|
|
5a00cc33fa
|
fix(cloudfront): defer custom domain alias until DNS cutover
|
2026-08-10 13:46:04 -04:00 |
|
|
|
1f67543f16
|
fix(ci): satisfy PR policy and authorizer trust constraints
Move weekly-menu step expressions into env blocks, terraform-fmt SES
alignment, and pin API Gateway authorizer invoke role assume conditions.
|
2026-08-07 19:33:49 -04:00 |
|
|
|
3906ad1885
|
fix(infra): assert google-client-id SSM exists at plan time
Wire the google_client_id data source into a check so apply fails closed when the OOB parameter is missing.
|
2026-08-07 19:28:25 -04:00 |
|
|
|
1728f6e408
|
fix(iam): scope SES SendRawEmail to verified identities
Constrain the email-report role to the sender and domain identity ARNs so the policy is not unconstrained write.
|
2026-08-07 19:21:45 -04:00 |
|
|
|
40ea4ed898
|
feat(infra): migrate meal-order-manager to HCP Terraform
Freeze SAM CD and add greenfield Terraform for seahaven-prod so HCP is the sole stack deploy path.
|
2026-08-07 19:19:51 -04:00 |
|
