feat: add site audit logs generator

[dcshzj]

Problem

Site audit logs are manually created using some script that we have, which brings a lot of overhead and is not an ideal long-term solution.

Solution

Breaking Changes

• Yes - this PR contains breaking changes
• No - this PR is backwards compatible with ALL of the following feature flags in this doc

Features:

• Allow users to self-service request for their site audit logs.

Tests

• Fill in the form, ensuring that you are either an Isomer Admin or a collaborator of the repo(s) that you are requesting site audit logs for.
• Verify that you receive an email with the site audit logs for the repos that you have requested for.
• Try again with an account that is not an Isomer Admin account and the account does not have collaborator access to the repo(s) that you are requesting site audit logs for.
• Verify that you still receive an email, but with an error message saying that you are not a collaborator of the repo(s).

Deploy Notes

New environment variables:

• SITE_AUDIT_LOGS_FORM_KEY : Secret key for the site audit logs form
  • added env var to 1PW + SSM script (fetch_ssm_parameters.sh)

Additional steps

• Create /efs/audit-logs folder on EFS.

[dcshzj]

• feat: add site audit logs generator #1181 👈
• feat(mail): support sending emails with attachments #1180
• develop

This stack of pull requests is managed by Graphite. Learn more about stacking.

Join @dcshzj and the rest of your teammates on Graphite

[kishore03109]

what if this doesnt exist? ie an admin that uses this form that only has email sites?

[dcshzj]

It would be set to undefined, but that is not used anyway since we rely on the accessToken from TokenService.

[kishore03109]

this is confusing to me :(
if it is not needed here, why declare it? doesnt seem like a necessary key too

[dcshzj]

My bad, it is defined and is needed because of this control flow:

isomercms-backend/src/classes/UserSessionData.ts

Lines 32 to 35 in 24658ec

	if (this.isGithubProps(props)) {
	this.githubId = props.githubId
	this.accessToken = props.accessToken
	}

Otherwise, it would not be possible for us to set the accessToken for the request.

[kishore03109]

wait this is an issue right? not all users have a github id, wouldnt this then fail for those users?

[dcshzj]

Adjusted in ae8410a.

[kishore03109]

only real blocking is the error messages returned to agency users

[kishore03109]

only blocking is in verifying that non gh users admin users should be able to use this form to get their site's audit logs