# General Infrastructure tasks
Common requests that infrastructure handles
## Active Directory
Varied account maintenance requests
### AWSPROD domain
* add users and reset passwords (*passcore)
* create groups for VPN
### AWSDEV domain
* add users (passwords set to never expire but resets are still common because people forget them)
### Azure AD
* very little so far
### Misc Servers
* local users on a few non-domain joined servers
## Linux Admin
* ssh key management
* updates
## AWS
The majority of requests which are mostly network related
* Security groups
* VPN access
* VPN tunnels
* IAM roles/policies
* Whitelisting IPs for certain locked down resources like Admin reports (SSRS)
* S3 file management (deploy-resources, etc)
## Gsuite
* New user setup
* SSO changes to IAM role mapping
* Email group maintenance
## Billing Invoices
So far
* AWS
* Google Cloud
* Start Meeting
* GoDaddy
* MyGet
## Security Team
A decent amount of requests come in from the security team
* 'interesting' events
* Technology walk throughs (AWS, GSuite, etc)
* Pointing out potential issues infrastructure should take care of
* Vulnerability testing (would like to see a weekly/monthly plan)
## Salt/Jenkins
putting these in the same category as they are tightly coupled
* plugin updates
* salt-minion management add/remove/rename
* state file updates
* jenkins/salt code troubleshooting when a problem isn't application code related
## Monitoring
internally generated by infra/qa team for the most part
* Error analytics in New Relic that aren't well understood
* Threshold alerts on monitored sites that aren't investigated
* DataDog alerts (cpu/mem/disk and endpoint checking)
## Tool Access
* New Relic
* DataDog
* ELK prod/non-prod
## ELK upgrades
* beat agents (salt)
* backend