[Spike] PST-IET research for VPC traffic mirroring options

[considerable]

Background/Request

If we were to use APIClarity to reconstruct OpenAPI Specifications from real-time workload traffic, we would capture all API traffic in an existing environment using a service mesh framework (e.g. Istio).

Goal

We need to determine IF and HOW the real-time workload traffic can be mirrored from the VPC of running vets-api.

Requirements to Consider

• Our VPC is special as it runs not in public AWS but in AWS GovCloud (US)

• PII and PHI data must undergo scrubbing/redacting before saved in logs or elsewhere but the database

Tasks

• Answer the following questions:
  • Identify the owner of the AWS GovCloud account where vets-api VPC is located.
  • Validate How Amazon Virtual Private Cloud Differs for AWS GovCloud (US)

    Traffic mirror sessions are visible to the owner of a traffic mirror target only if created using the same account.

  • Identify, if the K8s to run APIClarity can be launched as a traffic mirror target, who must be the account owner.
  • Capture any other essential requirements such as for PII, PHI, and alike.
  • Identify if any training is required for PST-IET engineers to access that account.

Time Box

_ hours

Definition of Done

• Tasks are complete
• Research and recommendations are documented in this ticket

---

How to configure this issue

• [ demo ] Attached to an Epic (what body of work is this a part of?)
• [ research ] Labeled with Practice Area (backend, frontend, devops, design, research, product, ia, qa, analytics, contact center, accessibility, content)

[considerable]

@CosmicSyntax @rogersarkis - we may need to get Jimmy access to GitHub to have him join ZenHub