Merge pull request #87 from HHS/boundary-diagram-updates

Boundary diagram updates
HHS · Dec 14, 2020 · a71406b · a71406b
2 parents 131e612 + c547b7a
commit a71406b
Showing 1 changed file with 7 additions and 4 deletions.
diff --git a/docs/boundary_diagram.md b/docs/boundary_diagram.md
@@ -1,7 +1,7 @@
 System Boundary Diagram
 =======================
 
-<img src="http://www.plantuml.com/plantuml/png/dLPHRnf747xdLqnvgB0LE3LsNw8e2W5YKu5DVRXMLLTesHlmAilkPMSEZAhyz-uSS71sMbMLR6xPc_bclfblTlb8h08NAzlumJXjYmpXYJcdTqaIrAQpDFnKp0l2eBrZTDpHVfMeB1ZbrhR8YwHtsPvOvVX-F4giOYIEMxDUj5R6OUZaWZtg_dvxFvqz3AVNiz7WQd3JRvqrsB15c4wxaAvKOBWkvZ3tXSjKsCBQuAOnmK3UjVBouT2-WURHz9umDEDErm6wh2qvWby0Fxt0R9uTS39Se_KHhORJF-msQzlh2Ee3L3u4ocLmDHr7FESPGH4Cd0xRd8rtDt6dqRKMj2IgPOkYRsuqOmOg861fAzysiQOm7QNmK-Sj5CuY4VYOTjWOGX3ihDE8qSjbuzE-8Ysr8M7xaCALN_UiBxBc6VpL0AWij6mk_JgQbSjENEzj0D8jCQvcWsSMf9coyrCpi5vbxRcooccfn2vGT_GfigrxLr5cAZSrYEva-2_MmHTSLlxzZrPjCT07EBhkNfB4BPd1P-4Kji11BHP60s5O6urx_6DDs0kDhjO1CyDAwbwzhQW3L79iRJQRc7XUowCkmGUSGpVFhT4bdEHqupFy9Nq3W-Sy8CKstA7IB6_wXl88inE7zjQYPYe1CyMg0-F2iiajWd74Kbk2K3Xdt5Aer7FhpyliCc4qySJBWEcl8-X7eBaYF3Jbhf_ASkz6i1_CVGPkOPP5s1LYuKETsp_6f8izU7e1yq9_GMvM6x9AsGSa8AcmXeMn8dz2fWhnMqF-lpLshMzTfuCq-icZH2gYlXtlImfT0WNfhgMFxj6DFtTXRHHCpGhRdnHX9Xq07s0o_0sq2b7gnq5OafgHKZ8Ddp6xwuudxTZHuDVHBLKgBVjU4w73JK1hjBGIDt0dwqCDZIjyGJ3spaIIPMCYZMXobCg9Uy3S1oPWjBX23bk1OPr3w_BouYowYkF9UNKSjPLoQecLDCIlF6ZXQZ1D9hTf_BYV9lt1Q30TrD0gYDUZ54a_6v4KVYsGcFuxw2kiYkp_1Dtxm_ls1v2kmpiuFrV7jYETdyEZIv8_RaKCR_zCafUrscjcZS4ijc0oyUJjw_0r8bNUrUW4L1abcs0OgImr8KD0xKDMSidfguNMpvSNRx-BGHVVmpXCcG2iSoqtJkwDunDT7gwNLJGxwBCtJ7fzc9WShN7uMfYxwpKQNXcM-PIHkKxR4Yp8OI8JdI68wiYmbpEj3g1Dq1QraLZbiZTy8UoXOrpk3eJ3o5KAFxaGgqmcnTmQUYe3x-fJPNaQpAzMXk79-ozoJPc5AEQG0R2NKmvsxFEAVGbs17bnaVGnjtuBwdZqGloZGciaMXHs1oV04UaZkan-MFmD" alt="rendered boundary diagram">
