Skip to main content

Onboarding a Tenant

Metadata

ID Created Author Status
0003 08/04/2024 Jacob Woffenden 🟡 In Review

Currently there is no formal process for onboarding a tenant onto Observability Platform.

The informal process is:

  1. Observability Platform agree to onboard tenant.

  2. Tenant creates Observability Platform read-only resources in their account(s).

    module "observability_platform" {
  source  = "ministryofjustice/observability-platform-tenant/aws"
  version = "<see https://registry.terraform.io/modules/ministryofjustice/observability-platform-tenant/aws/latest for latest>"

  observability_platform_account_id = local.environment_management.account_ids["observability-platform-production"]
}

  3. Tenant provides

    • Tenant name (e.g. Analytical Platform)
    • AWS IAM Identity Center team (e.g. analytical-platform)
    • AWS account(s) and configuration

  4. Observabilty Platform creates tenant configuration in modernisation-platform-environments (observability-platform/environment-configurations.tf)

    tenant_configuration = {
  "tenant-name" = {
    identity_centre_team = "<AWS IAM Identity Center team>"
    aws_accounts = {
      "observability-platform-production" = {
        cloudwatch_enabled = true
        ...
      }
    }
  }
}
This page was last reviewed on 4 December 2024. It needs to be reviewed again on 4 March 2025 by the page owner #observability-platform .