ministryofjustice / modernisation-platform

A place for the core work of the Modernisation Platform • This repository is defined and managed in Terraform
https://user-guide.modernisation-platform.service.justice.gov.uk
MIT License
681 stars 289 forks source link

Complete production ready checklist for PPUD #3272

Closed davidkelliott closed 1 year ago

davidkelliott commented 1 year ago

User Story

Prior to PPUD going live in production complete the following checklist:

https://user-guide.modernisation-platform.service.justice.gov.uk/user-guide/production-ready-checklist.html

User Type(s)

MP engineers

Value

Ensure code quality and security of the platform

Questions / Assumptions / Hypothesis

Definition of done

Reference

How to write good user stories

ep-93 commented 1 year ago
  1. For public facing interfaces - Create DDoS alarms, enable SRT access, enable Layer 7 Mitigation for ELBs.
  2. All EC2 instances have the AWS Systems Manage Session Manager SSM Agent installed. -- Complete. There's currently an jump server but it'll be removed before going live.
  3. Infrastructure code has been reviewed and signed off by a Modernisation Platform engineer. -- Reviewed, the ec2 instance names as well as building different ones in different environments feels a bit like test environments are just completely different to prod.
  4. The application runbook (README.md` in the application folder in the modernisation-platform-environments repository) has been completed. -- Incomplete
  5. The application conforms to the MoJ Technical Guidance and MoJ Security Guidance
  6. The application has been tested. -- Complete
  7. Appropriate application monitoring and logging is in place.
  8. There is an application support team in place and their contact details are in the application runbook. -- Incomplete
  9. The Modernisation Platform team are aware of any cutover/migration dates/times and have agreed additional cover if required.

Outstanding Work

ep-93 commented 1 year ago

https://docs.google.com/document/d/13up1uhdM2-9fGuBcX50qgvjq9dHQPbK6t45hjUugVb8/edit?usp=sharing

ep-93 commented 1 year ago

Outstanding Work

ep-93 commented 1 year ago

Go live date moved to end of month.

SimonPPledger commented 1 year ago

Asked Mark Hardy to update read.me

dms1981 commented 1 year ago

I'll take over on this from @ep-93

dms1981 commented 1 year ago

Not sure what the jump server name is / would be, but I don't see any evidence of an instance with that name nor a bastion host. The readme has been updated. Confirmed that the production ready checklist has been completed