Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Prepare for repo archive by creating redirect to cisa.gov/directives externally #377

Open
h-m-f-t opened this issue Mar 1, 2023 · 3 comments

Comments

@h-m-f-t
Copy link
Member

h-m-f-t commented Mar 1, 2023

With directives now hosted on cisa.gov directly, this repo is no longer maintained. The one function the Federalist/cloud.gov Pages site still performs is redirecting to cisa.gov (see #320). Since "cyber.dhs.gov" is featured in many non-CISA pages and documents, there should be a redirect from cyber.dhs.gov to cisa.gov that happens outside of this project. This should be a web-centric solution, as there are a bunch of other DNS-y things happening in the cyber.dhs.gov zone.

DNS for the cyber.dhs.gov zone is managed in Route53. One idea to maintain a redirect is to use R53 + S3, but there may be better approaches.

cc: @dav3r @felddy @jsf9k @mcdonnnj as Maintainers of the Zone 🦸 for ideas.

@jsf9k
Copy link
Member

jsf9k commented Mar 1, 2023

Given that we don't need path forwarding, but we do require HTTPS and HSTS, the best solution is to create a CloudFront distribution from a static website (just a 301 redirect) in an S3 bucket with a Lambda@Edge to inject the security headers. We have done this before, e.g. here.

@dav3r
Copy link
Member

dav3r commented Mar 1, 2023

I haven't looked at this code in a while, but it may be a slightly more modern example than what @jsf9k linked to (or it might be almost identical). Whoever takes this on can look at both for reference.

@jsf9k
Copy link
Member

jsf9k commented Mar 1, 2023

For posterity, we would need to redirect to here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants