Configure New Relic High Security Mode

[mogul]

see #1077 (comment)

[danswick]

@timoballard will follow up and report out next steps here.

[timoballard]

High security mode needs to be enabled on both the server side (through the NR UI) and the client side (the python agent, in our case). If enabled for one and not the other, the New Relic agent will terminate, effectively disabled the NewRelic integration altogether.

Because enabling this feature on the UI needs to happen in lockstep with a FAC configuration change, we will hold off on this until after the pen test code freeze

[asteel-gsa]

export NEW_RELIC_HIGH_SECURITY=true in setup_cgov_env.sh

Reference: https://docs.newrelic.com/docs/apm/agents/python-agent/configuration/python-agent-configuration/#high_security

[asteel-gsa]

Based on discussions in slack, this is not an ATO requirement, and, with the functionality of NR High Security, it seems unnecessary for our system, however, we can easily enable it if we deem it necessary. As of this time, we are leaning towards this being unnecessary.

[danswick]

Agreed. Let's close this as unplanned. If we need to come to it later, the record is still here.