S3 bucket safeguards - Githubissues

cybergreen-net / pm

Tech project management repo (issue tracker only)

2 stars 1 forks source link

S3 bucket safeguards #41

Open chorsley opened 8 years ago

chorsley commented 8 years ago

Security measures we can / should use for ensuring raw data on S3 buckets is private:

[x] Separation of buckets storing raw and aggregate data
[ ] Continual monitoring of private buckets looking for configuration errors. If private bucket is accessible anonymously, alert.
[ ] Use of specific user roles for for dev / prod, raw / aggregate buckets. Reduce chance a config mistake pointing to wrong env will nuke data unintentionally, and also limit number of roles with access to raw data.

rufuspollock commented 8 years ago

@chorsley good points. Just on first point: raw and aggregate data are already supposed to be separate - raw is in private-bits and aggregate will be in bits.

chorsley commented 8 years ago

@rgrp quite right - meant to check that box.

rufuspollock commented 7 years ago

Moving out of Beta-3 as this is not planned for it.