Task Description

What task needs to be done?

Task Outcome

Following actions to be performed:

[x] Address HIGH and CRITICAL issues reported by SNYK
[ ] Remove PR-bot token workflow requirement
[x] Fine tune platform-admin-looking-at-sensitive-service-warning
[ ] Produce AWS security findings of abnormal behaviour and pipe them to the AWS Landing Zone security hub for the SRE team to detect and respond to
[x] Create custom rules in SIEM (Azure Sentinel) to alert - proof of concept
[ ] Switch terraform security scanner to Checkov
[ ] Evaluate the option to encrypt messages in SQS queues / on the wire
[x] Enable TLS with RDS Proxy
[x] Rate limit requests coming to Notify
[x] Update process for SLA/terms of use for Notify users
[x] Collect all valid endpoints for document-download-api
[x] Produce list of third party vendors interacting with Notify
[x] Drop support for TLS 1.1 and only use 1.2

List of what needs to be completed.

[x] Time boxed to X week starting X date
[x] Prioritize the highest priority/most critical tasks and move others back into the Product Backlog
[x] Notify security is not compromised when services scale up their usage and when new services onboard
[x] Security is not compromised when new analytics tools and Growth features are integrated (Forms, Articles)