Skip to content

BCDA-9400: add tagging to S3 based workflows#1209

Merged
bhagatparwinder merged 3 commits intomainfrom
parwinder/BCDA-9400-add-lifecycle-tagging
Sep 16, 2025
Merged

BCDA-9400: add tagging to S3 based workflows#1209
bhagatparwinder merged 3 commits intomainfrom
parwinder/BCDA-9400-add-lifecycle-tagging

Conversation

@bhagatparwinder
Copy link
Contributor

🎫 Ticket

https://jira.cms.gov/browse/BCDA-9400

🛠 Changes

  • Updated the workflow to add the lifecycle-transition:ia tag when uploading the Lambda deployment package.
  • Every time the workflow uploads a new Lambda deployment package, it will automatically tag the object with lifecycle-transition=ia
  • The S3 lifecycle rule in the CDAP repo will now apply to these tagged objects
  • When a new deployment happens and the previous version becomes "noncurrent", it will automatically transition to Standard-IA storage after 30 days

ℹ️ Context

We were not using lifecycle transitions on our buckets, and a Security Hub control failed. Remediating it by adding a basic lifecycle transition.

The workflow has been updated to include the --tagging "lifecycle-transition=ia" parameter in the S3 upload command.

🧪 Validation

Using the AWS console when the Lambda is deployed into lower environments.

@bhagatparwinder bhagatparwinder requested a review from a team as a code owner September 15, 2025 23:19
@bhagatparwinder bhagatparwinder changed the title add tagging to S3 based workflows BCDA-9400: add tagging to S3 based workflows Sep 15, 2025
@bhagatparwinder bhagatparwinder merged commit 05888f3 into main Sep 16, 2025
15 checks passed
@bhagatparwinder bhagatparwinder deleted the parwinder/BCDA-9400-add-lifecycle-tagging branch September 16, 2025 18:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants