google / google/stellar-engine

[Feature Request] Automated Enforcement of Sharing Artifacts

Open
#80 0 comments 0 reactions 1 assignee Claimed by @woodham1 View on GitHub
enhancement
Dominant language
HCL
Stars
49
Forks
20
Avg merge
3d 14h
Merged PRs (30d)
28

Description

## Feature Description
An automated mechanism needs to be established to ensure that incoming requests for artifacts are centralized, Non-Disclosure Agreement (NDA) validations occur, and the sharing of the relevant artifacts are enforced through a version controlled system.

## Use Case
The current Google Drive for Stellar Engine had a large number of requestors for disparate files breaking permissions inheritance.

## Proposed Solution
Leverage a Google Apps Script to review the contents of the Stellar Engine Artifact Request Google Form and automatically share the relevant documents to those individuals who have been confirmed to have an NDA with Google.

## Compliance & Deployment Context
* **Target Deployment Type(s):**
* [ ] US Region Restricted (e.g., Access Policy constraint)
* [ ] FedRAMP Medium
* [ ] FedRAMP High
* [ ] DoD IL4
* [ ] DoD IL5
* [x] All / General
* **Relevant NIST 800-53r5 Controls:** (If applicable, list the controls this feature helps satisfy)

## Reusability Check
Stellar Engine prioritizes reusability.
* [x] I have checked if this functionality can be achieved by extending an existing module or blueprint.
* [x] I have verified that this does not duplicate existing functionality.

## Alternatives Considered
Internal Google processes are not exposed outside of the organization so existing solutions cannot be leveraged. Alternatively we could simply review the documents we have today with legal and see how we can make them publicly available.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.