add FAQ: Separate data environment (#439)

cloudposse · Jan 13, 2020 · 72a60a9 · 72a60a9
1 parent 1db9ed9
commit 72a60a9
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/content/faq/separate-data-environment.md b/content/faq/separate-data-environment.md
@@ -0,0 +1,18 @@
+---
+title: "Should we operate a separate data environment with special access to production resources?"
+description: "Yes, we recommend provisioning an additional AWS account for data processing and analytics."
+tags:
+- production
+- data environment
+- AWS
+- CDE
+---
+
+## Question
+
+Should we consider operating a separate data environment that is granted special access to production resources?
+
+
+## Answer
+
+Yes, we recommend provisioning an additional AWS account for data processing and analytics. Ideally, some kind of ETL process scrubs the data before shipping it to a non-cardholder data environment (CDE).