Review owner access on Google Search Console
On https://gitlab.com/gitlab-com/gl-infra/production/issues/1107 we had to attend a security incident related to the Google Search Console. Two issues arise from the fact that we only have three individual people (@devin, @andrewn and I) as owners:
- Security notifications only go to the email address of the owners. If the 3 owners would've been OOO we wouldn't have been alerted to the incident (and even worse, it happened on a weekend where people are usually not checking their work email if they're not on-call)
- Only the owners have access to administrative features, so if they're not available mitigation is not possible (this also happened in the incident, where I was away from my laptop and therefore unable to mitigate faster)
We should think on how to improve this situation.