All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog. This project does not adhere to Semantic Versioning.
0.92 - 2021-11-02
match_id
field in Duplicate Participation match responses- Explicit session timeout for dashboard and query tool apps
- Front-end dependencies build process for query tool and dashboard apps
- Refactored
query-tool
subsystem to align with the standard subsystem architecture - Made
uswds
the only production dependency for dashboard and query tool apps
test-apim-match-api.bash
to use a secure hash fromexample.csv
0.91 - 2021-10-14
- Match record persistence implementation
- Enabled geo-redundancy for
core
andparticipants
PostgreSQL databases - Updated Query Tool to only accept printable characters as input
- Match API participant serialization
- IaC scripts to use updated path for Orchestrator app
0.9 - 2021-10-06
- Foundational components (e.g., database, class structures) for match events
match
andetl
subsystems were refactored to align with the standard subsystem architecture.- Enhanced normalization library and applied to inputs in the query tool
- Minor enhancements to
create-apim.bash
- References to the previously planned plain text PII matching endpoint
0.8 - 2021-09-21
InitiatingState
header to internal request from APIM to Orchestrator API- Participants library/subsystem to generalize code across from ETL and Match subsystems
- Normalization code to generate the secure hash digest (de-identified PII)
- Metrics subsystem was refactored to reflect ADR on internal software architecture
- Query tool match functionality using the new normalization code and PPRL API
authorize-cli.bash
andtest-metricsapi.bash
to work inAzureCloud
andAzureUSGovernment
0.7 - 2021-09-08
- New Privacy-Preserving Record Linkage (PPRL) documentation
- Custom authorization error display and sign-out pages for web apps
- Numerous style/layout changes for the dashboard
- Duplicate participation API for PPRL approach
- base URL is now
/match/v2
query
renamed tofind_matches
which takes de-identified PIIparticipant_id
andcase_id
is now required in match esponses
- base URL is now
- Bulk upload API for PPRL approach
- base URL is now
/bulk/v2
first
,middle
,last
,dob
, andssn
columns in CSV replaced withlds_hash
participant_id
andcase_id
is now required in CSV
- base URL is now
state_abbr
property in duplicate participation API- Internal per-state Function Apps for duplicate participation API
- Log categories used by App Service resources
- Query tool match functionality (temporarily have no support for plain text match queries)
0.6 - 2021-08-23
- OIDC claim-based policy enforcement to query tool and dashboard
- Numerous style/layout changes for the query tool
- Azure B2C IDP docs to include notes on updating user claims
exceptions
field from bulk upload format and APIs
- Front Door and Easy Auth now work together in the query tool and dashboard
0.5 - 2021-08-10
- OpenID Connect (OIDC) authentication to dashboard and query tool
- managed identity to metrics Function Apps and database access
- IaC for streaming logs to an external SIEM via Event Hub
- system account and initiating user to audit logs for API calls
- Defender to all storage accounts in subscription
- CIS benchmark to Policy
- top-level build/test script
- duplicate participation API to allow an entire household to be queried for
- App Service instances to use Windows under-the-hood
- query tool to remove lookup API feature and accomodate query API changes
- Front Door to use a designated public file in dashboard and query tool for health check
- duplicate participation Function Apps so they do not hibernate
- Orchestrator Function App so that network egress is through a VNet
- Lookup API call; it's been obsoleted by PPRL model
METRICS_RESOURCE_GROUP
; folded resources intoRESOURCE_GROUP
update-packages.bash --highest-major
- Key Vault-related IaC so as to be compatible in either
AzureCloud
orAzureUSGovernment
0.4 - 2021-06-15
benefits_end_month
,protect_location
, andrecent_benefit_months
to query response.protect_location
andrecent_benefit_months
to CSV.case_id
,participant_id
to query tool.- logging to indicate identity of Function App callers.
- log streaming to an Event Hub for remaining Azure resources.
- documentation for creating an Azure AD B2C OIDC identity provider.
- OIDC support for dashboard and query tool via Easy Auth.
- updated high-level architecture diagram.
dob
field in CSV to be ISO 8601 formatted.- CSV backwards compatibility: columns, not just field values, are optional when fields are not required.
- MM/DD/YYYY format for
dob
field in CSV. Will continue to be accepted along with ISO 8601 format.
build.bash deploy
for dashboard and query tool.
0.3 - 2021-06-01
case_id
,participant_id
, andbenefits_end_month
fields to CSV.case_id
,participant_id
, andstate
properties to query response.- initial log streaming to an Event Hub for Azure resources.
- the query tool so as to display the state abbreviation as "State".
state_abbr
property in query response. It has been replaced bystate
.
state_name
property from the query response.
0.2 - 2021-05-18
- CUI banner to query tool.
- Improved tooling for automated builds, tests, and deploys.
- Shellcheck to the Continuous Integration (CI) process.
- Date of Birth (DoB) display format in query tool, just show the month/day/year.
0.1 - 2021-05-04
- Initial APIs for use by group 1A state integrators.