A Singapore Government Agency Website

Frequently Asked Questions (FAQ)

File Management & Storage

100MB

Currently, there is no data storage limit for Optical subscriptions.

Currently, there is no data transfer limit for any of the hosting optical subscriptions.

Yes, Agencies can raise a service request to download the database dump.
The database backup frequency is daily full backup
Yes, Agencies can raise a service request to get the source code of a Optical basic website.

Security & Compliance

Yes, the data at rest and at transit are encrypted and complies with IM8 DP-2 & DP-3.
Additionally, REST API calls to Optical Content Studios must use the HTTPS protocol. This means that data is encrypted using TLS.

Optical has implemented several measures to ensure high availability and disaster recovery:

  • Data Center Redundancy: Optical takes full advantage of Availability Zones provided natively by AWS cloud provider, allowing sites to handle traffic from 3 data centers (1a, 1b, 1c) in Singapore. The Availability Zones (1a, 1b, 1c) setup is sufficient to fulfill traditional disaster recovery requirements by deploying sites across different data centers. Therefore, no additional contingency site is needed for data center downtime concerns.

  • Cloud Provider Redundancy: If tenants have concerns about cloud provider downtime, Optical cannot provide multi-cloud services in the near future due to the effort required to setup and maintain another cloud provider. However, tenants can consider the Optical CMS-only setup where they self-host their public web application.

  • Regional Redundancy: Optical cannot provide multi-region services due to Singapore data residency requirements. However, tenants can consider the Optical CMS-only setup where they self-host their public web application if they require multi-region deployment.

Please refer to [Optical-Flex Documentation](https://docs.developer.tech.gov.sg/docs/optical-documentation-beta/developer-hub/cicd/flex-full-stack)
Yes, The scope of performance load test for Agencies is their website. (e.g. www.agency.gov.sg). Agencies are advised to raise a service request via [Optical Service Desk](https://go.gov.sg/optical-service-desk) and provide the schedule to Optical Team.
The scope of VA/PT for Agencies is their website (e.g. www.agency.gov.sg).
Agency and Tenant developers are urged to closely follow the quarterly VA sessions however depending on the nature of the extension, exceptions might be made.
In the context of VA and PT for **extensions**, Optical team will consider accepting the request case by case.

In the context of VA and PT for the agency website, it is the scope of the Agency and the Agency can utilise GVT(T)20006 for VA and PT.

Yes, Optical is integrated with CAM however Agency needs to perform a User Access Review as per IM8 policies.
Optical can host data up to data restricted / sensitive-normal.

Development & Technical

Agency and the Tenant Developers should not interface with our database engine directly. As such, there should not be a need to know what the database engine used by Optical is. Instead, they should perform operations on data using the API endpoints provided by Optical.

Yes, there will be a repository for each extension. An example is shown below.

Agency
|- Optical Public Web
|- Extensions
  |- Extension A
  |- Extension B

Yes, Agencies/Tenant developers are free to create their data model that suits their business use case.

This is a feature that has to be developed by the tenant developer. Tenant developers can contact the Optical team for more information about how to handle cache invalidation on our CDN if required

Please refer to Optical-Flex.

Yes, Agencies can raise a service request to get the source code of a Optical basic website.
Sharing extensions with the Optical community in entirely optional. It is up to the agency or their appointed web developer to decide whether an extension should be made publicly available.

For example, if a web developer works with multiple agencies and believes a particular extension could benefit others, they may choose to contribute it to the Optical community. However, agencies are free to keep their extensions private for use within their own websites. The Optical team does not require that all extensions be shared.

The security scans that are part of deployment pipeline are Nexus IQ scan, Secret detection, FOD SAST & FOD DAST

Features & Capabilities

Currently, Optical does not have an email campaign feature.

Yes, Agencies are free to decide the hosting model that is the best fit for their business purpose.
Tenant web developers can request their Agency PM's or POC's to create a seat for the developers in SHIP/HATS.
Offshore devs will not be given access to the Optical provided repositories. If Tenant developers configure repository mirroring, then you may give offshore developers access to your managed repository.
Currently, multiple websites will have dedicated Optical resources. Sharing of resources is currently under development.
Yes, Optical supports scheduled publishing.
Yes, Optical supports workflows approval routing.
Yes, Agencies can use bulk tender (GVT(T)23009) for the maintenance of their websites hosted on Optical.
Yes, Optical supports intranet website. Optical team would require whitelisted IP ranges to be provided during onboarding.
Yes, Agencies are free to decide the hosting model that is the best fit for their business purpose.

CMS Backend: Optical backend CMS follows semantic versioning.

Example: A.1.0

  • 0 = minor version or patch
  • 1 = major version
  • A = major release

Upgrade Policy:

  • All minor versions will be automatically pushed
  • Major versions and major releases are pull upgrades, meaning tenant developers must follow the EOL (End of Life) policy of the major versions and manually pull from the available releases

Frontend (Public-web): For tenants on Full Flex hosting model and CMS Only model, tenant developers manage the versioning and upgrade of the public-web.

Inform Agency about your plan for deployment.
  1. Fix a schedule for UAT.
  2. Create a merge request into your own repo’s main branch.
  3. Get the designated Tech Lead to review code and merge to main branch.
  4. Mirroring kicks in and codes gets mirrored to SGTS Gitlab main branch.
  5. Deployment pipeline run starts.
  6. Build → packages → security tests are run → reports → pushes the image to ECR → deploys to STG
  7. Reports will have security findings → Development team to remediate → while agency performs UAT.
  8. Tenant developer fixes the security findings or raises security risk acceptance.
  9. Repeat steps 3 to 7, until there are no security findings.
  10. Deploys to staging
  11. Functional UAT is performed.
  12. Gets approval from Agency for Production deployment.
  13. Agency approves then Production resources are deployed.
Chat with me!
Bot Launcher