feat(exec-aide): CMK SSE on exec-aide DynamoDB table (INFRA-95) #53

Merged
amoussa1229 merged 2 commits from infra-95-execaide-cmk into main 2026-06-09 16:41:56 +00:00

2 commits

Author SHA1 Message Date
Adam Moussa
7b6832fbe7
Merge branch 'main' into infra-95-execaide-cmk 2026-06-09 12:00:41 -04:00
9f14124b8b feat(exec-aide): CMK SSE on exec-aide DynamoDB table (INFRA-95 / M-3)
Switch the exec-aide table from the AWS-owned key to the shared
customer-managed CMK (alias/seahaven-dynamodb, imported via SSM
/seahaven/dynamodb/cmk-arn). In-place UpdateTable, no replacement.
CDK auto-grants kms to the 5 in-stack consumer roles (4 pipeline
Lambdas + SocketMode Fargate task role). Deployed + verified:
SSEType=KMS, scan decrypts, ECS service healthy.

INFRA-95
2026-06-09 11:59:27 -04:00