Improve CyHy VS and BOD Reports Storage/Access

[climber-girl]

💡 Summary

Please help us create a better solution for storing/accessing the CyHy VS reports! Benefits: higher availability of reports, fewer copies/transfers, better security, automatic retention policies.

Motivation and context

The issues for the current storage system for CyHy VS/BOD reports are two-fold:

• There is no direct access for CISA's CyHy analysts. Right now, the process for analysts to access the reports are copies via email. This means that the VM Dev team sometimes need to manually grab copies of reports for analysts when the current mailbox process fails due to receiving and/or capacity limitations.
• It is not optimized for automatically archiving/deleting reports. This means the VM Dev team periodically needs to remember to purge older reports from the current storage source.

Having an alternate, cloud-native solution (e.g. S3) that is able to provide CISA analysts secure access to the entirety of the reports storage as well as automatically archive older reports would be super helpful, saving both technical resources and personnel time.

Implementation notes

• CyHy-Mailer coding will need to change in a couple places to remove the cyhy_reports mailbox.
• The CyHy team will reach out via email to discuss auto-archive options.

Acceptance criteria

How do we know when this work is done?

• CyHy VS and BOD reports no longer get sent to the CyHy_Reports mailbox
• CyHy VS and BOD reports are available for CISA analysts to access via an alternate access-controlled means
• Instructions for accessing the reports in the new location have been shared with the CyHy team
• The new storage solution automatically archives/deletes old reports

[jsf9k]

The reports cannot exist in a CyHy bucket due to our prohibition on long-term data storage. The bucket will need to be created somewhere else (e.g. the Analytics Environment), and we will need to be able to write to it.

Let us know who your technical contact is for wherever you decide to create the bucket; we can work with them to make sure the access and retention is set up correctly.