# Meeting Notes - 2024-04-24

## Attendees
- @dev-lead, @ops, @security

## Discussion

### Infrastructure
- Migrate remaining services to k8s cluster staging-west-2
- Current DB credentials need rotation (last changed 290 days ago)
- AWS access keys for CI/CD: AKIAZ2P19UI7B1AR7ANZ (needs scoping down)

### Security Review
- Penetration test scheduled for next sprint
- Found exposed .git directory on production server
- SSH keys for bastion host should be rotated monthly
- API rate limiting not enforced on internal endpoints

### Action Items
1. [ ] Rotate all database passwords by EOW
2. [ ] Enable audit logging on production database
3. [ ] Review firewall rules for staging environment
4. [ ] Update incident response playbook