+<img src="http://www.plantuml.com/plantuml/png/fPPVRnf74C3V-HHJFrHOYa6DtPUgga8CiLtXXFfmeagHqB8tu5NsTZSxin1KvRjtvpWEC6vLgP8DgxsPt_oVumsnYfmgs_d1E6rJYV347EYNVZ-gTMzf-2dD4s7KtZ4wxcbVzLKPZN8hcqBgNrzTJAno_7W_xbl5I9olPjTPMXc7iHU4FHxy-U5nEljqDxsTZKSte_V3xdc73Lk4wNG0HQKYmssQmzmdLwguWPN1TMU2aRphXlhBeNq5PtlHHy9ubcy63j2L5-8Z-0NmqpFcsVcEK-8AhS-q8yvmTtjsTBtAK1-XrI5GheIRwNtcESy8Yc3aTDm4DjwzppUTWRMWnL4jLvHrWz6C9QY8W5jPB66TSmhJSG4_zLv3SXQ9m6UtuzeGWh3BNYTR1oVGjqr6kcfD4ksd0cxywjhwL9wTmryTW5P2o-NIhx9OVUpbSoC3K6o8iPgDlh6GPihE3yN0UbLUp9LLJZTfpOO6uxSvscFjrifC1NE464pk_aKw-iHrvd_zqQeDHleDzghRXoHswyZWdSGKDy1HBHP60s5S6OqDVvyJzXB6GEk8fM4bUM-Vjg43jEtONQ_NsV5mvCTn2tx2EGn2i4RNEF7flI_nz-8LZBw5Y9JBy81AipmP6WePisqExQr5pLG3IyMg1_V9iWaMmJXYoIr1JCuPjvHGdlcchQgKLE-ToHgaLIqeUTqcHbM3ZtAwSupHAGjgxoOiVDohrCEGWXILJWqDvtKQIadTn1Cl8nP_Z66eMCqLuQxw3yD2ZeqQGRC1cb3TmYnJR6sVpDpBDkcoWHUNC4_w2_9PUo6dWdr40f9IQbX87XGHyZwAxntv_zxPzbZtjXWLMK--QbBY9tIyIyg0G46nxPtFxlxT05P6mTHKUF5M4PPIQF0H9dSVGQjOVdQVNU5Jr2Yhv2OgnuXrOhBzjkkMf6Qa54cbi7mOt4ykL0ZHhpAmKAfe6kzW2Xok8rgZfPTm3GzotkNMkEGJmRrtXdtSTiRtJXRPz-g1UiJW8nCmMgoGuqOmh0DqhwukpxEgA1uipFsiLygf9RQzANhrfeURqRG_-L3aZyTfVpWQZwQZ8rgBE9tb7FGt8psDNnCIqt-7dh3QOFy7j6MqaoGJGNKV7M04yR9UqqrgtqL8a9eNpGTfhjV_e1AHey4LjarpakENAzG2LXZDOWEc5CEyEGtwPO_RGOweIkglen6NnJWXGqJjOqa22_JLGlVdgylNBpBeyYN6RkO5i0eQq9N16yU7qz2y8QiijfkAwxl-zH0c9g0r3a_7OVkh8WlU69Pj8GDyMro8iIWxLFPBYI2zJeQzhF9ZW3PHMzH6RDN7wxjduoGxSjcifsO1j7Dry3kWzMIIvjRGKssuoS_ksQ4nNrM6uSdxB-0ycuNqwSu3O2_B7RRHXoRw1hQ7F7j_3Z5OlpbQvVcFajP8j4YsmMLm9hr1LwRA_Wq0" alt="rendered boundary diagram">
 
 UML Source
 ----------
@@ -23,20 +23,23 @@ Boundary(aws, "AWS GovCloud") {
     System_Ext(cloudgov_router, "<&layers> cloud.gov routers", "Cloud Foundry traffic service")
     Boundary(atob, "Accreditation Boundary") {
       Container(www_app, "<&layers> TTA Smart Hub Web Application", "NodeJS, Express, React", "Displays and collects TTA data. Multiple instances running")
+      Container(clamav, "File scanning API", "ClamAV", "Internal application for scanning user uploads")
       ContainerDb(www_db, "PostgreSQL Database", "AWS RDS", "Contains content and configuration for TTA Smart Hub")
       ContainerDb(www_s3, "AWS S3 bucket", "AWS S3", "Stores static file assets")
       }
   }
 }
-System(HSES, "HSES", "Authentication As a Service\n\nMFA via Time-Based App or PIV card")
