adam/seahaven-org-baseline
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git synced 2026-09-30 05:43:17 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

fix(iam): allow door-unlock apply to create api domain (#126)
Some checks are pending
Deploy / deploy-management (push) Waiting to run
Details
Deploy / deploy-external-dev (push) Waiting to run
Details
Deploy / deploy-security (push) Waiting to run
Details
Deploy / deploy-dev (push) Waiting to run
Details
Deploy / deploy-prod (push) Waiting to run
Details

Browse source 
CreateDomainName authorizes against the /domainnames collection, so the hostname-pinned ARN cannot complete first apply.
This commit is contained in:
Adam Moussa 2026-08-27 22:43:48 +00:00 • committed by GitHub
parent 28a064966b
commit 23d954369d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
lib/terraform-substrate/terraform-substrate.template.yaml
View file

@ -2387,6 +2387,14 @@ Resources:
- !Sub "arn:aws:apigateway:us-east-1::/apis"
- !Sub "arn:aws:apigateway:us-east-1::/apis/*"
- !Sub "arn:aws:apigateway:us-east-1::/tags/*"
# CreateDomainName POSTs to the collection ARN. Hostname ARNs
# cover Get/Update/Delete and apiMappings after create.
- Sid: HttpApiDomainCreate
Effect: Allow
Action:
- apigateway:POST
Resource:
- arn:aws:apigateway:us-east-1::/domainnames
- Sid: HttpApiDomain
Effect: Allow
Action: