Create data-flow-sequence-diagram.md

[hinzed1127]

No description provided.

[kjduensing]

Nice high-level diagram! I'm wondering to what level we should address these points on the Readiness Review ticket:

• Data Flow Diagram:
  • This diagram must illustrate the following specifics.
  • What data is collected or used, and where, including information such as credentials used by this system?
  • Where is the data is stored and how, including information such as any encryption used?
  • How is the data transferred, including information such as any encryption used?
  • Who accesses the data and in what capacity (read or read-write)?
  • What is the audit trail of data access and manipulation?

[kjduensing]

I'm leaning toward answering these in-diagram from our (VA.gov) perspective and not try to answer for the backing API team.

What do you think?

[hinzed1127]

I think that's fine, whether that's in the diagram or any additional information below the diagram

[kjduensing]

Let's add it in the diagram. Let me know if you need help fitting something into diagram form

[hinzed1127]

@kjduensing I cleaned up the non-diagram stuff to add in things discussed above, i.e., a few outstanding questions related to certain steps in the diagram, and an appendix linking to the Sign-in Service auth sequence diagram. Considering that sufficient for now.