cds-snc / cds-snc/platform-forms-client

Analyze VPC firewall reports and write rules to restrict traffic

Open
#7,644 5 comments 0 reactions 2 assignees Claimed by @bryan-robitaille View on GitHub
core development security tech debt
Dominant language
TypeScript
Stars
46
Forks
16
Avg merge
1d 8h
Merged PRs (30d)
85

Description

A while ago, a VPC firewall with its first set of rules was implemented in Staging to start restricting incoming and outgoing traffic (https://github.com/cds-snc/forms-terraform/pull/1294). It had been set up in a way that did not put too much restrictions on the flowing traffic.

We now have collected enough data to allow us to write new firewall rules in order to have full control over what comes in and goes out of the VPC.

- [ ] Analyze AWS VPC firewall reports and determine list of domains that should be allowed (https://docs.google.com/spreadsheets/d/1mXd39laqprSoV6oNQztCT-kqfiZKlpzGDZzgkBOA1SQ)
- [ ] Implement new set of firewall rules (https://github.com/cds-snc/forms-terraform/pull/1433)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.