adam/proposal-system
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/proposal-system.git synced 2026-10-07 09:19:04 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

chore(infra): region-bound deploy-role DescribeStacks to us-east-1 (sh-security-review IAM-L2)

Browse source
This commit is contained in:
Adam Moussa 2026-07-14 19:46:39 -04:00
parent 8aed244cc6
commit 9107052c9e
No known key found for this signature in database
1 changed files with 6 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
infra/deploy-role/permissions-policy.json
View file

@ -16,7 +16,12 @@
"Sid": "CdkDeployHealthCheck", "Sid": "CdkDeployHealthCheck",
"Effect": "Allow", "Effect": "Allow",
"Action": "cloudformation:DescribeStacks", "Action": "cloudformation:DescribeStacks",
"Resource": "*" "Resource": "*",
"Condition": {
"StringEquals": {
"aws:RequestedRegion": "us-east-1"
}
}
}, },
{ {
"Sid": "FrontendSiteBucketSync", "Sid": "FrontendSiteBucketSync",