🚨 Production Issues 🚨

File access issues

Files are accessed through the hub via the cloudfront. The hub attaches a JWT to the request and we have a lambda at edge function which decodes the JWT to verfiy that it is valid. Most file access issues will be related to the lambda at edge.

Details

Repo to decode JWT - https://github.com/5app/cloudfront-gate

Cloudfront distributions in AWS - https://us-east-1.console.aws.amazon.com/cloudfront/v4/home?region=eu-west-2#/distributions

Lambda at edge in AWS, note that this is in the us-east-1 region - https://us-east-1.console.aws.amazon.com/lambda/home?region=us-east-1#/functions/cloudfront-gate-production?tab=code

Logs Because this is a lambda at edge, the logs are not stored together, they are stored in the region where the user tried to access the file.

UK logs go here and change the region as required - https://eu-west-2.console.aws.amazon.com/cloudwatch/home?region=eu-west-2#logsV2:log-groups/log-group/$252Faws$252Flambda$252Fus-east-1.cloudfront-gate-production

Prod JWT access secret - https://eu-west-2.console.aws.amazon.com/systems-manager/parameters/%252Fproduction%252Fjwt-access%252Fsecret/description?region=eu-west-2&tab=Table#list_parameter_filters=Name:Contains:secret