mirror of
https://github.com/Sea-Haven-Industries/seahaven-account-baseline.git
synced 2026-08-04 16:56:14 +00:00
Adam Moussa
c1347fcdb5
- cfn-stack-decommission.sh: --account-id is now REQUIRED and asserted against sts get-caller-identity before anything runs. Stack names are no longer org-unique (seahaven-dynamodb-cmk now exists in mgmt AND prod), so a name-only lookup under the wrong ambient profile could report or delete the wrong account's stack (security-review LOGIC-001). - package.json/lock: PR #56's bump-for-patched-brace-expansion landed the commit title but not the pin; package.json still said 2.261.0 and the lockfile still resolved brace-expansion 5.0.6 (GHSA-3jxr-9vmj-r5cp HIGH, blocking the pre-commit scanner). Pin 2.262.0 and regenerate; npm audit now clean. - bin/app.ts comments: slack-bot cutover MUST grant the PROD key ARN, never the account-local mgmt SSM param (LOGIC-005); failed-first-create orphan CMK recovery note (LOGIC-004).
26 lines
534 B
JSON
26 lines
534 B
JSON
{
|
|
"name": "seahaven-org-baseline",
|
|
"version": "1.0.0",
|
|
"bin": {
|
|
"app": "bin/app.js"
|
|
},
|
|
"scripts": {
|
|
"build": "tsc",
|
|
"cdk": "cdk",
|
|
"synth": "cdk synth",
|
|
"deploy": "cdk deploy",
|
|
"diff": "cdk diff"
|
|
},
|
|
"devDependencies": {
|
|
"@types/node": "^24.13.3",
|
|
"@types/source-map-support": "^0.5.10",
|
|
"aws-cdk": "^2.1130.0",
|
|
"source-map-support": "^0.5.21",
|
|
"tsx": "4.23.0",
|
|
"typescript": "~7.0.2"
|
|
},
|
|
"dependencies": {
|
|
"aws-cdk-lib": "2.262.0",
|
|
"constructs": "^10.0.0"
|
|
}
|
|
}
|