proposal-system/infra/lib
Adam Moussa 590f0c075c
fix(infra): grant KB role rds:DescribeDBClusters (prod deploy blocker) (#229)
The seahaven-prod deploy failed at CreateKnowledgeBase: the Bedrock KB execution
role (proposal-system-kb-role) was denied rds:DescribeDBClusters, which Bedrock
calls to validate the Aurora pgvector store config. Add it. rds:DescribeDBClusters
does NOT support resource-level scoping (account/region list action) so it must be
Resource:*; the role's sensitive actions (rds-data:*, s3, InvokeModel, secret) stay
tightly scoped. GPT-4.1 cross-review APPROVE (caught the Resource:* requirement).
2026-07-15 15:54:14 -04:00
..
compute-stack.ts fix(infra): grant KB role rds:DescribeDBClusters (prod deploy blocker) (#229) 2026-07-15 15:54:14 -04:00
config.ts chore(infra): prep proposal-system for seahaven-prod deployment (#227) 2026-07-15 14:44:35 -04:00
foundation-stack.ts fix(infra): Aurora engine 15.4 -> 15.17 (15.4 retired by RDS, deploy failed) (#228) 2026-07-15 15:01:50 -04:00
frontend-stack.ts feat(infra): parameterize stacks for multi-env (prod/staging) (#123) 2026-06-12 18:04:53 -04:00