procurement-ingest/cdk
Adam Moussa 109c565cbf
Some checks are pending
Deploy / deploy (push) Waiting to run
Reconcile IaC with out-of-band DLQ + Function URL changes (INFRA-74, INFRA-41) (#50)
Make CDK the source of truth for two sets of changes applied out-of-band
via CLI to the po-ingest and WorkorderIngestStack stacks.

INFRA-74 (audit C-5): remove the public FunctionUrlAuthType.NONE Function
URL construct (and its auto-generated Principal:* invoke permission +
output) from both po-web-ui and workorder-web-ui. The URLs were already
deleted live via CLI; CFN's delete is idempotent.

INFRA-41 (audit H-8): add a CDK-managed SQS dead-letter queue
(dead_letter_queue=, 14d retention, SSL-enforced, CDK-generated name) and
an ALARM-only Errors alarm (Sum, threshold>0, site-alerts topic) for both
po-email-processor and workorder-email-processor, mirroring the
apm-wo-analysis-classifier DLQ and payments-payroll-batch alarm patterns.

Interim CLI resources (per-fn -dlq queues, -errors alarms, dlq-send inline
policies, OnFailure event-invoke-configs) removed post-deploy.
2026-06-08 16:02:29 -04:00
..
app.py Merge workorder-ingest into unified procurement repo (#22) 2026-05-12 15:21:06 -04:00
cdk.json Initial commit: PO email ingestion pipeline 2026-04-07 12:12:30 -04:00
po_stack.py Reconcile IaC with out-of-band DLQ + Function URL changes (INFRA-74, INFRA-41) (#50) 2026-06-08 16:02:29 -04:00
requirements.txt Bump aws-cdk-lib in /cdk in the minor-and-patch group (#48) 2026-06-05 14:49:27 -04:00
wo_stack.py Reconcile IaC with out-of-band DLQ + Function URL changes (INFRA-74, INFRA-41) (#50) 2026-06-08 16:02:29 -04:00