1375 - Upgrade to .NET Core and add Azure Services to JIS-Link Web Application

 
Request Status Summary
Request Status Authorized
Request Detail
Requestor Name:
   Kovuri, Jayasekhar
Origination Date:
   03/25/2024
    
Recommended Endorser:
   AOC (endorses for other communities)
Request Type: New System
Which Systems are affected? Other
Other affected Systems / Business Processes JIS-Link Web Application
Business Area: Security
Communities Impacted: Public and Other Users
Impact if not Resolved: High
Impact Description:

There are some risks associated with implementing Azure services and upgrading JIS-Link to .NET Core. These include:

  • JIS-Link features that rely on any third-party libraries may prevent those selective features from upgraded to .NET Core.
  • Potential exposure of configuration data including database access credentials as the configurations transit from the WA Courts Azure tenant to the AOC datacenter. This will be mitigated by making sure all communications between the Azure tenant and the AOC datacenter are done over encrypted and secured data channels.
  • Potential misconfiguration of applications in differing environments or as staff toggle between legacy .NET Framework configuration management and this new form of configuration management. This will be mitigated by establishing clear patterns for configuration stores and ensuring only trained and authorized staff can make configuration data changes.

However, there are several risks associated with not undertaking this project including:

  • Increased workload and the possibility of website disruptions could result from maintaining two codebases for the legacy .NET Framework and .NET Core.
  • Inability to migrate web applications and web services to the .NET CORE and maintain application security.
  • JIS-Link will not comply with the AOC's IT modernization standards.
  • Lacking comprehensive application monitoring, like Azure Application Insights, limits the ability of server administrators and website support staff to quickly identify and resolve performance related issues. Stakeholders will be unable to observe user trends and understand how the application is being used.
What is the Business Problem or Opportunity

This is a request to migrate all remaining JIS-Link features to .NET Core and to start utilizing Azure services: Key Vault, App Configuration, and Application Insights.

JIS-Link operates a public-facing, predominantly paid-user website, hosted in a Demilitarized Zone (DMZ), which currently relies on the aging .NET Framework for its operation. This dependency presents some business problems and opportunities for modernization and efficiency gains through technological upgrades.

While the existing .NET Framework supports encryption within configuration files, the move to .NET Core represents a shift towards more modern and versatile approaches to managing data, such as leveraging Azure Key Vault. This method aligns with the new AOC security standards and best practices by storing sensitive information securely away from the application's codebase.

The need to maintain dual codebases for JIS-Link features still on .NET Framework and those migrated to .NET Core introduces operational inefficiencies. It increases the complexity of updates, increases the risk of inconsistencies in application behavior, and hinders the rapid development of new features. Consolidating the application codebase on .NET core simplifies the development pipeline, reducing maintenance overheads.

Without advanced monitoring tools, JIS-Link lacks the ability to track, analyze, and respond to real-time data on application performance, server loads, and user activity trends. This gap in capabilities impedes proactive decision-making and optimization of user experience and system reliability. Due to low engagement across the broad JIS-Link user base, it is crucial to monitor their activity and proactively offer more value, while also recouping costs. Implementing Azure Application Insights offers a comprehensive solution for monitoring application health, performance metrics, and user interaction trends.

Expected Benefit:

Benefits to the Business and End Users:

  • Upgrading to .NET Core and consolidating two code bases into one upgraded version makes the application more secure, performant, and allows a faster implementation of bug fixes or enhancements.
  • Implementing Azure Key Vault and App Configuration will enhance the security of the application and the data it provides to its users.
  • Integrating Azure App Insights into JIS-Link provides significant benefits:
    • Enhanced Performance Monitoring: Azure App Insights offers comprehensive monitoring of the application's performance, enabling the business and the support staff to detect and diagnose performance issues before they impact users, thereby maintaining the application's reliability and user satisfaction.
    • User Behavior Analytics: The tool provides detailed insights into how users interact with the application, such as which features are most used and the paths users take within the application. This data helps in understanding user preferences and can guide the product owner to align with user needs.
    • Financial Efficiency: By monitoring user interactions, the business can analyze the cost-effectiveness of its current pricing model and adjust strategies to maintain or enhance the methods of recouping costs.
    • Operational Intelligence: App Insights can track live metrics and provide alerts on system health, enabling proactive maintenance and minimizing downtime. This is crucial for maintaining service quality and user trust, especially for a paid service.
    • Tailored Features: User behavior insights gained through App Insights can lead to the development of features and services that more closely match user needs and preferences, thereby enhancing user satisfaction.
Any Additional Information:

See attached vison and scope.

