Adam Moussa d0c696a434 Remove gratuitous KMS grant on shared DynamoDB CMK ... wo-email-processor held grant_encrypt_decrypt on the shared seahaven-dynamodb CMK, but the WorkOrders/WorkOrderComments tables are not encrypted with that CMK. The grant was dead weight that extended the WO processor's decrypt reach to the CMK protecting the purchase-orders table (cross-stack decrypt). Drop it to restore least privilege; re-add as part of the table CMK migration (INFRA-6). Refs: INFRA-6		2026-07-15 19:29:41 -04:00
..
app.py	Merge workorder-ingest into unified procurement repo (#22)	2026-05-12 15:21:06 -04:00
cdk.json	Initial commit: PO email ingestion pipeline	2026-04-07 12:12:30 -04:00
po_stack.py	Add CloudWatch alarm for po-email-processor DLQ messages (#69)	2026-06-17 17:28:42 -04:00
requirements.txt	Bump aws-cdk-lib in /cdk in the minor-and-patch group across 1 directory (#86)	2026-07-07 18:20:00 +00:00
wo_stack.py	Remove gratuitous KMS grant on shared DynamoDB CMK	2026-07-15 19:29:41 -04:00