adam/procurement-ingest
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/procurement-ingest.git synced 2026-09-30 22:23:14 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
procurement-ingest/cdk
History
Adam Moussa 31d5f5d432 Remove gratuitous KMS grant on shared DynamoDB CMK 
wo-email-processor held grant_encrypt_decrypt on the shared
seahaven-dynamodb CMK, but the WorkOrders/WorkOrderComments tables
are not encrypted with that CMK. The grant was dead weight that
extended the WO processor's decrypt reach to the CMK protecting the
purchase-orders table (cross-stack decrypt). Drop it to restore
least privilege; re-add as part of the table CMK migration (INFRA-6).

Refs: INFRA-6
2026-06-17 11:37:03 -04:00
..
app.py Merge workorder-ingest into unified procurement repo (#22) 2026-05-12 15:21:06 -04:00
cdk.json Initial commit: PO email ingestion pipeline 2026-04-07 12:12:30 -04:00
po_stack.py fix(po): grant KMS on seahaven-dynamodb CMK to purchase-orders consumers (INFRA-104) (#56) 2026-06-10 19:31:55 -04:00
requirements.txt Bump aws-cdk-lib in /cdk in the minor-and-patch group across 1 directory (#65) 2026-06-16 20:57:49 +00:00
wo_stack.py Remove gratuitous KMS grant on shared DynamoDB CMK 2026-06-17 11:37:03 -04:00