REVIEW-57: XCI-187 Establish an XCI usage metrics collection service - Design/Security Review

General design and security risk review for XSEDE Web SSO

• Added component administrators to the list of users
• Added suggested but more complex usage transfer methods to a future enhancements sections
• Added AWS as a desired target hosting environment to the future enhancements section
• Clarified the small amount of script development involved and that it could take more effort to deploy, learn, and operate a more complex tool that does what we need plus a lot more
• Enhanced design with use_amount and use_amount_units fields
• Enhanced design to transport and store unchanged any additional fields that appear in usage records that are not in the design

XCI-187_UsageCollectionService_Design-v0.2.pdf

XCI-187_UsageCollectionService_Design-v0.1.pdf

Please focus on these questions:

1. Is the proposed service and its components a reasonable way to address the high-level requirements?
2. Is the proposed method to capture usage and send it to the central service appropriate?
3. Do the proposed interfaces comply with relevant XSEDE security recommendations and practices?
4. Are relevant XSEDE security policies and best practices followed?