proposal-system/infra
Adam Moussa 590f0c075c
fix(infra): grant KB role rds:DescribeDBClusters (prod deploy blocker) (#229)
The seahaven-prod deploy failed at CreateKnowledgeBase: the Bedrock KB execution
role (proposal-system-kb-role) was denied rds:DescribeDBClusters, which Bedrock
calls to validate the Aurora pgvector store config. Add it. rds:DescribeDBClusters
does NOT support resource-level scoping (account/region list action) so it must be
Resource:*; the role's sensitive actions (rds-data:*, s3, InvokeModel, secret) stay
tightly scoped. GPT-4.1 cross-review APPROVE (caught the Resource:* requirement).
2026-07-15 15:54:14 -04:00
..
bin chore(infra): prep proposal-system for seahaven-prod deployment (#227) 2026-07-15 14:44:35 -04:00
deploy-role chore(infra): prep proposal-system for seahaven-prod deployment (#227) 2026-07-15 14:44:35 -04:00
lib fix(infra): grant KB role rds:DescribeDBClusters (prod deploy blocker) (#229) 2026-07-15 15:54:14 -04:00
cdk.context.json chore(infra): prep proposal-system for seahaven-prod deployment (#227) 2026-07-15 14:44:35 -04:00
cdk.json fix(infra): run CDK app via tsx to support TypeScript 7 2026-07-08 16:51:54 -04:00
package-lock.json build(deps-dev): bump aws-cdk in /infra in the infra group 2026-07-11 04:32:54 +00:00
package.json build(deps-dev): bump aws-cdk in /infra in the infra group 2026-07-11 04:32:54 +00:00
tsconfig.json Initial scaffold: monorepo structure, CDK stacks, CI/CD, domain model 2026-05-16 18:40:46 -04:00