David Elliott
David Elliott
https://github.com/ministryofjustice/modernisation-platform/issues/1975
Shield advanced now enabled
Currently not possible as neither the service.justice.gov.uk or justice.gov.uk subdomains have DNSSEC enabled so we cannot establish a chain of trust
https://user-guide.cloud-platform.service.justice.gov.uk/documentation/monitoring-an-app/how-to-create-pingdom-checks.html#creating-pingdom-checks
ADR here https://github.com/ministryofjustice/modernisation-platform/blob/main/architecture-decision-record/0021-use-a-go-lambda-for-instance-scheduling.md
I've done something similar in the past, there might be something we can reuse here - https://github.com/ministryofjustice/laa-ccms-shared/blob/master/shared-infrastructure/terraform-shared-services/lambda/key-rotation/main.py
This is not as important if we remove the need for keys with OIDC
https://github.com/ministryofjustice/modernisation-platform/issues/1975
https://aws.amazon.com/about-aws/whats-new/2022/09/aws-iam-identity-center-apis-manage-users-groups-scale/
https://github.com/ministryofjustice/modernisation-platform/issues/1975