Revoke Public Access to tv-lbext

As part of Akamai activation, after traffic redirected to Akamai [1] and [2] last week, site infra team will close public access to tv-lbext [3] on port 80 and 443.

tv-lb cloudwatch dashboard shown most of the traffic already go through Akamai (https://ap-southeast-1.console.aws.amazon.com/cloudwatch/home?region=ap-southeast-1#dashboards:name=tv-lb)

After this changes, tv-lbext port 80 and 443 will be accessible from:

Akamai production
Akamai staging
Distil
Telkomsel (for umbtv)

Plan

Remove inbound 0.0.0.0/0 port 80 and 443 by running tv-lbext security group role

Impact:

Should be no impact to end users since all traffic already redirected to Akamai.

Duration:

10 minutes

Time:

Monday, 2017-05-15T15:15:00 (UTC+7)

Notes:

Please contact Site-Infra on #site-infra-channel if after this maintenance if there are problems related to tv-lbext.

[1] https://tvlk.slack.com/files/shvetsov/F5AR00R8E/Re-activate_Akamai
[2] https://29022131.atlassian.net/servicedesk/customer/portal/11/TOSD-1273
[3] https://29022131.atlassian.net/servicedesk/customer/portal/11/TOSD-1292