On 2/27/19 11:29 PM, Clement Verna wrote:
On Wed, 27 Feb 2019 at 22:11, Jim Perrin <jperrin(a)redhat.com>
wrote:
>
> How much heresy is involved in us using Amazon's elasticsearch service
> for this, so that we don't have yet-another-thing to maintain?
If we want to proceed with elasticsearch I think that this is indeed a
good way forward. What would it take to use our current AWS account to
setup a test cluster ?
A bit of time writing up some lambda rules to restrict aws resources to
fas groups so that we can provide appropriate boundaries based on group
(
https://aws.amazon.com/blogs/security/how-to-automatically-tag-amazon-ec2...
)
A fas group for the folks doing the work, and then someone to do it,
roughly speaking.
<MUCH TRIMMING OF MESSAGE THREAD>