Adam Moussa 8da87e9301 fix(infra): scope Bedrock model ARN, AOSS permissions, require deploy approval (INF-M1, M2, M9) ... INF-M1: Replace wildcard anthropic.claude-* foundation-model ARN with the specific cross-region inference profile ARN and its backing foundation model. Both suggestions and pdf-extract Lambdas use us.anthropic.claude-sonnet-4-5-20250929-v1:0. INF-M2: Replace aoss:* data access policy permissions with scoped actions. KB role gets DescribeCollectionItems/CreateCollectionItems/UpdateCollectionItems on collection and DescribeIndex/ReadDocument/WriteDocument on indexes. Index creator gets CreateIndex/DescribeIndex/WriteDocument plus collection describe/create. INF-M9: Change --require-approval never to --require-approval broadening in infra/package.json deploy script so IAM/security changes require manual confirmation during local development.		2026-05-27 18:18:44 -04:00
..
bin	Merge main into feature/fix-phase-2, resolve infra conflicts	2026-05-20 19:09:35 -04:00
lib	fix(infra): scope Bedrock model ARN, AOSS permissions, require deploy approval (INF-M1, M2, M9)	2026-05-27 18:18:44 -04:00
cdk.context.json	Initial scaffold: monorepo structure, CDK stacks, CI/CD, domain model	2026-05-16 18:40:46 -04:00
cdk.json	Initial scaffold: monorepo structure, CDK stacks, CI/CD, domain model	2026-05-16 18:40:46 -04:00
package-lock.json	Bump aws-cdk-lib from 2.253.1 to 2.257.0 in /infra (#58)	2026-05-23 04:34:11 +00:00
package.json	fix(infra): scope Bedrock model ARN, AOSS permissions, require deploy approval (INF-M1, M2, M9)	2026-05-27 18:18:44 -04:00
tsconfig.json	Initial scaffold: monorepo structure, CDK stacks, CI/CD, domain model	2026-05-16 18:40:46 -04:00