Joe Beernink

Need to set up a system to periodically scan our endpoints for security flaws to make sure we are not missing important security checks

Add Publish slots for deployment to prod

1

This is on-hold until site is generating enough traffic to justify the added expense. Tracking so as no to lose sight of it.

Google Maps key is transmitted across the wire to the client

1

Need to ensure Azure Maps key is not easily discoverable, and auto-rotates frequently

Assign Website a static IP address and adjust SQL Db firewall

1

Need to justify additional cost first

KeyVault setup has hardcoded tenants and accounts

1

The KeyVault files which are part of the deployment have hardcoded values for the tenants and the accounts. This should be made configurable at the start of deployment

Tenant is currently jobee-ids... should move to correct TrashMob tenant... without breaking everything

There is a mix of old and new routings there, and the old ones need to be removed.,

Need to add restrictions to sign ups that require user to attest to being 13 or over to create an account.

Instead of having the user information sourced in B2C and all synced into the database, convert to have the apps use the azure graph instead. Will make the management of...