cds-snc / notification-planning-core

Project planning for GC Notify Core Team
0 stars 0 forks source link

Update S3 log buckets to SRE Terraform Modules #92

Open ben851 opened 1 year ago

ben851 commented 1 year ago

Description

As a developer/operator of GC Notify, I want to simplify my deployments while also aligning to GoC security requirements.

WHY are we building?

AWS has modified how S3 buckets are created in terraform, and the existing log bucket declarations no longer work when creating new resources. In order to build environments from scratch, they must be migrated to the new deployment model. Rather than doing this manually, we can leverage the CDS SRE terraform modules for S3 log buckets that automatically configure and manage the security settings for the buckets.

WHAT are we building?

Change all references to s3 log buckets to the s3 log bucket module.

VALUE created by our solution

We will be better aligned with security controls for GoC, and be able to create new environments dynamically.

Acceptance Criteria

QA Steps

ben851 commented 1 year ago
ben851 commented 1 year ago

Staging:

ben851 commented 1 year ago

Production:

jimleroyer commented 1 year ago

Just need to release the changes in production.

jimleroyer commented 1 year ago

This has been released.

jimleroyer commented 1 year ago

@sastels to do QA and verify the buckets.

sastels commented 1 year ago

Verified log buckets in production contain both old and new logs