Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Refine and document Policy WG strategy and approach #293

Open
eddie-knight opened this issue Dec 21, 2022 · 5 comments
Open

Refine and document Policy WG strategy and approach #293

eddie-knight opened this issue Dec 21, 2022 · 5 comments
Assignees

Comments

@eddie-knight
Copy link
Contributor

eddie-knight commented Dec 21, 2022

There are a few things that are left to solidify for the policy WG. This may be clear in the WG member's minds, but it should be made clear in some form of documentation so that everyone is on the same page.

Some questions to start:

  • How is each SAA policy documentation created?
  • Who provides input to guide that creation?
  • How are diverse perspectives and experiences brought in from FIs?

From #298:

  • Why does this working group exist?
    • This has already been created for each
  • What are the main, high level objectives this group is working toward?
    • This should be a short list of objectives that contribute to the mission
  • How are each of those objectives being pursued?
    • What type of activities are we doing to make progress?
    • What are some common work items?
    • How do we know when each objective is complete?
  • How is work tracked relating to each of these objectives?
    • The work tracker is already set up, but needs to be documented
    • For common types of work items:
      • How do we know when the work is ready to start?
      • What are the requirements for each to be considered complete?
  • What is the best way for a new contributor to begin contributing to this work?
    • We just need to clarify a practical process for new contributors to get started actively contributing
@eddie-knight
Copy link
Contributor Author

Created a parent / epic to keep track of this #298

@abdullahgarcia
Copy link
Contributor

Thanks @eddie-knight , I'll have a look at this today.

@eddie-knight
Copy link
Contributor Author

eddie-knight commented Jan 18, 2023

Why does this working group exist?

We exist to define and document best practice and process for implementing compliant cloud infrastructure, while streamlining the process for contributions from financial institutions in a frictionless manner.

What are the main, high level objectives this group is working toward?

  • (Outputs) Document how to achieve compliance for different infrastructure resources from a financial perspective
  • (Inputs) Maintain a knowledge base of up-to-date compliance requirements from member financial institutions

How are each of those objectives being pursued?

  • Document opinionated configurations, mitigations, and decisions required to achieve compliance
  • Ensure our compliance definitions are informed by industry-wide experience/feedback
  • Ensure our communication methods (inputs and outputs) are streamlined to best serve our community and users
  • Maintain a list of resources that we want to have documentation/accelerators for
  • The SAA template needs to be reviewed and actively maintained by this WG
  • EKS, OCP, and Fargate work will be the first items to progress

How is work tracked relating to each of these objectives?

  • Github issues on this current repository
  • Track issues on the Policy WG project kanban board

What is the best way for a new contributor to begin contributing to this work?

  • TODO

@eddie-knight
Copy link
Contributor Author

Per @abdullahgarcia on the WG call today, the sequence of work will be to establish a MVP approach using EKS, OCP, and Fargate. Developing a process for gathering FI input on policies will come after confirmation from the policy consumers (FIs + Reproducible Infra WG)

@eddie-knight
Copy link
Contributor Author

Next step is to get this all documented in an easily consumable fashion for both users and contributors. Additional feedback is encouraged on this thread as documentation work continues.

@abdullahgarcia abdullahgarcia moved this from To Do to In Progress in CFI - Policy WG Mar 15, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Archived in project
Development

No branches or pull requests

2 participants