Adam Moussa a74ac4945f fix: LAM-C1/INF-H1 require IAM auth on Function URL, INF-H3 restrict OpenSearch to VPC ... LAM-C1/INF-H1: Change Function URL authType from NONE to AWS_IAM and grant invokeUrl permission to all four caller Lambdas (suggestions, pdf-extract, pdf-generate, library-ingest). Lambda HTTP clients will need SigV4 signing as a follow-up. INF-H3: Create OpenSearch Serverless VPC endpoint in private subnets and update network policy from AllowFromPublic to SourceVPCEs, removing public internet access to the vector search collection.		2026-05-27 18:18:44 -04:00
..
compute-stack.ts	fix: LAM-C1/INF-H1 require IAM auth on Function URL, INF-H3 restrict OpenSearch to VPC	2026-05-27 18:18:44 -04:00
foundation-stack.ts	audit: fix all Critical and High security/reliability issues across monorepo	2026-05-27 18:18:44 -04:00
frontend-stack.ts	Initial scaffold: monorepo structure, CDK stacks, CI/CD, domain model	2026-05-16 18:40:46 -04:00