On 2/27/19 11:29 PM, Clement Verna wrote:
On Wed, 27 Feb 2019 at 22:11, Jim Perrin jperrin@redhat.com wrote:
How much heresy is involved in us using Amazon's elasticsearch service for this, so that we don't have yet-another-thing to maintain?
If we want to proceed with elasticsearch I think that this is indeed a good way forward. What would it take to use our current AWS account to setup a test cluster ?
A bit of time writing up some lambda rules to restrict aws resources to fas groups so that we can provide appropriate boundaries based on group ( https://aws.amazon.com/blogs/security/how-to-automatically-tag-amazon-ec2-re... )
A fas group for the folks doing the work, and then someone to do it, roughly speaking.
<MUCH TRIMMING OF MESSAGE THREAD>