mirror of
https://github.com/Sea-Haven-Industries/seahaven-account-baseline.git
synced 2026-08-04 16:56:14 +00:00
2303a54ebc
* Add seahaven-prod member baseline (Phase 5) Account 011934824531 is the target for all new production stacks; the management account is frozen for new workloads. First proven exercise of the automatic enrollment sweep (Enabled in 124s, no manual create-members) and of AutoEnableStandards=NONE (no pre-enabled standards, so CFN owns FSBP + CIS v3.0 cleanly). Default VPC deleted; budget starts at $100 and resizes as tenants land. * Apply Phase-5 review findings Fleet gap closed: EBS encryption-by-default + IAM password policy were management-account-only (the runbook's unscoped 'applied' claim hid it); now applied and verified in all three member accounts, runbook scoped per account. README stack inventory corrected (eleven stacks, org-governance rows restored). Sweep comments reconciled: the automatic enrollment sweep is proven (seahaven-prod, ~2min). |
||
|---|---|---|
| .. | ||
| scp | ||
| account-baseline-stack.ts | ||
| backup-offsite-stack.ts | ||
| backup-stack.ts | ||
| bedrock-logging-regional.ts | ||
| bedrock-logging.ts | ||
| cis-monitoring.ts | ||
| detective-controls.ts | ||
| dynamodb-cmk-stack.ts | ||
| flow-logs.ts | ||
| governance-toggles.ts | ||
| logs-key.ts | ||
| member-baseline-stack.ts | ||
| org-governance-stack.ts | ||
| regional-baseline-stack.ts | ||
| ses-monitoring.ts | ||
| web-acl.ts | ||