Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
Update readme with some psudocode for how infrastructure could be tested within the container
  • Loading branch information
zotoMIT committed Sep 10, 2021
1 parent 0671707 commit e0e9f54
Showing 1 changed file with 23 additions and 0 deletions.
23 changes: 23 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -38,3 +38,26 @@ docker run submitter:latest --
```

note: the application requires being run in an environment with Roles based access to the AWS resources.

## The role attached to the container should allow the following, in its appropriate environment (stage or prod), stage given below:

test whether environment exists - get env variable for `ssm_path`, if it doesn't exist, dont move on.

test whether we can get an encrypted ssm parameter
ssm get value - `(ssm_path)/secure`
if value == true, or success? yes (unsure whether to check contents or just try/catch getting it at all)
- note: encrypted parameters require additional permissions, which is why we need to test a secure string specifically

test whether we can read from, and write to sqs queues
queue names exist in ssm parameters, these values are normally brought in via messages from the input queue itself.
params: all prepended by (ssm_path)
`SQS_dss_etd_output_queue`
`SQS_dss_input_queue`
`SQS_dss_wiley_output_queue`

test whether we can read from, and list objects from the following s3 buckets:
`thesis_submit_s3_bucket_arn`
eventually - `wiley_s3_bucket_arn`



0 comments on commit e0e9f54

Please sign in to comment.