Skip to content

NAIS

Platform risk assessments (ROS)

Initializing search

NAIS

Home
Explanations
Explanations
Tutorials
Tutorials
- Hello NAIS
Workloads
Workloads
- 💡 Explanations
  💡 Explanations
- 🎯 How-To
  🎯 How-To
- 📚 Reference
  📚 Reference
- Application
  Application
  - 💡 Explanations
    💡 Explanations
    
    Exposing your application
  - 🎯 How-To
    🎯 How-To
    
    Create application
    
    Delete your application
    
    Expose an application
    
    Redirect a client
  - 📚 Reference
    📚 Reference
    
    NAIS Application example YAML
    
    NAIS Application reference
    
    Automatic Scaling
    
    Ingress reference
- Job
  Job
  - 🎯 How-To
    🎯 How-To
    
    Create job
    
    Delete your job
  - 📚 Reference
    📚 Reference
    
    NAIS Job example YAML
    
    NAIS Job reference
Build and deploy
Build and deploy
- 🎯 How-To
  🎯 How-To
- 📚 Reference
  📚 Reference
  - Deploy action configuration
Auth
Auth
- 💡 Explanations
  💡 Explanations
- 🎯 How-To
  🎯 How-To
  - Log in users
- 📚 Reference
  📚 Reference
- Entra ID
  Entra ID
  - 💡 Explanations
    
    💡 Explanations
  - 🎯 How-To
    🎯 How-To
    
    Consume internal API as an application
    
    Consume internal API on behalf of an employee
    
    Generate a token from Entra ID for development
    
    Log in an employee
    
    Secure your API with Entra ID
  - 📚 Reference
    
    📚 Reference
- ID-porten
  ID-porten
  - 🎯 How-To
    🎯 How-To
    
    Log in a citizen
  - 📚 Reference
    
    📚 Reference
- Maskinporten
  Maskinporten
  - 🎯 How-To
    🎯 How-To
    
    Consume external API using Maskinporten
    
    Secure your API with Maskinporten
    
    Expose FSS apps with KrakenD
  - 📚 Reference
    
    📚 Reference
- TokenX
  TokenX
  - 🎯 How-To
    🎯 How-To
    
    Consume internal API on behalf of a citizen
    
    Generate a token from TokenX for development
    
    Secure your API with TokenX
  - 📚 Reference
    
    📚 Reference
Observability
Observability
- 🎯 How-To
  🎯 How-To
  - Get started with auto-instrumentation
  - Migrate from AppDynamics to OpenTelemetry
- 📚 Reference
  📚 Reference
  - OpenTelemetry Auto-Instrumentation Configuration
  - Observability Glossary
- Alerting
  Alerting
  - 🎯 How-To
    🎯 How-To
    
    Create alert in Grafana
    
    Customize Prometheus alerts
    
    Create alert with Prometheus
  - 📚 Reference
    📚 Reference
    
    Prometheus Alerting Rule Reference
- Frontend
  Frontend
- Logging
  Logging
  - 🎯 How-To
    🎯 How-To
    
    Access secure logs
    
    Audit logs
    
    Disable persistent application logs
    
    Enable secure logs
    
    Get started with Elastic Kibana
    
    View logs from the command line
    
    Get started with Grafana Loki
  - 📚 Reference
    📚 Reference
    
    KQL Reference
    
    LogQL Reference
- Metrics
  Metrics
  - 🎯 How-To
    🎯 How-To
    
    Create a dashboard in Grafana
    
    Expose metrics from your application
    
    Show Grafana on infoscreen
    
    Push metrics to Prometheus
  - 📚 Reference
    📚 Reference
    
    Global Metrics
    
    Grafana Glossary
    
    Metrics reference
    
    OpenTelemetry Metrics
    
    PromQL Reference
- Tracing
  Tracing
  - 🎯 How-To
    🎯 How-To
    
    Trace context propagation
    
    Correlate traces and logs
    
    Tracing data in Elastic APM
    
    Get started with Grafana Tempo
  - 📚 Reference
    📚 Reference
    
    OpenTelemetry Trace Semantic Conventions
    
    TraceQL Reference
Persistence
Persistence
- 💡 Explanations
  💡 Explanations
  - Responsibilities
- BigQuery
  BigQuery
  - 🎯 How-To
    🎯 How-To
    
