Changes / Keeper / GovCloud Admin Console login with ARAM permissions
Keeper: Major incident: GovCloud Admin Console login with ARAM permissions
Summary
Summary pending. The diff below shows exactly what changed.
What changed
Before: not present
After: GovCloud Admin Console login with ARAM permissions
Before: not present
After: major
Before: not present
After: postmortem
Before: not present
After: 2023-08-30 14:03 UTC
Before: not present
After: 2023-08-30 14:50 UTC
Before: not present
After: Keeper Admin Console (GovCloud), Keeper Infrastructure (GovCloud) - Keeper Admin Console (GovCloud)
Before: not present
After: We have identified an issue affecting users on the Admin Console in the GovCloud region who have administrative rights over Advanced Reporting & Alerts module (ARAM).
Before: not present
After: We are continuing to work on a fix for this issue.
Before: not present
After: The issue has been resolved. Console login to GovCloud for users with ARAM reporting administrative functions has been restored.
Before: not present
After: The GovCloud DevOps team uses automated infrastructure deployment systems via Terraform to manage all environments. A change was made to subnet VPC routing which inadvertently caused connectivity issues between certain backend services and a specific Redshift cluster.
This issue affected admins on the Keeper Admin Console who have ARAM permissions applied to their role policies. Delegated admins without reporting permissions were not affected. Vault login and other client-side vault applications were not affected.
Recent improvements to the Vault and Admin Console backend APIs masked the issue for the automated detection systems which would have immediately flagged the error and alerted the DevOps team. We have resolved the infrastructure route and updated the monitoring systems to take this into account and will continue to monitor for any future issues.
First version of this incident archived by Rewindex. View the live incident.
History of this incident
| When (UTC) | Change | Kind |
|---|---|---|
| Major incident: GovCloud Admin Console login with ARAM permissions (this change) | Major incident |