ministryofjustice / opg-aws-cost-notifier

The Office of the Public Guardian AWS cost notifier lambda and infrastructure: Managed by opg-org-infra & Terraform

opg-aws-cost-notifier

The Office of the Public Guardian AWS cost notifier lambda and infrastructure: Managed by opg-org-infra & Terraform.

This can be deployed into any region, however us-east-1 is a required provider as this is where cost anomaly alerts are produced.

Requirements

Name	Version
terraform	>= 1.4.6
aws	>= 4.7.0

Providers

Name	Version
aws	4.64.0
aws.us-east-1	4.64.0

Modules

No modules.

Resources

Name	Type
aws_cloudwatch_log_group.lambda	resource
aws_iam_role.lambda_role	resource
aws_iam_role_policy.lambda	resource
aws_iam_role_policy_attachment.vpc_access_execution_role	resource
aws_kms_key.cloudwatch	resource
aws_lambda_function.lambda_function	resource
aws_lambda_permission.allow_lambda_execution_sns	resource
aws_sns_topic_subscription.lambda	resource
aws_caller_identity.current	data source
aws_iam_policy_document.cloudwatch_kms	data source
aws_iam_policy_document.lambda	data source
aws_iam_policy_document.lambda_assume	data source
aws_region.current	data source

Inputs

Name	Description	Type	Default	Required
account_name	AWS account name	any	n/a	yes
ecr_repository_url	URL of the ECR repository	string	n/a	yes
slack_channel_id	Slack's internal ID for the channel you want to post messages, format AB1C2DEF	string	n/a	yes
slack_secret_arn	ARN of the AWS secrets manager secret containing the slack app token	string	n/a	yes
sns_topic_arn	ARN of the cost anomaly alert immediate subscription SNS topic	string	n/a	yes
version_tag	Tag of the AWS Cost Notifier Image to Deploy	string	"latest"	no

Outputs

No outputs.

opg-aws-cost-notifier's Issues

User access removed, access is now via a team

Hi there

The user opg-ci either had direct member access to the repository or had direct member access and access via a team.

Access is now only via a team.

If the user was already in a team, then their direct access to the repository has been removed.

If the user was not in a team, then the user will have been added to an automated generated team named repository-name-<read|write|maintain|admin>-team and their direct access to the repository has been removed.

The list of Org teams can be found at https://github.com/orgs/ministryofjustice/teams or https://github.com/orgs/moj-analytical-services/teams.

The user will have the same level of access to the repository via the team.

The first user added to a team is made a team maintainer, this enables that user to manage the users within the team.

Users with admin access are added to the admin team as a team maintainer.

If you have any questions, please contact us in #ask-operations-engineering on Slack.

This issue can be closed.