Skip to content

Jv/quick/bb2bucket - #577

Open
jasonvinson wants to merge 5 commits into
mainfrom
jv/quick/bb2bucket
Open

Jv/quick/bb2bucket#577
jasonvinson wants to merge 5 commits into
mainfrom
jv/quick/bb2bucket

Conversation

@jasonvinson

@jasonvinson jasonvinson commented Aug 18, 2026

Copy link
Copy Markdown
Contributor

🎫 Ticket

https://jira.cms.gov/browse/...

🛠 Changes

  • establish bucket for bb2 quicksight data exports

ℹ️ Context

There is an initiative to centralize all AWS Quick dashboards in the DASG Insights account. This bucket will allow a lambda in BB's account to export the CSVs used in their Quick dashboards to our prod account, which can be read by Quick in the DASG Insights account.

🧪 Validation

Will test alongside a member of BB after deployment. Plan will fail until new SOPs params are applied.

@jasonvinson
jasonvinson requested a review from a team as a code owner August 18, 2026 21:22
Comment thread terraform/services/insights/export-buckets/bb2/conf.sh
Comment thread terraform/services/insights/export-buckets/bb2/main.tf Outdated
Comment thread terraform/services/insights/export-buckets/bb2/main.tf Outdated
Resource = "*"
Condition = {
StringEquals = {
"kms:ViaService" = "secretsmanager.${module.standards.primary_region.name}.amazonaws.com"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is something new using secretsmanager?

}

locals {
quicksight_role_arn = "arn:aws:iam::${data.aws_ssm_parameter.dasg_insights_account_id.value}:role/service-role/aws-quicksight-service-role-v0"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this a required naming convention for quick?


terraform {
backend "s3" {
key = "insights/export-buckets/bb2/terraform.tfstate"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is there a reason these resources are nested?

@@ -0,0 +1 @@
TARGET_ENVS="cdap-prod"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm not sure these will be traversed if they're nested.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants