Details
-
Type: Task
-
Status: Closed (View Workflow)
-
Priority: Major
-
Resolution: Done
-
Affects Version/s: None
-
Fix Version/s: None
-
Labels:
-
Story Points:1
-
Epic Link:
-
Sprint:Fall 3: Oct 12 - Oct 23, Fall 4 Oct 26 - Nov 6, Fall 5 Nov 9 - Nov 20, Fall 6 Nov 30 - Dec 11, Fall 7 Dec 14 - Dec 23
Description
We would like to increase our use of S3 buckets to provide data to IGB client application via HTTP.
However, some people might be tempted to download the entire contents of a bucket using this same mechanism, which would be costly.
Let's investigate: Is there a way that we could restrict HTTP requests to IGB only for an S3 bucket?
For example, could we create some kind of filtering function or setting that would "greenlight" requests that meet some criteria, such as: the application making the request is IGB.
Attachments
Issue Links
Activity
Ann Loraine
created issue -
Ann Loraine
made changes -
Field | Original Value | New Value |
---|---|---|
Epic Link | IGBF-2323 [ 18477 ] |
Ann Loraine
made changes -
Ann Loraine
made changes -
Description |
We would like to use S3 buckets to provide data to IGB via HTTP calls.
However, some people might be tempted to download the entire contents of a bucket using this same mechanism, which would be costly. Let's investigate: Is there a way that we could restrict HTTP requests to IGB only for an S3 bucket. For example, could we create some kind of filtering function or setting that would "greenlight" requests that meet our criteria, e.g., the application making the request is IGB or an application running on a BioViz host? |
|
Story Points | 1 | |
Sprint | Fall 3: Oct 12 - Oct 23 [ 106 ] | |
Labels | Advanced | |
Assignee | Ann Loraine [ aloraine ] |
Ann Loraine
made changes -
Summary | Investigate: How can we ignore all HTTP requests to S3 to IGB only? | Investigate: How to restrict HTTP requests |
Ann Loraine
made changes -
Description |
We would like to use S3 buckets to provide data to IGB via HTTP calls.
However, some people might be tempted to download the entire contents of a bucket using this same mechanism, which would be costly. Let's investigate: Is there a way that we could restrict HTTP requests to IGB only for an S3 bucket. For example, could we create some kind of filtering function or setting that would "greenlight" requests that meet our criteria, e.g., the application making the request is IGB or an application running on a BioViz host? |
We would like to increase our use of S3 buckets to provide data to IGB client application via HTTP.
However, some people might be tempted to download the entire contents of a bucket using this same mechanism, which would be costly. Let's investigate: Is there a way that we could restrict HTTP requests to IGB only for an S3 bucket? For example, could we create some kind of filtering function or setting that would "greenlight" requests that meet some criteria, such as: the application making the request is IGB. |
Ann Loraine
made changes -
Assignee | Chirag Chandrahas Shetty [ chirag24 ] |
Chirag Chandrahas Shetty (Inactive)
made changes -
Assignee | Chirag Chandrahas Shetty [ chirag24 ] | Ann Loraine [ aloraine ] |
Ann Loraine
made changes -
Assignee | Ann Loraine [ aloraine ] | Chirag Chandrahas Shetty [ chirag24 ] |
Chirag Chandrahas Shetty (Inactive)
made changes -
Chirag Chandrahas Shetty (Inactive)
made changes -
Status | To-Do [ 10305 ] | In Progress [ 3 ] |
Ann Loraine
made changes -
Sprint | Fall 3: Oct 12 - Oct 23 [ 106 ] | Fall 3: Oct 12 - Oct 23, Fall 4 Oct 26 - Nov 6 [ 106, 107 ] |
Ann Loraine
made changes -
Rank | Ranked higher |
Chirag Chandrahas Shetty (Inactive)
made changes -
Status | In Progress [ 3 ] | Needs 1st Level Review [ 10005 ] |
Chirag Chandrahas Shetty (Inactive)
made changes -
Assignee | Chirag Chandrahas Shetty [ chirag24 ] | Ann Loraine [ aloraine ] |
Ann Loraine
made changes -
Status | Needs 1st Level Review [ 10005 ] | First Level Review in Progress [ 10301 ] |
Ann Loraine
made changes -
Status | First Level Review in Progress [ 10301 ] | To-Do [ 10305 ] |
Ann Loraine
made changes -
Assignee | Ann Loraine [ aloraine ] | Chirag Chandrahas Shetty [ chirag24 ] |
Chirag Chandrahas Shetty (Inactive)
made changes -
Assignee | Chirag Chandrahas Shetty [ chirag24 ] | Ann Loraine [ aloraine ] |
Chirag Chandrahas Shetty (Inactive)
made changes -
