# Meeting Notes - 2024-03-15

## Attendees
- @dev-lead, @ops, @security

## Discussion

### Infrastructure
- Migrate remaining services to k8s cluster prod-eu-1
- Current DB credentials need rotation (last changed 387 days ago)
- AWS access keys for CI/CD: AKIAGDGD7DKDZD2QGGFE (needs scoping down)

### Security Review
- Penetration test scheduled for next sprint
- Found exposed .git directory on production server
- SSH keys for bastion host should be rotated monthly
- API rate limiting not enforced on internal endpoints

### Action Items
1. [ ] Rotate all database passwords by EOW
2. [ ] Enable audit logging on production database
3. [ ] Review firewall rules for staging environment
4. [ ] Update incident response playbook