mirror of
https://github.com/Sea-Haven-Industries/proposal-system.git
synced 2026-09-30 06:33:13 +00:00
The seahaven-prod deploy failed at CreateKnowledgeBase: the Bedrock KB execution role (proposal-system-kb-role) was denied rds:DescribeDBClusters, which Bedrock calls to validate the Aurora pgvector store config. Add it. rds:DescribeDBClusters does NOT support resource-level scoping (account/region list action) so it must be Resource:*; the role's sensitive actions (rds-data:*, s3, InvokeModel, secret) stay tightly scoped. GPT-4.1 cross-review APPROVE (caught the Resource:* requirement). |
||
|---|---|---|
| .. | ||
| bin | ||
| deploy-role | ||
| lib | ||
| cdk.context.json | ||
| cdk.json | ||
| package-lock.json | ||
| package.json | ||
| tsconfig.json | ||