SimonPPledger

This is for non AWS certificates, eg Gandi

Currently not an issue - as we have implemented a workaround

Picked up by other tickets- so no longer required

no longer required as combining with #1906

IAM only ? what about admin users where we wouldn't normally log on

Lets add some more information, including any limitations etc

This is more of an application issue and individual app teams can run account specific plan

we think we are now 'credential free' - once OIDC is complete. But need a separate ticket to review these are the secrets we have https://user-guide.modernisation-platform.service.justice.gov.uk/runbooks/rotating-secrets.html#introduction once that is done,...

we are looking at an observability platform. so this is not required

Closed as we cannot do now - it is still on the risk register