bamboohr-prod-checklist

# BambooHR Production Checklist ## Overview Complete pre-launch checklist for deploying BambooHR integrations to production, covering API configuration, data integrity, monitoring, and rollback procedures. ## Prerequisites - Staging environment tested and verified - Production BambooHR API key ready - Deployment pipeline configured - Monitoring and alerting infrastructure available ## Instructions ### Pre-Deployment Checklist #### Authentication & Secrets - [ ] Production API key created under a service account (not personal account) - [ ] API key stored in secrets manager (AWS Secrets Manager / GCP Secret Manager / Vault) - [ ] `BAMBOOHR_COMPANY_DOMAIN` set correctly for production - [ ] Webhook secret stored securely - [ ] Key rotation procedure documented and tested - [ ] Old staging/test keys will not be deployed to production #### API Integration Quality - [ ] All API calls use `Accept: application/json` header - [ ] Error handling covers all BambooHR HTTP statuses (400, 401, 403, 404, 503) - [ ] `X-BambooHR-Error-Message` header parsed for error details - [ ] `Retry-After` header honored on 503 responses - [ ] Exponential backoff with jitter implemented for retries - [ ] Request queue limits concurrent API calls (max 3-5 parallel) - [ ] No hardcoded employee IDs, company domains, or API keys #### Data Integrity - [ ] Custom reports validated against expected field schema - [ ] Employee directory sync handles new, updated, and terminated employees - [ ] Date fie...