From ec0a73ed9b9336483236fe16a2cfc75e9bb4bc6f Mon Sep 17 00:00:00 2001 From: Aga Dufrat Date: Wed, 22 Nov 2023 14:42:48 +0000 Subject: [PATCH] Update AWS tagging doc The `Service` tag was accidentally moved to the Mandatory section. This tag should remain optional as the mandatory `Product` and `System` tags tend to provide enough information about the AWS resources so it may not be necessary to incude it for all resources. --- source/manuals/aws-tagging.html.md.erb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/source/manuals/aws-tagging.html.md.erb b/source/manuals/aws-tagging.html.md.erb index 2f740d5f..82bc1932 100644 --- a/source/manuals/aws-tagging.html.md.erb +++ b/source/manuals/aws-tagging.html.md.erb @@ -40,12 +40,12 @@ In future, we may wish to consider mechanisms such as alerting on untagged resou - `Product`: for example `GOV.UK` or `DSP` - `System`: the name of the software system (for example `Authentication` or `Identity proofing and verification core`. Avoid abbreviations) - - `Service`: used to describe the function of a particular resource (for example: `account management`, `session storage`, `front end`) - `Environment`: should be one of `production`, `staging`, `integration`, or `development`. - `Owner`: an email address for an owner for the resource. For dev environments, this will be an individual email address; elsewhere it will be a group address. ### Optional + - `Service`: used to describe the function of a particular resource (for example: `account management`, `session storage`, `front end`) - `Source`: the URL(s) for any source code repositories related to this resource, separated by spaces - `Exposure` : should specify the level of exposure the resource has to determine its attack surface area. (for example `internal` or `external`) - `Data Classification` : should specify the highest data classification level the resource handles. This will help internal security teams to know what level of controls to apply and help focus on the resources with greatest level of risk.