+System(HSES, "HSES", "Authentication As a Service\nMFA via Time-Based App or PIV card\n\nSource of Grantee Data")
 Boundary(gsa_saas, "FedRAMP-approved SaaS") {
   System_Ext(newrelic, "New Relic", "Continuous Monitoring")
 }
 Rel(www_app, newrelic, "reports telemetry", "tcp (443)")
 Rel(personnel, aws_alb, "manage TTA data", "https GET/POST/PUT/DELETE (443)")
 Rel(aws_alb, cloudgov_router, "proxies requests", "https GET/POST/PUT/DELETE (443)")
 Rel(cloudgov_router, www_app, "proxies requests", "https GET/POST/PUT/DELETE (443)")
-www_app <-> HSES : **authenticates** \n//[OAuth2]//
+Rel(www_app, clamav, "scans files", "https POST (443)")
+Rel(www_app, HSES, "authenticates user", "OAuth2")
+Rel(www_app, HSES, "retrieve Grantee data", "https GET (443)")
 Rel(personnel, HSES, "verify identity", "https GET/POST (443)")
 Rel(www_app, www_db, "reads/writes dataset records", "psql (5432)")
 Rel(www_app, www_s3, "reads/writes data content", "vpc endpoint")
@@ -53,7 +56,7 @@ Rel(circleci, cloudgov_api, "Deploy application on successful CI/CD run")
 Instructions
 ------------
 
-1. [Edit this diagram with plantuml.com](http://www.plantuml.com/plantuml/uml/dLPHRnf747xdLqnvgB0LE3LsNw8e2W5YKu5DVRXMLLTesHlmAilkPMSEZAhyz-uSS71sMbMLR6xPc_bclfblTlb8h08NAzlumJXjYmpXYJcdTqaIrAQpDFnKp0l2eBrZTDpHVfMeB1ZbrhR8YwHtsPvOvVX-F4giOYIEMxDUj5R6OUZaWZtg_dvxFvqz3AVNiz7WQd3JRvqrsB15c4wxaAvKOBWkvZ3tXSjKsCBQuAOnmK3UjVBouT2-WURHz9umDEDErm6wh2qvWby0Fxt0R9uTS39Se_KHhORJF-msQzlh2Ee3L3u4ocLmDHr7FESPGH4Cd0xRd8rtDt6dqRKMj2IgPOkYRsuqOmOg861fAzysiQOm7QNmK-Sj5CuY4VYOTjWOGX3ihDE8qSjbuzE-8Ysr8M7xaCALN_UiBxBc6VpL0AWij6mk_JgQbSjENEzj0D8jCQvcWsSMf9coyrCpi5vbxRcooccfn2vGT_GfigrxLr5cAZSrYEva-2_MmHTSLlxzZrPjCT07EBhkNfB4BPd1P-4Kji11BHP60s5O6urx_6DDs0kDhjO1CyDAwbwzhQW3L79iRJQRc7XUowCkmGUSGpVFhT4bdEHqupFy9Nq3W-Sy8CKstA7IB6_wXl88inE7zjQYPYe1CyMg0-F2iiajWd74Kbk2K3Xdt5Aer7FhpyliCc4qySJBWEcl8-X7eBaYF3Jbhf_ASkz6i1_CVGPkOPP5s1LYuKETsp_6f8izU7e1yq9_GMvM6x9AsGSa8AcmXeMn8dz2fWhnMqF-lpLshMzTfuCq-icZH2gYlXtlImfT0WNfhgMFxj6DFtTXRHHCpGhRdnHX9Xq07s0o_0sq2b7gnq5OafgHKZ8Ddp6xwuudxTZHuDVHBLKgBVjU4w73JK1hjBGIDt0dwqCDZIjyGJ3spaIIPMCYZMXobCg9Uy3S1oPWjBX23