Government Cyber Coordination Centre - Vulnerability Reporting - Infrastructure as Code
Infrastructure as code (Terraform) for VRS running on AWS.
- Pre-production/staging: https://vulnerability-reporting.nonprod-service.security.gov.uk
- Production: https://vulnerability-reporting.service.security.gov.uk
The security.txt file is generated from security.txt.tmpl and takes variables from cdn/s3.tf - it is updated on every change and deploy or every Wednesday at 9am.
Acknowledgements can be added in the cdn/variables.tf file.
cdn is for CloudFront where S3 is the backend origin, Functions are used to handle traffic dynamically and in a scalable way.
The router JavaScript function has several endpoints.
The router function has a test suite that can be ran by doing:
cd cdn/functions/router/
npm install
npm testdns is the management of the Route53 zone and records.
Utilises the aws-route53-parked-govuk-domain Terraform module for parking the email records.