Adam Moussa 61a94da4fc fix(iam): reconcile the remaining substrate divergences from the mgmt copy ... Review of the DenySelfMutation port found the header's 'reconciled' claim was not yet true: mgmt Phase A also added the CloudWatch Logs metric-filter actions (afterhours-shift-manager creates an AWS::Logs::MetricFilter through this role), and without them a migrating SAM stack fails mid-deploy with AccessDenied. Ports those three actions and corrects two stale header notes. Every IAM statement in the three shared resources is now byte-identical across both files, verified programmatically; the only delta left is the DependsOn ordering line.		2026-07-27 18:55:10 -04:00
..
deploy-substrate.template.yaml	fix(iam): reconcile the remaining substrate divergences from the mgmt copy	2026-07-27 18:55:10 -04:00