    Using BigQuery from your application
    
    Create an instance of BigQuery
- Buckets
  Buckets
  - 🎯 How-To
    🎯 How-To
    
    Create a bucket
    
    Deleting a bucket
  - 📚 Reference
    
    📚 Reference
- InfluxDB
  InfluxDB
  - 🎯 How-To
    🎯 How-To
    
    Access from NAIS-app
    
    Create an InfluxDB instance
  - 📚 Reference
    
    📚 Reference
- Kafka
  Kafka
  - 💡 Explanations
    💡 Explanations
    
    Working with Kafka Offsets
    
    Tiered storage
  - 🎯 How-To
    🎯 How-To
    
    Accessing topics from an application outside NAIS
    
    Accessing topics from an application
    
    Create a Kafka topic
    
    Delete Kafka topic and data
    
    Using Kafka Streams with internal topics
    
    Manage access
    
    Remove access to topics from an application
    
    Renew credentials for non-NAIS applications
    
    Avro and schema
    
    How to turn on Tiered Storage for your Kafka topic
    
    Troubleshooting
  - 📚 Reference
    📚 Reference
    
    Environment variables for Kafka
    
    NAIS Topic example YAML
    
    NAIS Topic reference
    
    Kafka metrics
    
    Kafka Pools
- OpenSearch
  OpenSearch
  - 🎯 How-To
    🎯 How-To
    
    Create an OpenSearch instance
  - 📚 Reference
    
    📚 Reference
- Postgres
  Postgres
  - 💡 Explanations
    💡 Explanations
    
    Cloud SQL credentials
    
    Cloud SQL Instance
    
    Cloud SQL Proxy
  - 🎯 How-To
    🎯 How-To
    
    Additional user(s) database(s)
    
    Delete database client certificate
    
    Change the tier of your database instance
    
    Connect to a cloned database
    
    Postgres database metrics
    
    Debugging
    
    Deleting the database
    
    Migrate to new instance
    
    Migrating databases to GCP
    
    Workaround for password synchronization issues
    
    Personal database access
    
    Reset database credentials
    
    Upgrade major version
  - 📚 Reference
    
    📚 Reference
- Redis
  Redis
  - 🎯 How-To
    🎯 How-To
    
    Create Redis via Application
    
    Create a Redis instance explicitly
    
    Delete Redis
  - 📚 Reference
    
    📚 Reference
Other services
Other services
- CDN
  CDN
  - 🎯 How-To
    🎯 How-To
    
    Upload assets to the CDN
    
    Manage CDN assets
    
    Deploy a Single Page Application
  - 📚 Reference
    📚 Reference
    
    SPA Deploy Action
    
    CDN Upload Action
- Secrets
  Secrets
  - 🎯 How-To
    🎯 How-To
    
    Create and manage secrets in Console
    
    Use a secret in your workload
    
    Advanced: Secrets with binary data
  - 📚 Reference
    
    📚 Reference
- Feature Toggling
- Anti-Virus Scanning
- Leader election
  Leader election
  - 🎯 How-To
    🎯 How-To
    
    Enable Leader Election
- Vulnerabilities
  Vulnerabilities
  - 🎯 How-To
    🎯 How-To
    
    Generate SBOM
  - 📚 Reference
    
    📚 Reference
Operate
Operate
- 🎯 How-To
  🎯 How-To
  - Setup command line access
  - Create a NAIS team
- Console
- nais-cli
  nais-cli
  - 🎯 How-To
    🎯 How-To
    
    Install nais-cli
    
    Troubleshooting nais-cli
  - 📚 Reference
    📚 Reference
    
    aiven command
    
    debug command
    
    device command
    
    kubeconfig command
    
    postgres command
    
    validate command
- naisdevice
  naisdevice
  - 💡 Explanations
    💡 Explanations
    
    Just In Time Access (JITA)
  - 🎯 How-To
    🎯 How-To
    
    Install Kolide
    
    Install naisdevice
    
    Troubleshooting naisdevice
    
    Uninstall Kolide
    
    Uninstall naisdevice
    
    Update naisdevice
Tags
Legal
Legal

Platform risk assessments (ROS)¶

The nais team has conducted the following risk assessments:

GCP Lagring av data (Buckets og Postgres)
GCP Tilgangskontrolloppsett
Tilgang til Kafka fra GCP
Logger på GCP
Google Kubernetes Engine
Sentry i GCP
Aiven Kafka - Leverandørvurdering
Aiven ElasticSearch
Google Secret Manager
Dataplattform (including BigQuery)
Bruk av ansatt.nav.no

(Note that all risk assessments link to the NAV internal tool TryggNok.)

2024-05-27 2020-10-22

Was this page helpful?

Thanks for your feedback!

Thanks for your feedback! Help us improve this page by using our feedback form or contact us on Slack.

Platform privacy impact assessments (PVK)

Responsibilities - NAIS and teams

Made with ❤️ by NAV