adam/meal-order-manager
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/meal-order-manager.git synced 2026-09-30 07:43:13 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
meal-order-manager/terraform
History
Adam Moussa f7957436bd
Some checks failed
Deploy API / Deploy API to dev (push) Has been cancelled
Details
Deploy API / Deploy API to prod (push) Has been cancelled
Details
fix(iam): drop githubdeploy workflow_ref OIDC condition (PLAT-222) (#215) 
* fix(iam): drop githubdeploy workflow_ref OIDC condition

AWS STS does not evaluate GitHub workflow_ref, so that trust condition fail-closes AssumeRoleWithWebIdentity.

* chore(security): retarget githubdeploy Checkov suppression

Dropping the workflow_ref trust condition shifted CKV_AWS_111 from line 49 to 42. Permissions are unchanged.

* style: apply formatter

---------

Co-authored-by: sea-haven-auto-fix[bot] <5037331+sea-haven-auto-fix[bot]@users.noreply.github.com>
2026-09-22 21:30:25 +00:00
..
bootstrap feat(api): serve meals on ECS Fargate instead of Lambda (PLAT-215) (#199) 2026-09-21 19:34:24 +00:00
.terraform.lock.hcl chore(deps): update terraform random to v3.9.1 (#211) 2026-09-22 14:33:14 +00:00
acm.tf feat(infra): add lightweight meal-order-manager-dev (PLAT-210) (#195) 2026-09-18 18:38:45 +00:00
alarms.tf feat(api): serve meals on ECS Fargate instead of Lambda (PLAT-215) (#199) 2026-09-21 19:34:24 +00:00
cloudfront.tf feat(api): serve meals on ECS Fargate instead of Lambda (PLAT-215) (#199) 2026-09-21 19:34:24 +00:00
data.tf feat(api): add OpenAPI Redocly contract and VPC outputs (DEV-289) (#206) 2026-09-22 00:33:48 +00:00
dynamodb.tf feat(infra): add lightweight meal-order-manager-dev (PLAT-210) (#195) 2026-09-18 18:38:45 +00:00
ecs.tf feat(api): add flask sentry sdk (#205) 2026-09-21 23:48:09 +00:00
hcp_iam.tf fix(iam): move hcptf apply grants off the 10KB inline quota (#201) 2026-09-21 20:03:22 +00:00
iam.tf fix(iam): omit checkcomponents from the ECS boundary in non-prod (#202) 2026-09-21 16:26:17 -04:00
iam_github_deploy.tf fix(iam): drop githubdeploy workflow_ref OIDC condition (PLAT-222) (#215) 2026-09-22 21:30:25 +00:00
iam_github_weekly_menu.tf feat(api): serve meals on ECS Fargate instead of Lambda (PLAT-215) (#199) 2026-09-21 19:34:24 +00:00
locals.tf feat(api): add OpenAPI Redocly contract and VPC outputs (DEV-289) (#206) 2026-09-22 00:33:48 +00:00
logs.tf feat(api): serve meals on ECS Fargate instead of Lambda (PLAT-215) (#199) 2026-09-21 19:34:24 +00:00
outputs.tf feat(api): add OpenAPI Redocly contract and VPC outputs (DEV-289) (#206) 2026-09-22 00:33:48 +00:00
providers.tf feat(infra): add lightweight meal-order-manager-dev (PLAT-210) (#195) 2026-09-18 18:38:45 +00:00
s3.tf feat(api): serve meals on ECS Fargate instead of Lambda (PLAT-215) (#199) 2026-09-21 19:34:24 +00:00
scheduler.tf feat(api): serve meals on ECS Fargate instead of Lambda (PLAT-215) (#199) 2026-09-21 19:34:24 +00:00
secrets.tf feat(infra): migrate meal-order-manager to HCP Terraform 2026-08-07 19:19:51 -04:00
ssm.tf feat(api): add flask sentry sdk (#205) 2026-09-21 23:48:09 +00:00
terraform.tfvars.example feat(infra): add lightweight meal-order-manager-dev (PLAT-210) (#195) 2026-09-18 18:38:45 +00:00
variables.tf feat(api): add OpenAPI Redocly contract and VPC outputs (DEV-289) (#206) 2026-09-22 00:33:48 +00:00
versions.tf chore(deps): update terraform random to v3.9.1 (#211) 2026-09-22 14:33:14 +00:00
vpc.tf feat(api): add OpenAPI Redocly contract and VPC outputs (DEV-289) (#206) 2026-09-22 00:33:48 +00:00