|
|
@@ -77,8 +77,9 @@ Update TF code and remove whitelisted SG IPs and/or rules to remove access from
|
|
|
|
|
|
### Remove the GovCloud and Commercial AWS account ID from Packer and Salt
|
|
|
|
|
|
+You can lookup the account numbers here, but DO NOT remove them from the wiki.
|
|
|
https://github.xdr.accenturefederalcyber.com/mdr-engineering/msoc-infrastructure/wiki/Cloud-Accounts
|
|
|
-Search the msoc-infrastructure.wiki repo for customer short name and remove references.
|
|
|
+
|
|
|
|
|
|
- Create new git branch in msoc_infrastructure
|
|
|
- Remove Packer AWS accounts in packer/Makefile
|
|
|
@@ -93,6 +94,7 @@ Remove references of the customer from these places:
|
|
|
- Splunk Monitoring Console - salt/pillar/mc_variables.sls
|
|
|
- Salt master configs in salt/fileroots/salt_master/files/etc/salt/master.d/default_acl.conf )
|
|
|
- Delete Salt Splunk files - salt/pillar/${CUSTOMERPREFIX}_variables.sls salt/pillar/${CUSTOMERPREFIX}_pop_settings.sls
|
|
|
+- Delete folder for Splunk license - salt/fileroots/splunk/files/licenses/${CUSTOMERPREFIX}
|
|
|
- Salt top.sls and pillar/top.sls - salt/fileroots/top.sls - salt/pillar/top.sls
|
|
|
- Salt okta auth in salt/pillar/os_settings.sls
|
|
|
- Salt gitfs pillar in salt/pillar/salt_master.sls
|
|
|
@@ -200,7 +202,7 @@ Please inform the CAMRS team that these AWS Accounts for <CUSTOMER-PREFIX> are n
|
|
|
### Update the AWS Configuration
|
|
|
files/config in infrastructure-notes
|
|
|
|
|
|
-Mark the AWS Account decommissioned in the WIKI once the email to help desk has been sent. We should keep the AWS Account numbers just in case they are needed in the future.
|
|
|
+Mark the AWS Account decommissioned in the WIKI once the email to decommission the AWS account has been sent. We should keep the AWS Account numbers just in case they are needed in the future.
|
|
|
https://github.xdr.accenturefederalcyber.com/mdr-engineering/msoc-infrastructure/wiki/Cloud-Accounts
|
|
|
|
|
|
|
Brad Poulton