Credentials

{
  "metadata": {
    "document_number": "ZD-2025-007",
    "title": "AWS Cloud Infrastruktur Zugänge",
    "client_name": "MedTech Solutions AG",
    "project_name": "AWS Cloud Migration",
    "created_at": {
      "date": "2025-01-22"
    },
    "tags": ["AWS", "Cloud", "Produktion", "Staging"],
    "security_level": "strictly_confidential",
    "notes": "KRITISCH: Zugänge nur für autorisiertes Personal. MFA ist für alle Accounts aktiviert."
  },
  "services": [
    {
      "name": "AWS Console - Produktion",
      "description": "Amazon Web Services Management Console für Produktionsumgebung",
      "url": "https://medtech-prod.signin.aws.amazon.com/console",
      "technical": [
        { "key": "Account ID", "value": "123456789012" },
        { "key": "Region", "value": "eu-central-1 (Frankfurt)" },
        { "key": "Account Alias", "value": "medtech-prod" }
      ],
      "ports": [
        { "port": "443", "protocol": "TCP", "description": "HTTPS Console" }
      ],
      "credentials": [
        {
          "username": "admin@medtech-solutions.de",
          "password": "SSO via Azure AD",
          "credential_type": "web",
          "description": "Administrator - IAM Full Access (MFA erforderlich)"
        },
        {
          "username": "devops@medtech-solutions.de",
          "password": "SSO via Azure AD",
          "credential_type": "web",
          "description": "DevOps - ECS, RDS, CloudWatch, S3"
        },
        {
          "username": "readonly@medtech-solutions.de",
          "password": "SSO via Azure AD",
          "credential_type": "web",
          "description": "ReadOnly - Nur Lesezugriff für Audits"
        }
      ]
    },
    {
      "name": "Amazon RDS - PostgreSQL",
      "description": "Managed PostgreSQL Datenbank (Multi-AZ)",
      "url": "medtech-prod-db.cluster-xxxxx.eu-central-1.rds.amazonaws.com",
      "technical": [
        { "key": "Engine", "value": "PostgreSQL 15.4" },
        { "key": "Instance", "value": "db.r6g.large (Multi-AZ)" },
        { "key": "Storage", "value": "500 GB gp3, verschlüsselt (AES-256)" },
        { "key": "Backup", "value": "Täglich, 35 Tage Retention" }
      ],
      "ports": [
        { "port": "5432", "protocol": "TCP", "description": "PostgreSQL" }
      ],
      "credentials": [
        {
          "username": "medtech_admin",
          "password": "Gespeichert in AWS Secrets Manager",
          "credential_type": "database",
          "description": "DB Admin - Secret: prod/rds/admin"
        },
        {
          "username": "medtech_app",
          "password": "Gespeichert in AWS Secrets Manager",
          "credential_type": "database",
          "description": "Application User - Secret: prod/rds/app"
        }
      ]
    },
    {
      "name": "AWS ECS Cluster",
      "description": "Container-Orchestrierung für Microservices",
      "url": "https://eu-central-1.console.aws.amazon.com/ecs",
      "technical": [
        { "key": "Cluster", "value": "medtech-prod-cluster" },
        { "key": "Services", "value": "api-gateway, patient-service, billing-service" },
        { "key": "Task Definition", "value": "Fargate (Serverless)" },
        { "key": "Load Balancer", "value": "ALB (Application Load Balancer)" }
      ],
      "ports": [
        { "port": "443", "protocol": "TCP", "description": "HTTPS (ALB)" },
        { "port": "8080", "protocol": "TCP", "description": "API Gateway intern" }
      ],
      "credentials": [
        {
          "username": "ECR Registry",
          "password": "aws ecr get-login-password",
          "credential_type": "api_key",
          "description": "Docker Registry Login via AWS CLI"
        }
      ]
    },
    {
      "name": "GitHub Repository",
      "description": "Source Code und CI/CD Pipelines",
      "url": "https://github.com/medtech-solutions",
      "technical": [
        { "key": "Organisation", "value": "medtech-solutions" },
        { "key": "Repositories", "value": "api-gateway, patient-service, infra-terraform" },
        { "key": "CI/CD", "value": "GitHub Actions → AWS CodePipeline" }
      ],
      "ports": [],
      "credentials": [
        {
          "username": "medtech-deploy",
          "password": "SSH Key oder PAT",
          "credential_type": "ssh",
          "description": "Service Account für Deployments"
        }
      ]
    },
    {
      "name": "Terraform Cloud",
      "description": "Infrastructure as Code State Management",
      "url": "https://app.terraform.io/app/medtech-solutions",
      "technical": [
        { "key": "Organisation", "value": "medtech-solutions" },
        { "key": "Workspaces", "value": "prod, staging, dev" },
        { "key": "VCS", "value": "GitHub Integration aktiv" }
      ],
      "ports": [],
      "credentials": [
        {
          "username": "terraform-cloud",
          "password": "Team API Token in 1Password",
          "credential_type": "api_key",
          "description": "Terraform Cloud API Token"
        }
      ]
    },
    {
      "name": "Datadog Monitoring",
      "description": "Zentrales Monitoring und Alerting",
      "url": "https://app.datadoghq.eu",
      "technical": [
        { "key": "Region", "value": "EU (Frankfurt)" },
        { "key": "Dashboards", "value": "Production Overview, API Metrics, RDS Health" },
        { "key": "Alerts", "value": "PagerDuty Integration aktiv" }
      ],
      "ports": [],
      "credentials": [
        {
          "username": "devops@medtech-solutions.de",
          "password": "SSO via Azure AD",
          "credential_type": "web",
          "description": "Admin - Vollzugriff auf Dashboards und Alerts"
        }
      ]
    }
  ]
}