procurement-ingest/lambdas/wo/email_processor
Adam Moussa 55a647537c
Require Secrets Manager key for Anthropic client
Remove the silent fallback to a plaintext ANTHROPIC_API_KEY env var
in both email processors; require ANTHROPIC_API_KEY_SECRET_ARN and
raise if absent so a misconfigured deploy fails loudly instead of
using an unmanaged key.

Adapted from f175323 on security/sweep-2026-06-17. The From-header
sender-domain allowlist from that commit is intentionally dropped:
the From header is spoofable (INFRA-107, confirmed critical) and
sender authentication is being reworked in a separate PR.

Refs: INFRA-107
2026-07-15 19:29:41 -04:00
..
__init__.py Merge workorder-ingest into unified procurement repo (#22) 2026-05-12 15:21:06 -04:00
handler.py Require Secrets Manager key for Anthropic client 2026-07-15 19:29:41 -04:00
requirements.txt Update boto3 requirement in /lambdas/wo/email_processor (#93) 2026-07-14 13:06:52 +00:00