10555af9e2
Stripped fork of seahaven-account-baseline for the isolated external-dev account (396287094661). Single stack: AWS Config, GuardDuty, Security Hub (FSBP + CIS v3.0), IAM Access Analyzer, VPC flow logs (VPC ids via context), and a $200/mo budget alerting adam@seahaven.com. Drops all org-level / prod-specific controls (local CloudTrail, CIS metric alarms, WAF, SES, Bedrock, DynamoDB CMK, Backup) per the isolated-account design; the org trail already covers this account centrally. Inspector2 is a documented post-deploy CLI step (no CloudFormation enable resource exists).
26 lines
546 B
JSON
26 lines
546 B
JSON
{
|
|
"name": "seahaven-external-dev-baseline",
|
|
"version": "1.0.0",
|
|
"bin": {
|
|
"app": "bin/app.js"
|
|
},
|
|
"scripts": {
|
|
"build": "tsc",
|
|
"cdk": "cdk",
|
|
"synth": "cdk synth",
|
|
"deploy": "cdk deploy",
|
|
"diff": "cdk diff"
|
|
},
|
|
"devDependencies": {
|
|
"@types/node": "^24.0.0",
|
|
"@types/source-map-support": "^0.5.10",
|
|
"aws-cdk": "^2.252.0",
|
|
"source-map-support": "^0.5.21",
|
|
"ts-node": "^10.9.2",
|
|
"typescript": "~6.0.3"
|
|
},
|
|
"dependencies": {
|
|
"aws-cdk-lib": "2.258.0",
|
|
"constructs": "^10.0.0"
|
|
}
|
|
}
|