search

ministryofjustice / modernisation-platform

A place for the core work of the Modernisation Platform • This repository is defined and managed in Terraform
https://user-guide.modernisation-platform.service.justice.gov.uk
MIT License
680 stars 289 forks source link

Start using SSO credentials instead of superadmin for local work. #1859

Closed davidkelliott closed 2 years ago

davidkelliott commented 2 years ago

User Story

The superadmin credentials (AWS access keys) should not be used everyday, we should switch to SSO credentials and delete all superadmin creds, creating them to use as one off only when absolutely necessary.

User Type(s)

MP engineer

Value

Increase the security of the platform

Questions / Assumptions / Hypothesis

Hypothesis

If we use SSO credentials for local development we won't need to have superadmin credentials anymore

Proposal

Work out how to use SSO credentials with our current Terraform, then once tested and documented remove superadmin credentials.

Definition of done

Reference

How to write good user stories

julialawrence commented 2 years ago

Relevant PR: https://github.com/ministryofjustice/modernisation-platform/pull/2455

julialawrence commented 2 years ago

Related PR: https://github.com/ministryofjustice/aws-root-account/pull/612

julialawrence commented 2 years ago

More PRs:

https://github.com/ministryofjustice/modernisation-platform/pull/2509 -- merging providers for delegate-access https://github.com/ministryofjustice/modernisation-platform/pull/2508 -- doc updates https://github.com/ministryofjustice/modernisation-platform-ami-builds/pull/113 -- sprinkler and example fixups found while testing.