adam/proposal-system
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/proposal-system.git synced 2026-09-30 12:23:14 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
proposal-system/infra/lib
History
Adam Moussa 8da87e9301 fix(infra): scope Bedrock model ARN, AOSS permissions, require deploy approval (INF-M1, M2, M9) 
INF-M1: Replace wildcard anthropic.claude-* foundation-model ARN with the
specific cross-region inference profile ARN and its backing foundation model.
Both suggestions and pdf-extract Lambdas use us.anthropic.claude-sonnet-4-5-20250929-v1:0.

INF-M2: Replace aoss:* data access policy permissions with scoped actions.
KB role gets DescribeCollectionItems/CreateCollectionItems/UpdateCollectionItems
on collection and DescribeIndex/ReadDocument/WriteDocument on indexes.
Index creator gets CreateIndex/DescribeIndex/WriteDocument plus collection describe/create.

INF-M9: Change --require-approval never to --require-approval broadening in
infra/package.json deploy script so IAM/security changes require manual
confirmation during local development.
2026-05-27 18:18:44 -04:00
..
compute-stack.ts fix(infra): scope Bedrock model ARN, AOSS permissions, require deploy approval (INF-M1, M2, M9) 2026-05-27 18:18:44 -04:00
foundation-stack.ts fix: infra medium findings (INF-M5, INF-M8) 2026-05-27 18:18:44 -04:00
frontend-stack.ts fix: infra medium findings (INF-M5, INF-M8) 2026-05-27 18:18:44 -04:00