c9763676e1
fix(iam): add apply-role IAM list permissions (PLAT-146)
...
apply-role IamReadOnly omitted ListRoleTags and ListInstanceProfilesForRole needed after detaching the substrate guardrail.
2026-09-02 17:38:48 -04:00
ecc0e17ea5
feat(iam): import hcptf roles into app Terraform (PLAT-146)
...
Move the existing hcptf pair into this repo so app Terraform owns prod IAM after the substrate handoff.
2026-09-02 14:49:06 -04:00
dependabot[bot]
3c7bc7e8b1
chore(deps): bump hashicorp/aws ( #60 )
2026-08-25 18:01:47 +00:00
Adam Moussa
f231730c24
fix(iam): attach per-workload lambda permissions boundary (PLAT-52) ( #49 )
2026-08-20 16:02:33 -04:00
dependabot[bot]
48d613f104
chore(deps): bump the minor-and-patch group in /terraform with 2 updates ( #48 )
...
Bumps the minor-and-patch group in /terraform with 2 updates: [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws ) and [hashicorp/external](https://github.com/hashicorp/terraform-provider-external ).
Updates `hashicorp/aws` from 6.58.0 to 6.60.0
- [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases )
- [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/terraform-provider-aws/compare/v6.58.0...v6.60.0 )
Updates `hashicorp/external` from 2.4.0 to 2.4.1
- [Release notes](https://github.com/hashicorp/terraform-provider-external/releases )
- [Changelog](https://github.com/hashicorp/terraform-provider-external/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/terraform-provider-external/compare/v2.4.0...v2.4.1 )
---
updated-dependencies:
- dependency-name: hashicorp/aws
dependency-version: 6.60.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: hashicorp/external
dependency-version: 2.4.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 13:35:14 -04:00
Adam Moussa
7bbdbabe3a
feat(terraform): migrate front-integrations to HCP Terraform (PLAT-72) ( #41 )
...
* feat(terraform): migrate front-integrations to HCP Terraform
Freeze SAM CD and add Terraform for seahaven-prod (Lambdas, DynamoDB,
EventBridge, alarms) so HCP becomes the sole deploy path. Include prod
secret ARNs in the tfvars example for workspace wiring.
* fix(terraform): reject symlink sources in Lambda package build
2026-08-05 18:48:16 -04:00
