|
1375 - Upgrade to .NET Core and add Azure Services to JIS-Link Web Application
|
|
Request Status Summary |
Request Status |
Authorized |
|
Request Detail |
Requestor Name: |
|
Kovuri, Jayasekhar |
Origination Date: |
|
03/25/2024 |
|
|
Recommended Endorser:
|
|
AOC (endorses for other communities) |
|
Request Type: |
New System
|
Which Systems are affected? |
Other
|
Other affected Systems / Business Processes |
JIS-Link Web Application |
Business Area: |
Security
|
Communities Impacted: |
Public and Other Users
|
Impact if not Resolved: |
High |
Impact Description: |
There are some risks associated with implementing Azure services and upgrading JIS-Link to .NET Core. These include:
- JIS-Link features that rely on any third-party libraries may prevent those selective features from upgraded to .NET Core.
- Potential exposure of configuration data including database access credentials as the configurations transit from the WA Courts Azure tenant to the AOC datacenter. This will be mitigated by making sure all communications between the Azure tenant and the AOC datacenter are done over encrypted and secured data channels.
- Potential misconfiguration of applications in differing environments or as staff toggle between legacy .NET Framework configuration management and this new form of configuration management. This will be mitigated by establishing clear patterns for configuration stores and ensuring only trained and authorized staff can make configuration data changes.
However, there are several risks associated with not undertaking this project including:
- Increased workload and the possibility of website disruptions could result from maintaining two codebases for the legacy .NET Framework and .NET Core.
- Inability to migrate web applications and web services to the .NET CORE and maintain application security.
- JIS-Link will not comply with the AOC's IT modernization standards.
- Lacking comprehensive application monitoring, like Azure Application Insights, limits the ability of server administrators and website support staff to quickly identify and resolve performance related issues. Stakeholders will be unable to observe user trends and understand how the application is being used.
|
|
|
What is the Business Problem or Opportunity |
This is a request to migrate all remaining JIS-Link features to .NET Core and to start utilizing Azure services: Key Vault, App Configuration, and Application Insights.
JIS-Link operates a public-facing, predominantly paid-user website, hosted in a Demilitarized Zone (DMZ), which currently relies on the aging .NET Framework for its operation. This dependency presents some business problems and opportunities for modernization and efficiency gains through technological upgrades.
While the existing .NET Framework supports encryption within configuration files, the move to .NET Core represents a shift towards more modern and versatile approaches to managing data, such as leveraging Azure Key Vault. This method aligns with the new AOC security standards and best practices by storing sensitive information securely away from the application's codebase.
The need to maintain dual codebases for JIS-Link features still on .NET Framework and those migrated to .NET Core introduces operational inefficiencies. It increases the complexity of updates, increases the risk of inconsistencies in application behavior, and hinders the rapid development of new features. Consolidating the application codebase on .NET core simplifies the development pipeline, reducing maintenance overheads.
Without advanced monitoring tools, JIS-Link lacks the ability to track, analyze, and respond to real-time data on application performance, server loads, and user activity trends. This gap in capabilities impedes proactive decision-making and optimization of user experience and system reliability. Due to low engagement across the broad JIS-Link user base, it is crucial to monitor their activity and proactively offer more value, while also recouping costs. Implementing Azure Application Insights offers a comprehensive solution for monitoring application health, performance metrics, and user interaction trends.
|
Expected Benefit: |
Benefits to the Business and End Users:
- Upgrading to .NET Core and consolidating two code bases into one upgraded version makes the application more secure, performant, and allows a faster implementation of bug fixes or enhancements.
- Implementing Azure Key Vault and App Configuration will enhance the security of the application and the data it provides to its users.
- Integrating Azure App Insights into JIS-Link provides significant benefits:
- Enhanced Performance Monitoring: Azure App Insights offers comprehensive monitoring of the application's performance, enabling the business and the support staff to detect and diagnose performance issues before they impact users, thereby maintaining the application's reliability and user satisfaction.
- User Behavior Analytics: The tool provides detailed insights into how users interact with the application, such as which features are most used and the paths users take within the application. This data helps in understanding user preferences and can guide the product owner to align with user needs.
- Financial Efficiency: By monitoring user interactions, the business can analyze the cost-effectiveness of its current pricing model and adjust strategies to maintain or enhance the methods of recouping costs.
- Operational Intelligence: App Insights can track live metrics and provide alerts on system health, enabling proactive maintenance and minimizing downtime. This is crucial for maintaining service quality and user trust, especially for a paid service.
