alphagov / paas-csls-splunk-broker

paas-csls-splunk-broker allows GOV.UK PaaS tenants to ship/store their application logs in Splunk managed by the GDS Cyber Security Team.

csls-splunk-broker

Overview

csls-splunk-broker allows GOV.UK PaaS tenants to ship/store their application logs in Splunk managed by the GDS Cyber Security Team.

PLEASE NOTE: This is only available to GOV.UK PaaS tenants in the Cabinet Office/Government Digital Service.

Documentation

• User guidance for GOV.UK PaaS tenants
• Operator guidance for development & deployment
• Architectual overview & design decisions

In particular, note the decisions made when the GOV.UK PaaS team took ownership.

Owners

This project was a joint effort between Reliability Engineering, GOV.UK PaaS and Cyber Security.

paas-csls-splunk-broker's Issues

Switch to HTTP API Gateway to reduce costs

What

Migrate the terraform to use the new v2 Basic HTTP API gateway resources instead of the old v1 REST API Gateway that is currently in use.

Why

To reduce the costs of traffic through the Adapter by ~60% and reduce some of the terraform boilerplate.

Context

• The Adapter and Broker are both deployed using API Gateway -> Lambda
• When initially built only API Gateway v1 was available (equivalent to the REST-version of API Gateway v2)
• API Gateway v2 is now generally available and offers HTTP APIs
• HTTP APIs have less configuration to manage
• HTTP APIs are about 60% cheaper per API call