bk1OPr3w_BouYowYkF9UNKSjPLoQecLDCIlF6ZXQZ1D9hTf_BYV9lt1Q30TrD0gYDUZ54a_6v4KVYsGcFuxw2kiYkp_1Dtxm_ls1v2kmpiuFrV7jYETdyEZIv8_RaKCR_zCafUrscjcZS4ijc0oyUJjw_0r8bNUrUW4L1abcs0OgImr8KD0xKDMSidfguNMpvSNRx-BGHVVmpXCcG2iSoqtJkwDunDT7gwNLJGxwBCtJ7fzc9WShN7uMfYxwpKQNXcM-PIHkKxR4Yp8OI8JdI68wiYmbpEj3g1Dq1QraLZbiZTy8UoXOrpk3eJ3o5KAFxaGgqmcnTmQUYe3x-fJPNaQpAzMXk79-ozoJPc5AEQG0R2NKmvsxFEAVGbs17bnaVGnjtuBwdZqGloZGciaMXHs1oV04UaZkan-MFmD)
+1. [Edit this diagram with plantuml.com](http://www.plantuml.com/plantuml/uml/fPPVRnf74C3V-HHJFrHOYa6DtPUgga8CiLtXXFfmeagHqB8tu5NsTZSxin1KvRjtvpWEC6vLgP8DgxsPt_oVumsnYfmgs_d1E6rJYV347EYNVZ-gTMzf-2dD4s7KtZ4wxcbVzLKPZN8hcqBgNrzTJAno_7W_xbl5I9olPjTPMXc7iHU4FHxy-U5nEljqDxsTZKSte_V3xdc73Lk4wNG0HQKYmssQmzmdLwguWPN1TMU2aRphXlhBeNq5PtlHHy9ubcy63j2L5-8Z-0NmqpFcsVcEK-8AhS-q8yvmTtjsTBtAK1-XrI5GheIRwNtcESy8Yc3aTDm4DjwzppUTWRMWnL4jLvHrWz6C9QY8W5jPB66TSmhJSG4_zLv3SXQ9m6UtuzeGWh3BNYTR1oVGjqr6kcfD4ksd0cxywjhwL9wTmryTW5P2o-NIhx9OVUpbSoC3K6o8iPgDlh6GPihE3yN0UbLUp9LLJZTfpOO6uxSvscFjrifC1NE464pk_aKw-iHrvd_zqQeDHleDzghRXoHswyZWdSGKDy1HBHP60s5S6OqDVvyJzXB6GEk8fM4bUM-Vjg43jEtONQ_NsV5mvCTn2tx2EGn2i4RNEF7flI_nz-8LZBw5Y9JBy81AipmP6WePisqExQr5pLG3IyMg1_V9iWaMmJXYoIr1JCuPjvHGdlcchQgKLE-ToHgaLIqeUTqcHbM3ZtAwSupHAGjgxoOiVDohrCEGWXILJWqDvtKQIadTn1Cl8nP_Z66eMCqLuQxw3yD2ZeqQGRC1cb3TmYnJR6sVpDpBDkcoWHUNC4_w2_9PUo6dWdr40f9IQbX87XGHyZwAxntv_zxPzbZtjXWLMK--QbBY9tIyIyg0G46nxPtFxlxT05P6mTHKUF5M4PPIQF0H9dSVGQjOVdQVNU5Jr2Yhv2OgnuXrOhBzjkkMf6Qa54cbi7mOt4ykL0ZHhpAmKAfe6kzW2Xok8rgZfPTm3GzotkNMkEGJmRrtXdtSTiRtJXRPz-g1UiJW8nCmMgoGuqOmh0DqhwukpxEgA1uipFsiLygf9RQzANhrfeURqRG_-L3aZyTfVpWQZwQZ8rgBE9tb7FGt8psDNnCIqt-7dh3QOFy7j6MqaoGJGNKV7M04yR9UqqrgtqL8a9eNpGTfhjV_e1AHey4LjarpakENAzG2LXZDOWEc5CEyEGtwPO_RGOweIkglen6NnJWXGqJjOqa22_JLGlVdgylNBpBeyYN6RkO5i0eQq9N16yU7qz2y8QiijfkAwxl-zH0c9g0r3a_7OVkh8WlU69Pj8GDyMro8iIWxLFPBYI2zJeQzhF9ZW3PHMzH6RDN7wxjduoGxSjcifsO1j7Dry3kWzMIIvjRGKssuoS_ksQ4nNrM6uSdxB-0ycuNqwSu3O2_B7RRHXoRw1hQ7F7j_3Z5OlpbQvVcFajP8j4YsmMLm9hr1LwRA_Wq0)
 1. Copy and paste the final UML into the UML Source section
 1. Update the img src and edit link target to the current values