...
In the event that a console user is no longer authorized to access the project resources, the PI, PIAdmin, and/or the Project SysAdmin must remove the account and any related AWS or Azure permissions and notify the Project SysAdmins of this account removal. The CloudAdmins can support access removals if the project needs support to do this on their behalf.
Multi-Factor Authentication
...
If a non-ephemeral EC2 instance doesn’t have the Systems Manager (SSM) agent installed, the Science Cloud Security Team will notify the responsible PI, PIAdmin, and/or Project SysAdmin for immediate action. If the SSM agent is still not functioning after 7 days, the SC Security team will notify the PI, PIAdmin, and/or Project SysAdmin and shut down the instance.
Auto Isolation Processing
...
- Permissible websites include web services and web applications built using RESTful APIs. Static information-only websites are not allowed.
- Website design and configuration must follow the Science Cloud Web Hosting Guidelines, which must be signed and returned prior to bringing a new web application online.
- Recommended domain names for all new websites should be https://xxxx.sciencecloud.nasa.gov
...
Web Application Certification Process
...