adam/open-swe
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/open-swe.git synced 2026-10-07 16:19:09 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
open-swe/infra/test
History
Adam Moussa 789c59cfdf
fix: scope s3:ListBucket to the releases/ prefix (F-1/IAC-04) 
The instance role and the GitHub deploy app role granted s3:ListBucket on the
whole assets bucket. Every caller (deploy.sh, the publish/rollback scripts)
only ever lists under releases/, so add a StringLike s3:prefix=releases/*
condition. GetBucketLocation has no s3:prefix in its request context, so it
moves to its own unconditioned statement. Also document the accepted F-2
cross-env existence-oracle residual on BatchGetSecretValue.
2026-06-29 11:37:32 -04:00
..
ascii-aws-fields.test.ts fix(deploy): use %%...%% for CDK user-data tokens (don't collide with @@ sed) (#21) 2026-06-26 19:06:37 -04:00
kebab-naming-aspect.test.ts feat: Secrets Manager + SSM config store for open-swe (T11) (#10) 2026-06-26 16:07:23 -04:00
s3-list-prefix.test.ts fix: scope s3:ListBucket to the releases/ prefix (F-1/IAC-04) 2026-06-29 11:37:32 -04:00