mirror of
https://github.com/Sea-Haven-Industries/open-swe.git
synced 2026-09-30 18:33:15 +00:00
92fd886076
PR#1 of the AWS migration. CDK TypeScript app under /infra: stacks open-swe-iam (four per-env GitHub-OIDC deploy roles) + open-swe-dev/-prod (per-env EC2 instance role + AMI cache). aws-cdk-lib pinned exact 2.260.0; kebab naming Aspect + 15 tests. IAM is synth-only (NOT deployed). Cleared the Phase-1 security gates: - T4 GPT-4.1 IAM cross-review (StringEquals trust; cdk-hnb659fds-* wildcard kept as org convention; AWS-RunShellScript timeboxed to T19). - T5 /sh-security-review: deploy roles split PER-ENV with env-scoped OIDC trust (dev=branch ref+tag dev, prod=environment:prod+tag prod) so a dev token cannot reach prod; re-verified block:false.
31 lines
766 B
JSON
31 lines
766 B
JSON
{
|
|
"name": "open-swe-infra",
|
|
"version": "1.0.0",
|
|
"description": "Open SWE AWS infrastructure (CDK TypeScript) — open-swe-dev / open-swe-prod stacks + shared OIDC deploy roles.",
|
|
"private": true,
|
|
"bin": {
|
|
"open-swe-infra": "bin/app.js"
|
|
},
|
|
"scripts": {
|
|
"build": "tsc",
|
|
"cdk": "cdk",
|
|
"synth": "cdk synth",
|
|
"diff": "cdk diff",
|
|
"test": "jest"
|
|
},
|
|
"devDependencies": {
|
|
"@types/jest": "^29.5.14",
|
|
"@types/node": "^24.0.0",
|
|
"@types/source-map-support": "^0.5.10",
|
|
"aws-cdk": "^2.1029.0",
|
|
"jest": "^29.7.0",
|
|
"source-map-support": "^0.5.21",
|
|
"ts-jest": "^29.2.5",
|
|
"ts-node": "^10.9.2",
|
|
"typescript": "~5.6.3"
|
|
},
|
|
"dependencies": {
|
|
"aws-cdk-lib": "2.260.0",
|
|
"constructs": "^10.0.0"
|
|
}
|
|
}
|