What rollback and comms plan should we prepare in case the Delhivery roll-out causes performance regressions?

To export Ecom Express logs to a Security Information and Event Management (SIEM) system with least-privilege scopes, you must use a layered approach that involves your application and an intermediary service. Ecom Express does not offer direct, configurable SIEM integrations. The logs you want are the records of your application's interactions with the Ecom Express APIs.

To restrict Shiprocket features to a pilot group, you would implement a multi-layered strategy using a feature flag system and role-based policy controls. This approach allows for granular control, ensuring only authorized pilot users have access to the new features while maintaining stability for the general user base.

• Step 1: Set up a feature flag management system

Instead of building a feature-flagging system from scratch, use a dedicated management platform like LaunchDarkly, ConfigCat, or Harness. These services provide robust infrastructure for defining and managing flags without modifying your core application code.

• Step 2: Define your pilot group

Create a specific user segment for your pilot group within your feature flag management system. You will define the criteria for membership in this group, which can include

• Step 3: Implement feature flags in your code

Wrap the new Shiprocket-related feature code within conditional logic that references your feature flag. The logic should check if the feature flag is enabled for the current user.

• Step 4: Add role-based policy controls

Layer on policy controls to ensure access is governed by user roles, especially for sensitive features. You can integrate your identity and access management (IAM) system (such as Microsoft Entra ID or Auth0) with your application.

• Step 5: Configure rollout and monitoring

Use the feature flag platform to manage the rollout and gather data on the pilot program's success.

• Step 6: Automate with webhooks for specific features

For certain Shiprocket features, like webhooks, you can set up a similar process. Shiprocket allows you to enable webhooks through its API settings.