Skip to content

CHECK FINAL SCM


**Description:**

We need to standardize the data processing for our SCM business process.     
Please implement the following roles, policies, and usages:

> **POLICY REVIEW ROLES**

### AWS EventBridge Scheduler:
- Role must be `role_sls_eu2__z2_ppd_sls10524_scm_eventbridge_scheduler`

### AWS StepFunction:
- Role must be `role_sls_eu2__z2_ppd_sls10524_scm_stepfunction`

### AWS Glue Job:
- Role must be `role_sls_eu2__z2_ppd_sls10524_scm_glue_job_dataproduct`
- Remove if present: `role_sls_eu2__z2_ppd_sls10524_itm_glue_job_dataproduct`

### AWS Glue Crawler:
- Role must be `role_sls_eu2__z2_ppd_sls10524_scm_glue_crawler_s3`
- Remove if present: `role_sls_eu2__z2_ppd_sls10524_itm_glue_crawler_s3`

### AWS CloudWatch:
- Log group must use `kms_sls_eu2__z2_ppd_sls10524_scm_cloudwatch_log`
- Check and enforce retention policy

### Acceptance Criteria:

1. **AWS EventBridge Scheduler:**
    - Ensure that the role used is `role_sls_eu2__z2_ppd_sls10524_scm_eventbridge_scheduler`.
    - Verify that no other roles are being used for the EventBridge Scheduler in the SCM business process.

2. **AWS StepFunction:**
    - Ensure that the role used is `role_sls_eu2__z2_ppd_sls10524_scm_stepfunction`.
    - Verify that no other roles are being used for the StepFunction in the SCM business process.

3. **AWS Glue Job:**  -- done on another issue
    - Ensure that the role used is `role_sls_eu2__z2_ppd_sls10524_scm_glue_job_dataproduct`.
    - Verify and remove if the role `role_sls_eu2__z2_ppd_sls10524_itm_glue_job_dataproduct` is present in the SCM business process.

4. **AWS Glue Crawler:** -- done on another issue
    - Ensure that the role used is `role_sls_eu2__z2_ppd_sls10524_scm_glue_crawler_s3`.
    - Verify and remove if the role `role_sls_eu2__z2_ppd_sls10524_itm_glue_crawler_s3` is present in the SCM business process.

5. **AWS CloudWatch:** -- done on another issue
    - Ensure that the log group is using `kms_sls_eu2__z2_ppd_sls10524_scm_cloudwatch_log`.
    - Verify and enforce the retention policy for the CloudWatch log group is applied correctly.

6. **Documentation:**
    - Document all the changes made and share it with the relevant stakeholders.
    - Ensure that the documentation includes details of the validation and enforcement steps taken.

7. **Review and Approval:**
    - All changes must be reviewed and approved by the DevOps team lead.
Edited by Hoang-Long VU