Adam Moussa 08a1d41b05 docs(iam): resolve confirmed review findings from both INFRA-186 gates ... Cross-family round 1 plus the /sh-security-review verifier confirmed 11 findings on the floor reduction, all documentation defects; no policy statement changes. The one HIGH: the Terraform migration checklist never widened the boundary, so a Lambda-bearing Terraform migration would deploy green and lose every data-plane call at first invoke. Checklist step 2 now carries the widening requirement, step 3 verifies deployed boundary content, and the terraform-substrate header no longer reads as 'Terraform path unaffected'. Also corrected: Description is a REPLACEMENT property (a Description edit wedges the custom-named policy and CFN's remedy is the forbidden rename), the sanctioned-source contradiction, the false AWSLambdaVPCAccessExecutionRole parity claim, the KMS log-group category error, stale size numbers (691/5,453), the same-PR widening contradiction, per-workload residue text, a LoggingConfig silent-log-loss note, the us-east-1 region pin rationale, and ENI DoS deferral now tracked as INFRA-200.		2026-07-31 13:44:21 -04:00
..
deploy-substrate.template.yaml	docs(iam): resolve confirmed review findings from both INFRA-186 gates	2026-07-31 13:44:21 -04:00