include the AWS Account ID in the names. While the configured bucket mapping hides this from appearing in the distribution URLs, the S3 URLs, which do include the Account ID, are still exposed, so we want to use buckets without the Account ID in the names, to avoid exposing them (e.g., via the AWS S3 Access links shown in Earthdata Search).

Acceptance Criteria

  1. All of the Prod buckets used by Cumulus exclude the AWS Access ID from their names
  2. A smoke test discovery/ingest workflow execution succeeds
  3. The metadata published to the CMR for the smoke test granules no longer includes the AWS Account ID in the AWS S3 Access links (as verified in Earthdata Search)
chuckwondo commented 2 years ago

To apply fix to Production or to Dev deployments (primary UAT deployment is not affected, as its buckets do not include the account ID in the names), after #51 is approved and merged into main: