REVIEW-88: XCI-783 Migrate CILogon web servers to AWS containers - Design/Security Review

The CILogon team plans to migrate the CILogon web servers from NCSA/NICS to the AWS US East (Ohio) Region data center using an AWS account that is managed by the University of Illinois and dedicated to CILogon services. The migration itself is a CILogon project activity, not using XSEDE staff time. Likewise, the AWS costs are covered by CILogon subscription fees, not using XSEDE funds. However, since XSEDE relies on CILogon and provides infrastructure for CILogon (e.g., the Hardware Security Module at NICS), this document provides input for an XSEDE-focused design review and test prior to the CILogon team making the change.
Goals for this migration include:

1. Replace NCSA/NICS fail-over configuration with AWS Docker Swarm using multiple AWS availability zones.
2. Migrate CILogon web apps from VMs to containers.
3. Stop relying on CentOS 6 VMs at NCSA and NICS, which reached end-of-life in November 2020.
4. Stop relying on the Hardware Security Module at NICS, which is no longer under support contract.
5. Continue to use the Hardware Security Modules at NCSA, which are under support contract through 2024.

• XCI-738 Migrate CILogon web servers to AWS containers

• Does the new implementation satisfy all XSEDE security service guidelines and standards
• Does the design and transition plan mitigate risks appropriately
• Are the user impacts of the change appropriate
• Are the infrastructure, operations, and licensing costs addressed