Endorsement Detail
Endorsing Committee
   AOC (endorses for other communities)
Endorser Name:
   Ammons, Kevin
Origination Date:
   04/02/2024
Endorsing Action: Endorsed
AOC Analysis Detail
Analysis Date: 05/17/2024
Request Rationale
Aligns with JIS Business Priorities, IT Strategies & Plans: Yes
Aligns with applicable policies and with ISD Standards: Yes
Breadth of Solution Benefit: Narrow
Cost Estimates
Cost to Implement? $500,000
Feasibility Study needed? No
Court Level User Group
Non-JIS
Approving Authority CIO
Request Summary:

This is a request to migrate all remaining JIS-Link features to .NET Core and to start utilizing Azure services: Key Vault, App Configuration, and Application Insights.

Business Impacts:

This change will provide the following benefits:

• Upgrading to .NET Core and consolidating two code bases into one upgraded version makes the application more secure, performant, and allows a faster implementation of bug fixes or enhancements.


• Implementing Azure Key Vault and App Configuration will enhance the security of the application and the data it provides to its users.


• Integrating Azure App Insights into JIS-Link provides significant benefits: o Enhanced Performance Monitoring: Azure App Insights offers comprehensive monitoring of the application's performance, enabling the business and the support staff to detect and diagnose performance issues before they impact users, thereby maintaining the application's reliability and user satisfaction.


User Behavior Analytics: The tool provides detailed insights into how users interact with the application, such as which features are most used and the paths users take within the application. This data helps in understanding user preferences and can guide the product owner to align with user needs.


Financial Efficiency: By monitoring user interactions, the business can analyze the cost-effectiveness of its current pricing model and adjust strategies to maintain or enhance the methods of recouping costs.

Operational Intelligence: App Insights can track live metrics and provide alerts on system health, enabling proactive maintenance, and minimizing downtime. This is crucial for maintaining service quality and user trust, especially for a paid service.

Tailored Features: User behavior insights gained through App Insights can lead to the development of features and services that more closely match user needs and preferences, thereby enhancing user satisfaction.

Improved Application Security: Implementing Azure Key Vault and App Configuration will improve the security of the application and the data it provides to its users. The Azure Keyvault ensures that keys and secrets are protected with hardware security modules (HSMs) and provides controlled access, while Azure App Configuration allows for a centralized approach to managing application settings in a secure and scalable manner.

Summary of Proposed Solution

The Administrative Office of the Courts (AOC) would leverage the overall benefits of migrating the JIS-Link application to .NET Core, including improved performance and enhanced security. This solution will enhance security by storing sensitive configurations and secrets managed through Azure Key Vault and App Configuration. When this request is completed it will allow monitoring through Azure Application Insights for better insight into application performance, server loads, and user trends.

Proposed Solution

AOC proposes the following solution:


• All the staff that support JIS-Link application will go through the training in Azure Key Vault, App Configuration, and Application Insights.
• Migrate all remaining JIS-Link features from .NET Framework to .NET Core. Any third-party libraries used will also be upgraded to a versions that is compatible with .NET Core. Perform regression testing of the JIS-Link appliation to ensure the functionality remains the same after the upgrade.
• Create the JIS-Link Key Vault instance and App Configuration with all values needed for development, test and production environments, in the management group, subscriptions, and resource groups identified for JIS-Link.
• Create the JIS-Link Application Insights resource needed for all environments. Ensure sufficient information is captured into the Application Insights for the application errors generated.

Additional Systems Affected
Other
Communities Impacted
Public and Other Users
Confirmation of Endorsing Action Detail
Endorsing Committee
   AOC (endorses for other communities)
Endorser Name:
   Escudero, Arsenio on behalf of AOC Endorsement Group
Origination Date:
   05/17/2024
Endorsing Action: Endorsed
Court Level User Group Decision Detail
CLUG Non-JIS
Chair of Group Non-JIS CLUG
Date of Decision 05/17/2024
Decision
Decision to Recommend for Approval Unamimously recommended to the approving authority
Priority Processing Status Prioritized
Scoring Detail
In making their decision, detailed score values were not provided by Non-JIS.
Pros & Cons (if vote is not unanimous)

NA

Court Level User Group Decision Detail
CLUG Non-JIS
Chair of Group Non-JIS CLUG
Date of Decision 05/17/2024
Decision
Decision to Recommend for Approval Unamimously recommended to the approving authority
Priority Processing Status Prioritized
Scoring Detail
In making their decision, detailed score values were not provided by Non-JIS.
Pros & Cons (if vote is not unanimous)

NA

Implementation Detail
Analysis Date:
Implementation Stage Authorized
Prioritization Option: Prioritized
 

Privacy and Disclaimer NoticesSitemap

© Copyright 2024. Washington State Administrative Office of the Courts.

S3