Research to understand existing landscape of technical architecture

[ychoy]

Summary

Research to inform risk & impacts assessment #7165

Acceptance criteria

• Understand the landscape of OG system ATOs and AWS (HHS meetings)

[dellaport]

Met with them last week, they will be reviewing that document on the subsequent security invites with us. Not sure if this is a formal document that is evangelized yet.

[dellaport]

I have reviewed the current AWS / NewRelic configurations as they stand currently and what will need to be prioritized for remediation on the new Risk/Security document we will create for weekly reporting.

[ychoy]

I'm removing the second AC into another task, so we can mark the initial set of work as done. #7773 cc @mdragon