Adam Moussa 5dab14ce68 feat(prod): add seahaven-prod DynamoDB CMK and site-alerts alarm-topic stacks ... Provisions the two shared dependencies procurement-ingest imports by name, ahead of its migration from mgmt to seahaven-prod: - dynamodb-cmk-prod: second DynamoDbCmkStack instance (same stack name, prod account) creating alias/seahaven-dynamodb + the /seahaven/dynamodb/cmk-arn SSM param. Adds a cross-account key-policy statement so the mgmt seahaven-slack-bot roles can keep reading the CMK-encrypted purchase-orders table after it moves (ViaService + PrincipalArn-wildcard scoped; identity-policy half lands in the slack-bot repo's cutover PR). - alarm-topic-prod: codified site-alerts SNS topic + seahaven-alarm-topics CMK with the cloudwatch.amazonaws.com publish grant (mirrors the working mgmt pattern; mgmt's topic remains CLI-managed debt). - deploy.yaml: both appended to the deploy-prod job's explicit stack list (SH-ORG-005 rule: unlisted stacks silently never deploy).		2026-07-23 14:30:06 -04:00
..
workflows	feat(prod): add seahaven-prod DynamoDB CMK and site-alerts alarm-topic stacks	2026-07-23 14:30:06 -04:00
dependabot.yml	Ignore @types/node major bumps in Dependabot (#31)	2026-06-24 15:01:32 -04:00