AWS access for [Lee Delarm]

[lee-delarm6]

COR Name

Cecila Lee

Vendor Onboarding Representative Name

Agile Six - Anthony M. Arashiro

E-QIP Transmittal Date

• [X] Check this box if you have an E-QIP transmittal date.

Your Name

Lee Delarm

Your Email

lee.delarm@agile6.com

Team, Role, and Company of the target individual

Check-In Team, Senior Software Engineer, Agile6

Product Manager (PM) name and email

Lori Pusey, lori.pusey@agile6.com

Product Owner (PO) name and email

Kay Laywer, katherine.lawyer@va.gov

Desired AWS Access

I need vets-api, vets-website, and CHIP AWS access to be able to monitor and review logs, to edit and update deployments (especially around CHIP), to restart servers, and to fix and maintain production issues. I work on the Check-In team, so vets-website does not need to be all access, but CHIP lambdas probably should be, and vets-api somewhere in the middle since we control a lot of modules there

Access Expiration

ongoing

E-QIP Transmittal Confirmation

Additional Notes

You can contact me on slack on the Office of CTO @ VA under my name Lee Delarm, or email lee.delarm@agile6.com. Similar AWS permissions as Brian Sleek on our team would be preferable (I'm not sure how much CHIP access he has though)

User must exist in a roster before AWS access can be granted. See AWS access documentation for the steps involved.

• [x] Search for user on the VFS Team Roster
• [ ] Or search for user on the Platform Team Roster
• [ ] If user is on a VFS team but not in the VFS Team Roster, add the 'NOT YET' label and instruct them to start the Platform orientation process
• [ ] If a user is on a Platform team but not on the Platform Team Roster in Confluence, add the 'NOT YET' label and instruct them to reach out to their Product Manager to be added.
• [x] Comment in this issue saying which roster the user is listed in.

[flooose]

@lee-delarm6 two things:

1. I've removed the image of your eqip transmittal because it had your social security number in it :/
2. The image wasn't valid either. We need an screenshot/image of an email with the words "Transmittal Notice" in the subject. Submitting your eqip is a two-step process. The image that you had pasted above was confirmation that you had submitted your eqip. What we're interested in though is step two, when the VA submits the document on your behalf to the next part of the process.

Let us know if you have any questions.

[lee-delarm6]

Jeez, what a flub on my part! I thought I'd grabbed the image WITHOUT my SS

Let me see if I can find the one you're looking for

[flooose]

I made the same mistake with my AWS access request, so I know how it feels :)

We've made a change to our issue template now, in hopes of avoiding this in the future.

[lee-delarm6]

I don't have an email with Transmittal Notice in the title, possibly because I went through Booz Allen? (Agile6 is/was subcontract) I have an email that shows Booz Allen has submitted my e-qip to the VA, stating the VA has all control of the process from there. Scott Mason was the one who submitted me on that. I've got other emails that say when I've been approved for VA access and things, but did a couple searches in both my VA and work emails with nothing for that headline

[lee-delarm6]

Here's the closest thing I've got I think. A co-worker showed me what the email should look like and I don't have that one

[flooose]

Hmm, did you have to fill out the e-qip though?

[little-oddball]

@flooose @patrick-black-oddball: I checked in on Lee through a different source and had his PIV card issued so he is good to move forward on.

[ph-One]

@lee-delarm6

• Logging, monitoring, and alerts are sent to and managed in Datadog
• All deployments are managed through Jenkins or GitHub Actions, there are no servers to restart as we deploy blue/green with autoscaling groups (proxies) and/or replicasets by way of Helm in Kubernetes (Vets API)
• There are very few Lambda's in our AWS, are you sure VA.gov Platform is the AWS account you need access to?

[ph-One]

@lee-delarm6

Some resources that may be of interest & meet your ask:

• Vets API Helm Chart: https://github.com/department-of-veterans-affairs/vsp-infra-application-manifests/tree/main/apps/vets-api
• Vets API Parent Chart: https://github.com/department-of-veterans-affairs/vets-api/tree/parent-helm-charts/chart
• GitHub Teams for accessing ArgoCD (requires SOCKS) / Deployments in EKS: https://github.com/orgs/department-of-veterans-affairs/teams?query=vets-api

[patrick-black-oddball]

completed