Adam Moussa
|
c5c29b2bef
|
fix(iam): attach per-workload lambda permissions boundary (PLAT-52) (#148)
* fix(iam): attach per-workload lambda permissions boundary (PLAT-52)
* fix(iam): skip boundary delete on weekly-menu role (PLAT-52)
|
2026-08-20 16:02:46 -04:00 |
|
Adam Moussa
|
60abc9fb50
|
fix(apigateway): grant admin authorizer invoke via resource policy (#136)
Drop the broken AuthorizerCredentialsArn invoke role path that returned
500 without calling the authorizer, and adopt the live Lambda permission.
|
2026-08-10 17:17:51 -04:00 |
|
|
|
1f67543f16
|
fix(ci): satisfy PR policy and authorizer trust constraints
Move weekly-menu step expressions into env blocks, terraform-fmt SES
alignment, and pin API Gateway authorizer invoke role assume conditions.
|
2026-08-07 19:33:49 -04:00 |
|
|
|
1728f6e408
|
fix(iam): scope SES SendRawEmail to verified identities
Constrain the email-report role to the sender and domain identity ARNs so the policy is not unconstrained write.
|
2026-08-07 19:21:45 -04:00 |
|
|
|
40ea4ed898
|
feat(infra): migrate meal-order-manager to HCP Terraform
Freeze SAM CD and add greenfield Terraform for seahaven-prod so HCP is the sole stack deploy path.
|
2026-08-07 19:19:51 -04:00 |
|
