1110907 - Buildout of mofosecure sendto.mozilla.org failover

Status: RESOLVED FIXED

(Webmaker Graveyard :: DevOps, defect)

Description

[JP Schneider :jp]

S3 bucket, logging bucket, Cloudfrnt distro, SSL, monitoring, cloudtrail for auditing.

Comment 1

[JP Schneider :jp]

S3 bucket created on mofosecure, in US-Standard.
* Versioning On
* Public access for read (website standard config)
* Logging to the mofosecure-techops/logs/sendto.mozilla.org/ bucket/folder
* Only admin write access
* Default index.html, which will not exist.  Anything other than paths we will eventually redirect.

Comment 2

[JP Schneider :jp]

Cloudfront distribution created:

* d94ya7facqszn.cloudfront.net
* Logging to mofosecure-techops/logs/sendto.mozilla.org-cf/
* No headers forwarded (may want to change)
* 0 TTL (should be no-cache, verify)
* 
Edit
Distribution ID
E1U9CRFMMZ0GN4
Log Prefix
logs/sendto.mozilla.org-cf/
Delivery Method
Web
Cookie Logging
On
Distribution Status
InProgress
Comment
sendto.mozilla.org failover
Price Class
Use All Edge Locations (Best Performance)
State
Enabled
Alternate Domain Names (CNAMEs)
sendto.mozilla.org
SSL Certificate
Default CloudFront Certificate (*.cloudfront.net)
Domain Name
d94ya7facqszn.cloudfront.net
Custom SSL Client Support
-
Default Root Object
-
Last Modified
2014-12-12 12:18 UTC-6
Log Bucket
mofosecure-techops.s3.amazonaws.com

Need to get SSL up, and decide what headers/cookies need to be passed, if any.
jbuck scott, any headers, query strings, or cookies we need to pass through to origin?

Comment 3

[Jon Buckley [:jbuck]]

no headers, query strings or cookies need to be passed to the origin

Comment 4

[JP Schneider :jp]

Cloudtrail activity auditing/logging has been activated, and pointed to mofosecure-techops/cloudtrail/

Thanks Jon

Comment 5

[JP Schneider :jp]

The infrastructure is all set and ready.  The DNS failover setup has been setup, and is ready for us to get a form up, test the form, test the failover process, test the alerting, and then go live with.

Comment 6

[JP Schneider :jp]

Mari is getting me hooked up with a credit card for this, so we're all set for infra!  We'll test in other bugs.