Discussions

We use a containerized DB (MariaDB) and store PHI. I know data is encrypted at rest on MedStack. Is there a need to further encrypt data/columns containing sensitive health information for HIPAA or PHIPA compliance? Storing encrypted data makes it difficult/expensive to use the encrypted data in queries so would like to avoid this in many cases.

We're interested in setting up an APM in our cluster but haven't seen a guide on implementing one. Which service providers work well with MedStack Control and how have people set them up before? What does the interaction/deployment look like?

What kind of advanced monitoring and telemetry can be implemented in a cluster? Currently, the baseline metrics are resource utilization for nodes and containers, but it would be great to learn what can be done with additional services in the application layer.

I use the following url to read some file I saved in medstack (I'm replacing sensitve date with curly brackets {vars}: https://{storage-account-name}.blob.core.windows.net/{container-name}/{blob-name}.jpg?sp=r&sv=2018-11-09&sr=c&st=2022-07-13T16%3A09%3A00Z&se={expires}&spr=https&sig={secret} This only works for allowed IPs declared in the "Allowed IP's" tab. How can I open this to everyone with the link?

I'm trying to do a PUT to azure with axios on React: ``` const url = 'https://{MY-STORAGE-NAME}.blob.core.windows.net/cognito-test-file-container/mateo?sp=racwdl&sv=2018-11-09&sr=c&st=2022-07-04T19%3A52%3A00Z&se=2022-07-08T12%3A00%3A00Z&sip={MY-LOCAL-IP}&spr=https&sig={SECRET}%3D'; const response = await axios.put(url, imagefile?.files?.[0]); ``` But then I get the following CORS error, is there any way I can allow CORS for my local development or any recommended workarounds to PUT a JPG in azure storage? ```Access to XMLHttpRequest at 'https://{MY-STORAGE-NAME}.blob.core.windows.net/cognito-test-file-container/mateo?sp=racwdl&sv=2018-11-09&sr=c&st=2022-07-04T19%3A52%3A00Z&se=2022-07-08T12%3A00%3A00Z&sip={MY-LOCAL-IP}&spr=https&sig={SECRET}%3D' from origin 'https://localhost:8080' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.```

Hi, is there a way to set up a test environment before going to production? I am migrating from Heroku and have recently containerized my application, I want to make sure nothing was broken during the process and do a test run of how MedStack works.

So there are 3 main concerns - How does my MedStack account handle backup/restore? Does my account have disaster recovery? Do you handle restore requests on weekends and how long does it take to restore? Is there a way I can get a file manager on my account?

We want to remove access to our developers to database and storage but want to leave them access to the control panel to supervise the process of deployment. We noticed that you provide 4 roles: Owner, Technical, Billing, and Compliance but none of them does not meet our expectations. Is it possible to configure medstack in a way to achieve it?

We are in the process of migrating our application from a monolith to a micro-services approach and will need the ability to apply updates to service containers in a rolling fashion. Are there any plans to expose update related flags in the service configuration? Most likely we would require these flags: --update-delay --update-parallelism --update-failure-action --stop-grace-period And it would be nice to also have access to these: --update-max-failure-ratio --update-order For now, can you provide us with the default values for these flags? Any update on this would be appreciated it since it will most likely be a hard requirement for new deployments in the near future and would like to make sure that the values used would be appropriate for us. Thank you!

How does Medstack ensure that deleted data is in fact deleted by the underlying cloud provider is there a time interval after which this occurs.