Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Docker] AppInsights Workpace and non-private tag #3683

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

fhibf
Copy link
Contributor

@fhibf fhibf commented Jan 22, 2024

Description

Changes in the docker template:

  • Assigning a workspace to the Application Insights
  • Adding a "non-personal data" tag to Application Insights.

Testing

Ran the script manually I was able to create the workspace and assign the non-personal tag as expected.

image
image

FHIR Team Checklist

  • CI is green before merge Build Status

Semver Change (docs)

Patch|Skip|Feature|Breaking (reason)

@fhibf fhibf requested a review from a team as a code owner January 22, 2024 22:51
@fhibf fhibf changed the title [Dock Template] Application Insights Workpace and S360 tag [Dock Template] Application Insights Workpace and non-personal data tag Jan 22, 2024
@fhibf fhibf added this to the S133 milestone Jan 22, 2024
@fhibf fhibf added Enhancement Enhancement on existing functionality. Open source This change is only relevant to the OSS code or release. labels Jan 22, 2024
@fhibf fhibf changed the title [Dock Template] Application Insights Workpace and non-personal data tag [Dock Template] AppInsights Workpace and non-personal tag Jan 22, 2024
@fhibf fhibf enabled auto-merge (squash) January 22, 2024 23:09
@fhibf fhibf changed the title [Dock Template] AppInsights Workpace and non-personal tag [Docker] AppInsights Workpace and non-personal tag Jan 22, 2024
@fhibf fhibf changed the title [Docker] AppInsights Workpace and non-personal tag [Docker] AppInsights Workpace and non-private tag Jan 22, 2024
"kind": "web",
"tags": {
"[concat('hidden-link:', variables('appServiceResourceId'))]": "Resource",
"displayName": "AppInsightsComponent",
"FhirServerSolution": "[parameters('solutionType')]"
"FhirServerSolution": "[parameters('solutionType')]",
"Privacy.Asset.NonPersonal": ""
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is this needed in OSS?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

When this script is executed, it creates App Insights resources that can trigger S360 alerts in our subscriptions.
To minimize the number of S360 alerts I thought about adding this tag during the creation of these App Insights.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think this tag is correct for all OSS deployments. We should check w/ Joyce, but my understanding is If you deploy a test OSS solution and you login with your IP address, upn, etc that is still personal data even if it's only employee data.

I would recommend exposing an "additionalTags" variable that is an object and combining it with this tag object. I've seen this done in the past

@fhibf fhibf disabled auto-merge January 23, 2024 01:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Enhancement Enhancement on existing functionality. Open source This change is only relevant to the OSS code or release.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants