[GH Request] Rotate openedx-github-action-ecr-user key

[katebygrace]

Firm Name

2u

Urgency

Medium (< 2 weeks)

Problem/Request

I'd like to rotate the AWS access key for the openedx ECR user. I have the new value (and it's attached to the same user); let me know how to transmit this. It should be an easy swap for anyone with access to the "secrets" section in github settings.

Reasoning

Security :) (feel free to message me @knachbar on slack for details!)

[openedx-workflow-automation]

Thank you for your report! @openedx/axim-oncall will triage within a business day. Simple requests usually take 2-3 business days to resolve; more complex requests could take longer.

[katebygrace]

Hey @ormsbee ! What's a good way to transfer a key your way?

[ormsbee]

@katebygrace: Do you have access to the Keeper folder shared between 2U and Axim/tCRIL named "edx-platform GitHub Move"? That's where we shared the credential the last time–could you please add a new entry for this one?

Thank you.

[katebygrace]

@ormsbee I don't, for some reason; can you add me? knachbar@2u.com

[ormsbee]

I'd added you. FWIW, @adzuci is the owner of that folder.

[brian-smith-tcril]

@katebygrace do you have the access you need now? Is there something more that needs to happen or can I close this issue out?

[katebygrace]

Heyo, was out, looking now

[katebygrace]

Hmm, I still don't see it, @matthugs doesnt have access either

[katebygrace]

finally got permissions, or added a new record in there called 2023-openedx-github-action-ecr-user

let me know when thats rotated so i can decommision the old one @brian-smith-tcril / @ormsbee

[brian-smith-tcril]

Worked through this with @katebygrace in DMs and everything should be all good now!