Assume responsibility for the legacy YJAF AWS "Management" Account

[mikereiddigital]

User Story

As a Modernisation Platform Engineer
I need to undertake all the required activities necessary for the Modernisation Platform to take over responsibility for the day to day operation & support of the legacy YJAF AWS "Management" account.
So that the MP team can undertake administrative tasks in those accounts as required by YJAF until the migration of their applications to MP has been completed.

See context/background for further information.

Value / Purpose

The MP team is taking over responsibility from Ops Engineering the above AWS account and associated processes & source code. We need to reach the position where we fully understand the scope of these responsibilities, how we undertake them along with any significant issues.

Context / Background

The Modernisation Platform team will be taking over responsibility for the "Management" AWS account that is one of several used by YJAF to host their applications. The "Management" account is used to host IAM users, roles and policies and this is maintained by the MOJ. The other YJAF accounts are maintained by NEC, a 3rd Party.

The github repo used for the user accounts is https://github.com/ministryofjustice/yjaf-infra-aws-mgmt

Note that the github repo is private.

Existing documentation can be found here -

• https://runbooks.operations-engineering.service.justice.gov.uk/documentation/services/aws/yjaf_account_create.html#yjaf-aws-iam-account-creation
• https://runbooks.operations-engineering.service.justice.gov.uk/documentation/services/aws/yjaf_delete_account.html#yjaf-aws-iam-account-deletion
• https://runbooks.operations-engineering.service.justice.gov.uk/documentation/services/aws/yjaf_password_reset.html
• https://runbooks.operations-engineering.service.justice.gov.uk/documentation/services/aws/yjaf_password_reset.html

Antony Bishop is the Ops Eng contact.

Useful Contacts

Antony Bishop, Simon Pledger

Additional Information

No response

Definition of Done

DoD:

• 1. Engage with Ops Eng to undertake the transfer & their implementation of SSO for the AWS account.
• 2. Confirm all relevant information required - including existing documentation, AWS account details, github repo and the main end-user contacts.
• 3. Understand the responsibilities required of the MP team, including the typical requests made by YJAF, known issues to be dealt with and any significant risks.
• 4. Define & undertake tests to confirm the team is able to deliver their responsibilities.