Companies / Keeper / incidents
Keeper: GovCloud Admin Console login with ARAM permissions
Keeper reported a major GovCloud Admin Console login outage affecting admins with Advanced Reporting & Alerts module (ARAM) permissions, from 2023-08-30 14:03 UTC to 2023-08-30 14:50 UTC (46 min). A subnet VPC routing change caused connectivity issues between backend services and a Redshift cluster; login was restored.
Machine-written from the archived incident (Sol). Check the timeline before relying on it.
Affected components: Keeper Admin Console (GovCloud)Keeper Infrastructure (GovCloud) - Keeper Admin Console (GovCloud)
Timeline of updates
- identified
We have identified an issue affecting users on the Admin Console in the GovCloud region who have administrative rights over Advanced Reporting & Alerts module (ARAM).
- identified
We are continuing to work on a fix for this issue.
- resolved
The issue has been resolved. Console login to GovCloud for users with ARAM reporting administrative functions has been restored.
- postmortem
The GovCloud DevOps team uses automated infrastructure deployment systems via Terraform to manage all environments. A change was made to subnet VPC routing which inadvertently caused connectivity issues between certain backend services and a specific Redshift cluster. This issue affected admins on the Keeper Admin Console who have ARAM permissions applied to their role policies. Delegated admins without reporting permissions were not affected. Vault login and other client-side vault applications were not affected. Recent improvements to the Vault and Admin Console backend APIs masked the issue for the automated detection systems which would have immediately flagged the error and alerted the DevOps team. We have resolved the infrastructure route and updated the monitoring systems to take this into account and will continue to monitor for any future issues.
Rewindex changes for this incident
- Major incident: GovCloud Admin Console login with ARAM permissions 2023-08-30 14:03 UTC
Impact, status and times are the vendor’s own, as last archived. View on stspg.io (opens in new tab). Keeper profile · Recent Keeper incidents · Markdown · JSON