TSS - Redeploy DSP/Credential Functionality

The DSP along with the related architecture settings have been hidden in Jan 2025, to reduce system bloat, complexity, costs, and security risks.

The Github service is archived and the related Ops settings are destroyed with Terraform. So it is left possible to redeploy the service and reimplement the functionality in the future.

To redeploy the functionality

The architecture settings highlighted in yellow will need to be added/updated for enabling the DSP feature.

1. Unarchive the tis-trainee-credentials repository on GitHub

It can be done on the github-terraform repo to remove the archived = true attribute from tis-trainee.tf for the tis-trainee-credentials service.

PR that archived the repo: PR

2. Apply the related architecture settings by Terraform

ECS cluster and IAM task role
NLB
Security group
SNS/SQS resources and subscription
API Gateway endpoints
Credentials parameters from SSM
Cognito user group (optional: if it is just available to a special group)

PR that removed the settings in Ops: PR1, PR2

3. Listening from credential revoked event in notification service

Update notification service to listen to the tis-trainee-notifications-[env]-credential-revoked.fifo so it will trigger to send CREDENTIAL_REVOKED email notifications.

PR that removed the listener: PR

4. Add DSP functionality on Front end

Add DSP issuing button and the related functionality in Programme Membership and Placement section. And make the functionality available for the DSP user group (optional).

PR that removed the DSP functionality: PR1, PR2

5. Add consultant trainee user into the Cognito user group (optional)

Users can be added on AWS console in the page of the DSP user group.