- Tailored Features: User behavior insights gained through App Insights can lead to the development of features and services that more closely match user needs and preferences, thereby enhancing user satisfaction.
|
Any Additional Information: |
See attached vison and scope.
|
Endorsement Detail
|
Endorsing Committee |
|
AOC (endorses for other communities) |
Endorser Name: |
|
Ammons, Kevin |
Origination Date: |
|
04/02/2024 |
|
Endorsing Action: |
Endorsed |
|
|
AOC Analysis Detail
|
Analysis Date: |
05/17/2024
|
Request Rationale |
Aligns with JIS Business Priorities, IT Strategies & Plans: |
Yes |
Aligns with applicable policies and with ISD Standards: |
Yes |
Breadth of Solution Benefit: |
Narrow |
Cost Estimates |
Cost to Implement? |
$500,000 |
Feasibility Study needed? |
No |
Court Level User Group |
Non-JIS |
Approving Authority |
CIO |
|
Request Summary: |
This is a request to migrate all remaining JIS-Link features to .NET Core and to start utilizing Azure services: Key Vault, App Configuration, and Application Insights.
|
Business Impacts: |
This change will provide the following benefits:
• Upgrading to .NET Core and consolidating two code bases into one upgraded version makes the application more secure, performant, and allows a faster implementation of bug fixes or enhancements.
• Implementing Azure Key Vault and App Configuration will enhance the security of the application and the data it provides to its users.
• Integrating Azure App Insights into JIS-Link provides significant benefits: o Enhanced Performance Monitoring: Azure App Insights offers comprehensive monitoring of the application's performance, enabling the business and the support staff to detect and diagnose performance issues before they impact users, thereby maintaining the application's reliability and user satisfaction.
User Behavior Analytics: The tool provides detailed insights into how users interact with the application, such as which features are most used and the paths users take within the application. This data helps in understanding user preferences and can guide the product owner to align with user needs.
Financial Efficiency: By monitoring user interactions, the business can analyze the cost-effectiveness of its current pricing model and adjust strategies to maintain or enhance the methods of recouping costs.
Operational Intelligence: App Insights can track live metrics and provide alerts on system health, enabling proactive maintenance, and minimizing downtime. This is crucial for maintaining service quality and user trust, especially for a paid service.
Tailored Features: User behavior insights gained through App Insights can lead to the development of features and services that more closely match user needs and preferences, thereby enhancing user satisfaction.
Improved Application Security: Implementing Azure Key Vault and App Configuration will improve the security of the application and the data it provides to its users. The Azure Keyvault ensures that keys and secrets are protected with hardware security modules (HSMs) and provides controlled access, while Azure App Configuration allows for a centralized approach to managing application settings in a secure and scalable manner.
|
Summary of Proposed Solution |
The Administrative Office of the Courts (AOC) would leverage the overall benefits of migrating the JIS-Link application to .NET Core, including improved performance and enhanced security. This solution will enhance security by storing sensitive configurations and secrets managed through Azure Key Vault and App Configuration. When this request is completed it will allow monitoring through Azure Application Insights for better insight into application performance, server loads, and user trends.
|
Proposed Solution |
AOC proposes the following solution:
• All the staff that support JIS-Link application will go through the training in Azure Key Vault, App Configuration, and Application Insights.
• Migrate all remaining JIS-Link features from .NET Framework to .NET Core. Any third-party libraries used will also be upgraded to a versions that is compatible with .NET Core. Perform regression testing of the JIS-Link appliation to ensure the functionality remains the same after the upgrade.
• Create the JIS-Link Key Vault instance and App Configuration with all values needed for development, test and production environments, in the management group, subscriptions, and resource groups identified for JIS-Link.
• Create the JIS-Link Application Insights resource needed for all environments. Ensure sufficient information is captured into the Application Insights for the application errors generated.
|
Additional Systems Affected |
Other
|
Communities Impacted |
Public and Other Users
|
|
|
Confirmation of Endorsing Action Detail
|
Endorsing Committee |
|
AOC (endorses for other communities) |
Endorser Name: |
|
Escudero, Arsenio on behalf of AOC Endorsement Group |
Origination Date: |
|
05/17/2024 |
|
Endorsing Action: |
Endorsed |
|
|
Court Level User Group Decision Detail
|
CLUG |
Non-JIS |
Chair of Group |
Non-JIS CLUG |
Date of Decision |
05/17/2024 |
Decision |
Decision to Recommend for Approval |
Unamimously recommended to the approving authority |
Priority Processing Status |
Prioritized |
|
Scoring Detail |
In making their decision, detailed score values were not provided by Non-JIS.
|
|
Pros & Cons (if vote is not unanimous) |
NA
|
|
Court Level User Group Decision Detail
|
CLUG |
Non-JIS |
Chair of Group |
Non-JIS CLUG |
Date of Decision |
05/17/2024 |
Decision |
Decision to Recommend for Approval |
Unamimously recommended to the approving authority |
Priority Processing Status |
Prioritized |
|
Scoring Detail |
In making their decision, detailed score values were not provided by Non-JIS.
|
|
Pros & Cons (if vote is not unanimous) |
NA
|
|
Implementation Detail
|
Analysis Date: |
|
Implementation Stage
|
Authorized
|
Prioritization Option:
|
Prioritized
|
|
|
|
|
|