Skip to content

Commit

Permalink
GH pages: new config.json property described (log query period) (data…
Browse files Browse the repository at this point in the history
…-dot-all#1504)

### Feature or Bugfix
<!-- please choose -->
- Feature


### Detail
- Config changes are described

### Relates
- data-dot-all#1502 

### Security
Please answer the questions below briefly where applicable, or write
`N/A`. Based on
[OWASP 10](https://owasp.org/Top10/en/).

- Does this PR introduce or modify any input fields or queries - this
includes
fetching data from storage outside the application (e.g. a database, an
S3 bucket)?
  - Is the input sanitized?
- What precautions are you taking before deserializing the data you
consume?
  - Is injection prevented by parametrizing queries?
  - Have you ensured no `eval` or similar functions are used?
- Does this PR introduce any functionality or component that requires
authorization?
- How have you ensured it respects the existing AuthN/AuthZ mechanisms?
  - Are you logging failed auth attempts?
- Are you using or adding any cryptographic features?
  - Do you use a standard proven implementations?
  - Are the used keys controlled by the customer? Where are they stored?
- Are you introducing any new policies/roles/users?
  - Have you used the least-privilege principle? How?


By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license.

Co-authored-by: Sofia Sazonova <[email protected]>
  • Loading branch information
SofiaSazonova and Sofia Sazonova authored Aug 30, 2024
1 parent 0b3c95e commit 1a994c0
Showing 1 changed file with 10 additions and 7 deletions.
17 changes: 10 additions & 7 deletions pages/deploy/deploy_aws.md
Original file line number Diff line number Diff line change
Expand Up @@ -504,7 +504,8 @@ the different configuration options.
"env_aws_actions": true,
"cdk_pivot_role_multiple_environments_same_account": false,
"enable_quicksight_monitoring": false
}
},
"log_query_period_days": 1
}
}
```
Expand Down Expand Up @@ -599,17 +600,19 @@ a particular feature in the core is to add it to the core section of the `config
"env_aws_actions": true,
"cdk_pivot_role_multiple_environments_same_account": false,
"enable_quicksight_monitoring": false
}
},
"log_query_period_days": 1
}
```
This is the list of core features that can currently be customized. Take it as an example if you need to
disable or modify the bahavior any other core feature.

| **Feature** | **Module** | **Description** |
|-----------------------|----------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| env_aws_actions | environments | If set to True, users can get AWS Credentials and assume Environment Group IAM roles from data.all's UI |
| cdk_pivot_role_multiple_environments_same_account | environments | If set to True, the CDK-created pivot role as part of the environment stack will be region specific (`dataallPivotRole-cdk-<region>`). This feature allows users to create multiple data.all environments in the same account but multiple regions. |
| enable_quicksight_monitoring | environments | If set to **true**, RDS security groups and VPC NACL rules are modified to allow connection of the RDS metadata database with Quicksight in the infrastructure account (default: false) |
| **Feature** | **Module** | **Description** |
|-----------------------|--------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| env_aws_actions | environments | If set to True, users can get AWS Credentials and assume Environment Group IAM roles from data.all's UI |
| cdk_pivot_role_multiple_environments_same_account | environments | If set to True, the CDK-created pivot role as part of the environment stack will be region specific (`dataallPivotRole-cdk-<region>`). This feature allows users to create multiple data.all environments in the same account but multiple regions. |
| enable_quicksight_monitoring | environments | If set to **true**, RDS security groups and VPC NACL rules are modified to allow connection of the RDS metadata database with Quicksight in the infrastructure account (default: false) |
| log_query_period_days | global | Specify the time frame for querying the log history. This log history is used for Stacks view and shared log views. |


## 8. Run CDK synth and check cdk.context.json <a name="context"></a>
Expand Down

0 comments on commit 1a994c0

Please sign in to comment.