How can we export Ecom Express logs to our SIEM with least-privilege scopes?

An effective rollback and communications plan for a Delhivery pilot addresses both technical recovery and stakeholder communication in the event of performance regressions. This dual-track strategy ensures system stability while maintaining user trust and alignment across teams.
Technical rollback plan
Phase 1: Preparation (Before rollout)

• Implement feature flags
• Establish monitoring and alerting
• Create rollback scripts
• Test the rollback
• Document everything

Phase 2: Execution (Upon regression)

• Immediate action
• Verify stability
• Perform root cause analysis
• Decide next steps

Communications plan
Phase 1: Preparation (Before rollout)

• Identify stakeholders
• Create communication templates
• Define communication channels
• Appoint a communications owner

Phase 2: Execution (Upon regression)

• Internal notification
• Pilot user notification
• Regular updates
• Post-mortem summary

To restrict Shiprocket features to a pilot group, you would implement a multi-layered strategy using a feature flag system and role-based policy controls. This approach allows for granular control, ensuring only authorized pilot users have access to the new features while maintaining stability for the general user base.

• Step 1: Set up a feature flag management system

Instead of building a feature-flagging system from scratch, use a dedicated management platform like LaunchDarkly, ConfigCat, or Harness. These services provide robust infrastructure for defining and managing flags without modifying your core application code.

• Step 2: Define your pilot group

Create a specific user segment for your pilot group within your feature flag management system. You will define the criteria for membership in this group, which can include

• Step 3: Implement feature flags in your code

Wrap the new Shiprocket-related feature code within conditional logic that references your feature flag. The logic should check if the feature flag is enabled for the current user.

• Step 4: Add role-based policy controls

Layer on policy controls to ensure access is governed by user roles, especially for sensitive features. You can integrate your identity and access management (IAM) system (such as Microsoft Entra ID or Auth0) with your application.

• Step 5: Configure rollout and monitoring

Use the feature flag platform to manage the rollout and gather data on the pilot program's success.

• Step 6: Automate with webhooks for specific features

For certain Shiprocket features, like webhooks, you can set up a similar process. Shiprocket allows you to enable webhooks through its API settings.