mirror of
https://github.com/Sea-Haven-Industries/proposal-system.git
synced 2026-09-30 07:43:14 +00:00
The seahaven-prod deploy failed at CreateKnowledgeBase: the Bedrock KB execution role (proposal-system-kb-role) was denied rds:DescribeDBClusters, which Bedrock calls to validate the Aurora pgvector store config. Add it. rds:DescribeDBClusters does NOT support resource-level scoping (account/region list action) so it must be Resource:*; the role's sensitive actions (rds-data:*, s3, InvokeModel, secret) stay tightly scoped. GPT-4.1 cross-review APPROVE (caught the Resource:* requirement). |
||
|---|---|---|
| .. | ||
| compute-stack.ts | ||
| config.ts | ||
| foundation-stack.ts | ||
| frontend-stack.ts | ||