Access Request Monitor Requirements

Project Title	Access Request Monitor
Description	Will monitor the API Product access requests in Apigee and send out emails to the requestors in order to start the Access Request process.
Epic
Document Status	DRAFT
Document Owner
Document Sign-Off
Subject Matter Expert(s)
Technical Expert(s)

Background & Business Value

An automated task which will monitor access requests from users to auto-approve particular APIs and send Access Request information about restricted APIs.

Goals

Run automated tasks in production ready environment

Assumptions

Currently running on Steven Maglio's machine and needs to be moved someplace that has more stability and greater access from team members.
- Maybe AWS Lambda?

Out of Scope

Requirements

Ticket(s)	Title	User Story	Priority	Notes
	Auto Approve APIs	As an API Provider, I want particular APIs that I provide to be auto-approved when requested.	MUST HAVE	The guidelines and standards were updated on 20 Jul 2018 to allow for API Products to be set to auto approved. This should no longer be required from the scheduled task.
	Send Access Request Info Email	As an API Provider, if a user/application requests access to an API that requires an Access Request Approval, then I would like for an email to be sent which will help the requester start the process.	MUST HAVE	Email should contain Short description of the Access Request Process A copy of the Access Request Form (Box Link) Is the form what we really want in the long run? (Questions) A link to documentation on the Developer Portal website This email should only be sent once. The system will need to remember who and has sent to and when in order to be assured that ... It does not send the email twice for the same request It does send an email for each request (if the application requested access two weeks ago, and then turned off the product, and are re-requesting access, it should send the email again). There should only be one email sent. It an application requests access to multiple APIs, there should only be one email sent.
APIGEE-120	Access Request Info Page	As an API Consumer, I would like for there to be documentation on what the process will be like.	MUST HAVE	An end user focused documentation page on the Developer Portal. Should have the Access Request Form as a download Should describe the form and have detailed information on how to fill it out Should the overall process that should occur and give estimated time frames for how long steps will take
	API Access Request Page Info		NICE TO HAVE	If possible, when asking for access to an API in the Developer Portal, the portal should have descriptive text and a link to the Access Request Form.

User Interaction, Design & Architecture

Examples and References

Questions

Below is a list of questions to be addressed as a result of this requirements document:

Question	Outcome	Decision Date
Vince Nievares - Is the Access Request Form really what we want in the long term? Is there a better tool or technology that we would want to switch to? Where are the filled out/approved Access Request Forms currently stored?