procurement-ingest/cdk
Adam Moussa 86f2ebb42d
Codify S3 Block Public Access on ingest buckets (#71)
Add block_public_access=BlockPublicAccess.BLOCK_ALL to the po-ingest and
workorder-ingest EmailBucket constructs. The buckets are already private
at runtime via account-level and AWS-default BPA, so this is a no-op for
behavior; it closes the codification gap that left CKV_AWS_53-56 firing
on the synthesized templates and blocking the security pre-push gate
(and the DLQ-alarm PRs that ride on it).
2026-06-17 17:23:06 -04:00
..
app.py Merge workorder-ingest into unified procurement repo (#22) 2026-05-12 15:21:06 -04:00
cdk.json Initial commit: PO email ingestion pipeline 2026-04-07 12:12:30 -04:00
po_stack.py Codify S3 Block Public Access on ingest buckets (#71) 2026-06-17 17:23:06 -04:00
requirements.txt Bump aws-cdk-lib in /cdk in the minor-and-patch group across 1 directory (#65) 2026-06-16 20:57:49 +00:00
wo_stack.py Codify S3 Block Public Access on ingest buckets (#71) 2026-06-17 17:23:06 -04:00