Commit Graph

9418 Commits

Author SHA1 Message Date
Ryan Ahearn
db62e318ca Address moderate and low owasp findings
* CORS headers removed because browsers should not interact with API directly
* Updated error handling to return expected content-type for JSON error messages
2023-04-19 09:27:24 -04:00
Ryan Ahearn
81f36182e8 Merge pull request #232 from GSA/remove-contact-list-upload
Remove contact list upload bucket & db table (API)
2023-04-14 12:05:10 -04:00
Ryan Ahearn
b223f0c249 Force redeploy of egress proxies 2023-04-12 16:11:10 -04:00
Ryan Ahearn
e07b596857 Remove contact list db, dao, and s3 code 2023-04-12 15:01:24 -04:00
Ryan Ahearn
f7418d62cb Remove ServiceContactList from db 2023-04-12 13:30:13 -04:00
Kenneth Kehl
27d86c949a #224 remove crown (#228)
Co-authored-by: Kenneth Kehl <@kkehl@flexion.us>
2023-04-11 16:29:37 -04:00
Steven Reilly
25a89458c8 remove real endpoint from test suite (#227) 2023-04-11 12:24:01 -04:00
Steven Reilly
7038ffb0a4 Merge pull request #225 from GSA/iam-rule-testing
Keep development SES & SNS keys open
2023-04-06 10:56:47 -04:00
Ryan Ahearn
180184e58d Ensure developers can still access SES & SNS from workstations 2023-03-31 15:35:26 -04:00
Ryan Ahearn
67e9399a22 Clean up sandbox deploy docs 2023-03-31 09:32:13 -04:00
Ryan Ahearn
ac20a0ed65 Bring bootstrap module back into working order with versioned s3 module 2023-03-31 07:54:06 -04:00
Ryan Ahearn
8bcb9f3aae Merge pull request #221 from GSA/redis-4.5.4
Update dependencies (API)
2023-03-29 17:23:52 -04:00
Ryan Ahearn
6118394f02 Remove ignore-vulnerability for remediated redis vuln 2023-03-29 17:04:43 -04:00
Ryan Ahearn
7fec60c473 Update dependencies 2023-03-29 17:04:27 -04:00
Ryan Ahearn
eac89ac300 Merge pull request #218 from GSA/ignore-known-redis-vuln
Ignore known issue with redis 4.5.3 (API)
2023-03-28 11:16:49 -04:00
Ryan Ahearn
8e64fb12ba Ignore known issue with redis 4.5.3 2023-03-28 09:06:21 -04:00
Ryan Ahearn
a528282c13 Merge pull request #216 from GSA/dependabot/pip/redis-4.5.3
Bump redis from 4.5.1 to 4.5.3
2023-03-28 08:28:24 -04:00
dependabot[bot]
c4b725c7ba Bump redis from 4.5.1 to 4.5.3
Bumps [redis](https://github.com/redis/redis-py) from 4.5.1 to 4.5.3.
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](https://github.com/redis/redis-py/compare/v4.5.1...v4.5.3)

---
updated-dependencies:
- dependency-name: redis
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-03-27 21:49:15 +00:00
Ryan Ahearn
517d4da20e Merge pull request #215 from GSA/update-system-description-link
Update link to usnotify-ssb
2023-03-27 15:29:38 -04:00
Ryan Ahearn
25c36fea45 Update link to usnotify-ssb 2023-03-27 15:10:36 -04:00
Ryan Ahearn
bac9978ce2 Merge pull request #212 from GSA/update-terraform-triggers
Run terraform on deploy when shared modules change
2023-03-27 10:42:39 -04:00
Ryan Ahearn
d341a8f4c4 Run terraform on deploy when shared modules change 2023-03-27 08:43:49 -04:00
Ryan Ahearn
4039f76a87 Merge pull request #209 from GSA/fix-demo-egress-config
Allow demo to send SMS via us-east-1 region through proxy
2023-03-24 11:24:15 -04:00
Ryan Ahearn
c64bc49621 Allow demo to send SMS via us-east-1 region through proxy 2023-03-24 11:08:17 -04:00
Ryan Ahearn
111891751e Merge pull request #205 from GSA/restage-apps
Add workflow to restage apps
2023-03-22 10:28:57 -04:00
Ryan Ahearn
7fd68ef8d4 Merge pull request #204 from GSA/bind-sns-numbers
Configure default SMS from-number in production
2023-03-22 10:11:30 -04:00
Ryan Ahearn
3c8aa65595 Match prod space name to environment name 2023-03-21 17:51:06 -04:00
Ryan Ahearn
46f59bfd14 Run restage workflow by hand 2023-03-21 17:51:06 -04:00
Ryan Ahearn
7ddf125807 Enable SMS in production account 2023-03-21 14:28:32 -04:00
Ryan Ahearn
41c1e6d4bb Set default phone number for sandbox env 2023-03-21 14:23:57 -04:00
Ryan Ahearn
82871abc7e Merge pull request #202 from GSA/terraform-drift
Add infrastructure drift detector
2023-03-20 16:21:29 -04:00
Ryan Ahearn
303595d16b Add warning about database backups 2023-03-20 15:53:30 -04:00
Ryan Ahearn
3a21787089 Add documentation about nightly GitHub Actions scans 2023-03-20 15:50:47 -04:00
Ryan Ahearn
07f3e66171 Add infrastructure drift detector 2023-03-20 14:11:01 -04:00
Ryan Ahearn
5f56186859 Merge pull request #197 from GSA/dev-infra-setup
Add scripts for provisioning development credentials
2023-03-15 16:40:40 -04:00
Ryan Ahearn
bea7a55e4a Make sure we're in the correct directory
this will make relative paths and terraform find the correct files
2023-03-15 16:24:02 -04:00
Steven Reilly
8d87b6ec09 Add a total-message daily limit (#195) 2023-03-14 16:28:38 -04:00
Ryan Ahearn
9eb075f074 Address PR feedback 2023-03-14 15:36:32 -04:00
Ryan Ahearn
778a41a1cb Put api in key name so we can easily add a key for shared buckets to admin 2023-03-13 14:15:22 -04:00
Ryan Ahearn
84e7e9b5cf Use credentials output by terraform/development 2023-03-13 13:44:10 -04:00
Ryan Ahearn
627149402c Add terraform/development for retrieving credentials for local development use 2023-03-13 13:44:10 -04:00
Steven Reilly
886db509a0 update docs for project setup (#190) 2023-03-07 09:56:12 -05:00
Ryan Ahearn
a0fab5546e Merge pull request #189 from GSA/remove-letters-permissions
Drop send_letters permissions for existing users
2023-03-06 09:34:26 -05:00
Ryan Ahearn
8b0d8ceb8b Drop send_letters permissions for existing users 2023-03-06 09:16:25 -05:00
Ryan Ahearn
3ad64e7176 Merge pull request #187 from GSA/use-sns-service
Use sns service
2023-03-03 16:42:39 -05:00
Ryan Ahearn
22aa7e2787 Remove default creds from s3 module 2023-03-03 16:01:12 -05:00
Ryan Ahearn
cb4ab8fb16 Remove obsolete references to AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY 2023-03-03 15:45:04 -05:00
Ryan Ahearn
40ec79e74c Only use service sender value if it is valid for SNS OriginationNumber 2023-03-03 15:40:21 -05:00
Ryan Ahearn
36975dda07 Ensure CI runs have proper phone number format 2023-03-03 14:13:58 -05:00
Ryan Ahearn
c58a151e65 Merge branch 'main' into use-sns-service
* main:
  Remove letters-related code (#175)
2023-03-03 08:53:32 -05:00