cloud-gov/cg-compliance

Remove obsolete GACA access to our 3pao folder

Opened this issue · 2 comments

The cloud.gov team has a folder, FedRAMP JAB - cloud.gov - 3PAO access.

Over time, we have granted access to these files/folders via GACA, and now we need to remove obsolete access.

Acceptance criteria:

Sketch:

  • Can one remove recursively in the UI?
  • Do we need GSA IT helpdesk support?
  • Do we have to manually remove all these?
  • Do we need to write scripts to do this (with gam or gdrive, for example)?

to manage this better in the future - can we put GACA accounts into groups? (probably a follow-up ticket needed there)