Assignee | Ann Loraine [ aloraine ] | Chirag Chandrahas Shetty [ chirag24 ] |
Ann Loraine
made changes -
Sprint | Fall 3: Oct 12 - Oct 23, Fall 4 Oct 26 - Nov 6 [ 106, 107 ] | Fall 3: Oct 12 - Oct 23, Fall 4 Oct 26 - Nov 6, Fall 5 Nov 9 - Nov 20 [ 106, 107, 108 ] |
Ann Loraine
made changes -
Rank | Ranked higher |
Chirag Chandrahas Shetty (Inactive)
made changes -
Attachment | screenshot-1.png [ 14941 ] |
Ann Loraine
made changes -
Sprint | Fall 3: Oct 12 - Oct 23, Fall 4 Oct 26 - Nov 6, Fall 5 Nov 9 - Nov 20 [ 106, 107, 108 ] | Fall 3: Oct 12 - Oct 23, Fall 4 Oct 26 - Nov 6, Fall 5 Nov 9 - Nov 20, Fall 6 Nov 23 - Dec 4 [ 106, 107, 108, 109 ] |
Ann Loraine
made changes -
Rank | Ranked higher |
Ann Loraine
made changes -
Sprint | Fall 3: Oct 12 - Oct 23, Fall 4 Oct 26 - Nov 6, Fall 5 Nov 9 - Nov 20, Fall 6 Nov 30 - Dec 11 [ 106, 107, 108, 109 ] | Fall 3: Oct 12 - Oct 23, Fall 4 Oct 26 - Nov 6, Fall 5 Nov 9 - Nov 20, Fall 6 Nov 30 - Dec 11, Fall 7 Dec 14 - Dec 23 [ 106, 107, 108, 109, 110 ] |
Ann Loraine
made changes -
Rank | Ranked higher |
Chirag Chandrahas Shetty (Inactive)
made changes -
Status | To-Do [ 10305 ] | In Progress [ 3 ] |
Chirag Chandrahas Shetty (Inactive)
made changes -
Status | In Progress [ 3 ] | Needs 1st Level Review [ 10005 ] |
Chirag Chandrahas Shetty (Inactive)
made changes -
Assignee | Chirag Chandrahas Shetty [ chirag24 ] | Ann Loraine [ aloraine ] |
Ann Loraine
made changes -
Status | Needs 1st Level Review [ 10005 ] | First Level Review in Progress [ 10301 ] |
Ann Loraine
made changes -
Status | First Level Review in Progress [ 10301 ] | Ready for Pull Request [ 10304 ] |
Ann Loraine
made changes -
Status | Ready for Pull Request [ 10304 ] | Pull Request Submitted [ 10101 ] |
Ann Loraine
made changes -
Status | Pull Request Submitted [ 10101 ] | Reviewing Pull Request [ 10303 ] |
Ann Loraine
made changes -
Status | Reviewing Pull Request [ 10303 ] | Merged Needs Testing [ 10002 ] |
Ann Loraine
made changes -
Status | Merged Needs Testing [ 10002 ] | Post-merge Testing In Progress [ 10003 ] |
Ann Loraine
made changes -
Resolution | Done [ 10000 ] | |
Status | Post-merge Testing In Progress [ 10003 ] | Closed [ 6 ] |
Ann Loraine
made changes -
Assignee | Ann Loraine [ aloraine ] | Chirag Chandrahas Shetty [ chirag24 ] |
Ann Loraine
made changes -
Resolution | Done [ 10000 ] | |
Status | Closed [ 6 ] | To-Do [ 10305 ] |
Chirag Chandrahas Shetty (Inactive)
made changes -
Status | To-Do [ 10305 ] | In Progress [ 3 ] |
Chirag Chandrahas Shetty (Inactive)
made changes -
Status | In Progress [ 3 ] | Needs 1st Level Review [ 10005 ] |
Chirag Chandrahas Shetty (Inactive)
made changes -
Status | Needs 1st Level Review [ 10005 ] | First Level Review in Progress [ 10301 ] |
Chirag Chandrahas Shetty (Inactive)
made changes -
Status | First Level Review in Progress [ 10301 ] | Needs 1st Level Review [ 10005 ] |
Chirag Chandrahas Shetty (Inactive)
made changes -
Status | Needs 1st Level Review [ 10005 ] | First Level Review in Progress [ 10301 ] |
Chirag Chandrahas Shetty (Inactive)
made changes -
Status | First Level Review in Progress [ 10301 ] | Needs 1st Level Review [ 10005 ] |
Chirag Chandrahas Shetty (Inactive)
made changes -
Status | Needs 1st Level Review [ 10005 ] | First Level Review in Progress [ 10301 ] |
Chirag Chandrahas Shetty (Inactive)
made changes -
Status | First Level Review in Progress [ 10301 ] | Ready for Pull Request [ 10304 ] |
Chirag Chandrahas Shetty (Inactive)
made changes -
Status | Ready for Pull Request [ 10304 ] | Pull Request Submitted [ 10101 ] |
Chirag Chandrahas Shetty (Inactive)
made changes -
Status | Pull Request Submitted [ 10101 ] | Reviewing Pull Request [ 10303 ] |
Chirag Chandrahas Shetty (Inactive)
made changes -
Status | Reviewing Pull Request [ 10303 ] | Merged Needs Testing [ 10002 ] |
Chirag Chandrahas Shetty (Inactive)
made changes -
Status | Merged Needs Testing [ 10002 ] | Post-merge Testing In Progress [ 10003 ] |
Chirag Chandrahas Shetty (Inactive)
made changes -
Resolution | Done [ 10000 ] | |
Status | Post-merge Testing In Progress [ 10003 ] | Closed [ 6 ] |
[~aloraine] As much I remember while doing the weblog ticket, IGB sends a different useragent then rest of the browser. I think it will be possible to restrict it using IAM policy where we give the condition to match a string sent by IGB.