DevOps Engineers Require Secure Access to CMS Github Bot Account

[olivereri]

Description

CMS Platform owns and manages one GitHub “Bot” account which is used for various procedures in the environments. Generally, this is a Github service account used for automation. The credentials for these accounts are stored in AWS Systems Manager Parameter Store.

To access these accounts, you will need a YubiKey to add to the account.

Acceptance Criteria

• CMS Team members requiring access to VA-CMS-BOT access identified.
• Yubikey Security Keys purchased.
• Security Keys added to VA-CMS-BOT Account.
• Documentation is updated or created to support this process.

Implementation Details

• Recommended Security Key
• Procedures to add a Security Key to an account
• General Github Bot Platform Guidance
• VA-CMS-Bot credentials and other related secrets can be found in DSVA AWS Parameter store /cms/va-cms-bot/

Team

Please check the team(s) that will do this work.

• CMS Team
• Public Websites
• Facilities
• User support

[teeshe]

Got Yubikey added to CMS Github Bot Account after recovery codes were updated to parameter store