-
Couldn't load subscription status.
- Fork 43
add new page for Shared Responsibility Model #725
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Changes from all commits
Commits
Show all changes
6 commits
Select commit
Hold shift + click to select a range
986e62d
add new page for Shared Responsibility Model
bethadele 2d169e6
PR Suggestions
oredavids df01ae0
Implement quick fixes for typos / voice changes
zackproser b760226
Replace another their with your
zackproser 287bc88
Additional tweaks for legibility
zackproser 725c574
Revert changes to stay-up-to-date guide
oredavids File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
45 changes: 45 additions & 0 deletions
45
_docs-sources/intro/overview/shared-responsibility-model.md
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,45 @@ | ||
| # Shared Responsibility Model | ||
|
|
||
| :::note | ||
|
|
||
| The implementation and maintenance of Gruntwork products in AWS is a shared responsibility between Gruntwork and the customer. | ||
|
|
||
| ::: | ||
|
|
||
| ## Gruntwork is responsible for: | ||
|
|
||
| 1. Providing a tested, updated, and richly featured collection of infrastructure code for the customer to use. | ||
| 1. Maintaining a healthy Knowledge Base community where other engineers (including Grunts) post & answer questions. | ||
| 1. For Pro / Enterprise Support customers: Answering questions via email and Slack. | ||
| 1. For Reference Architecture customers: | ||
| 1. Generating the initial Reference Architecture based on our customer’s selections of available configurations. This includes: | ||
| 1. Our implementation of Landing Zone | ||
| 1. A complete sample app with underlying database and caching layer | ||
| 1. The Gruntwork Pipeline for deploying changes to infrastructure | ||
| 1. An overview of how to use the Reference Architecture | ||
| 1. Deploying the initial Reference Architecture into the customer’s brand new empty AWS accounts. | ||
| 1. Delivering the initial Reference Architecture Infrastructure as Code to the customer. | ||
| 1. Providing resources to the customer for deeply understanding the inner workings of the Reference Architecture. | ||
| 1. For CIS customers: | ||
| 1. Providing IaC libraries to the CIS customer that correctly implement CIS requirements and restrictions. | ||
| 1. For aspects of the CIS AWS Foundations Benchmark where those requirements cannot be met by modules, but require human intervention, provide instructions on manual steps the customer must take to meet the requirements. | ||
| 1. For CIS Reference Architecture customers, deploying a Reference Architecture and providing access to infrastructure code that implements the CIS AWS Foundations Benchmark requirements out-of-the-box, wherever possible. | ||
|
|
||
| ## As a Gruntwork customer, you are responsible for: | ||
|
|
||
| 1. Staffing appropriately (as described in the [Prerequisites Guide](/intro/overview/reference-architecture-prerequisites-guide/)) to maintain and customize the modules and (if applicable) the Reference Architecture and to understand how the Gruntwork product works so that changes can be made to customize it to the customer’s needs. | ||
| 1. Raise limitations of Gruntwork modules as a feature request or a pull request. | ||
| 1. N.B., Gruntwork does not guarantee any turn-around time on getting features built or PRs reviewed and merged. Gruntwork modules must also be applicable to a wide range of companies, so we will be selective about features added and pull requests accepted. | ||
| 1. Adding additional Infrastructure as Code to customize it for your company. | ||
| 1. Communicating with AWS to fix account issues and limitations beyond Gruntwork’s control (quotas, account verification, et cetera). | ||
| 1. For Reference Architecture customers: | ||
| 1. Following all provided manual steps in the Reference Architecture documents where automation is not possible. There are certain steps a Reference Architecture customer must perform on their own. Please keep an eye out for emails from Gruntwork engineers when you are configuring your Reference Architecture form for | ||
| deployment. | ||
| 1. Extending and customizing Gruntwork Pipelines beyond the basic CI/CD pipeline that Gruntwork has provided to suit your deployment requirements. | ||
| 1. Designing and implementing your AWS infrastructure beyond the Reference Architecture. | ||
| 1. Understanding and awareness of AWS resource costs for all infrastructure deployed into your AWS accounts ([Knowledge Base #307](https://github.com/gruntwork-io/knowledge-base/discussions/307) for Ref Arch baseline). | ||
| 1. Once deployed, maintaining the Reference Architecture to keep it secure and up to date. | ||
| 1. Keeping the Reference Architecture secure in accordance with their company needs. | ||
| 1. Understanding and accepting the security implications of any changes made to the Reference Architecture. | ||
| 1. Monitoring Gruntwork repositories for updates and new releases and applying them as appropriate. | ||
| 1. Maintaining all compliance standards after the Reference Architecture has been delivered. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,53 @@ | ||
| # Shared Responsibility Model | ||
|
|
||
| :::note | ||
|
|
||
| The implementation and maintenance of Gruntwork products in AWS is a shared responsibility between Gruntwork and the customer. | ||
|
|
||
| ::: | ||
|
|
||
| ## Gruntwork is responsible for: | ||
|
|
||
| 1. Providing a tested, updated, and richly featured collection of infrastructure code for the customer to use. | ||
| 1. Maintaining a healthy Knowledge Base community where other engineers (including Grunts) post & answer questions. | ||
| 1. For Pro / Enterprise Support customers: Answering questions via email and Slack. | ||
| 1. For Reference Architecture customers: | ||
| 1. Generating the initial Reference Architecture based on our customer’s selections of available configurations. This includes: | ||
| 1. Our implementation of Landing Zone | ||
| 1. A complete sample app with underlying database and caching layer | ||
| 1. The Gruntwork Pipeline for deploying changes to infrastructure | ||
| 1. An overview of how to use the Reference Architecture | ||
| 1. Deploying the initial Reference Architecture into the customer’s brand new empty AWS accounts. | ||
| 1. Delivering the initial Reference Architecture Infrastructure as Code to the customer. | ||
| 1. Providing resources to the customer for deeply understanding the inner workings of the Reference Architecture. | ||
| 1. For CIS customers: | ||
| 1. Providing IaC libraries to the CIS customer that correctly implement CIS requirements and restrictions. | ||
| 1. For aspects of the CIS AWS Foundations Benchmark where those requirements cannot be met by modules, but require human intervention, provide instructions on manual steps the customer must take to meet the requirements. | ||
zackproser marked this conversation as resolved.
Show resolved
Hide resolved
|
||
| 1. For CIS Reference Architecture customers, deploying a Reference Architecture and providing access to infrastructure code that implements the CIS AWS Foundations Benchmark requirements out-of-the-box, wherever possible. | ||
|
|
||
| ## As a Gruntwork customer, you are responsible for: | ||
|
|
||
| 1. Staffing appropriately (as described in the [Prerequisites Guide](/intro/overview/reference-architecture-prerequisites-guide/)) to maintain and customize the modules and (if applicable) the Reference Architecture and to understand how the Gruntwork product works so that changes can be made to customize it to the customer’s needs. | ||
zackproser marked this conversation as resolved.
Show resolved
Hide resolved
|
||
| 1. Raise limitations of Gruntwork modules as a feature request or a pull request. | ||
| 1. N.B., Gruntwork does not guarantee any turn-around time on getting features built or PRs reviewed and merged. Gruntwork modules must also be applicable to a wide range of companies, so we will be selective about features added and pull requests accepted. | ||
| 1. Adding additional Infrastructure as Code to customize it for your company. | ||
| 1. Communicating with AWS to fix account issues and limitations beyond Gruntwork’s control (quotas, account verification, et cetera). | ||
| 1. For Reference Architecture customers: | ||
| 1. Following all provided manual steps in the Reference Architecture documents where automation is not possible. There are certain steps a Reference Architecture customer must perform on their own. Please keep an eye out for emails from Gruntwork engineers when you are configuring your Reference Architecture form for | ||
| deployment. | ||
| 1. Extending and customizing Gruntwork Pipelines beyond the basic CI/CD pipeline that Gruntwork has provided to suit your deployment requirements. | ||
| 1. Designing and implementing your AWS infrastructure beyond the Reference Architecture. | ||
| 1. Understanding and awareness of AWS resource costs for all infrastructure deployed into your AWS accounts ([Knowledge Base #307](https://github.com/gruntwork-io/knowledge-base/discussions/307) for Ref Arch baseline). | ||
| 1. Once deployed, maintaining the Reference Architecture to keep it secure and up to date. | ||
| 1. Keeping the Reference Architecture secure in accordance with their company needs. | ||
zackproser marked this conversation as resolved.
Show resolved
Hide resolved
|
||
| 1. Understanding and accepting the security implications of any changes made to the Reference Architecture. | ||
| 1. Monitoring Gruntwork repositories for updates and new releases and applying them as appropriate. | ||
| 1. Maintaining all compliance standards after the Reference Architecture has been delivered. | ||
|
|
||
|
|
||
| <!-- ##DOCS-SOURCER-START | ||
| { | ||
| "sourcePlugin": "local-copier", | ||
| "hash": "7c6a3318381f1d2e939d82db1c179334" | ||
| } | ||
| ##DOCS-SOURCER-END --> | ||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.