adam/seahaven-org-baseline
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git synced 2026-09-30 08:03:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

docs(iam): limit scoping rule to remaining SAM workloads (PLAT-52)

Browse source 
The shared boundary shrink is unchanged. The scoping note now matches
the HCP path already stated later in the same file.

Co-authored-by: Adam Moussa <amoussa1229@users.noreply.github.com>
This commit is contained in:
Cursor Agent 2026-09-28 17:36:39 +00:00
parent 2b814d1705
commit 47b4eb68d1
No known key found for this signature in database
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
lib/deploy-substrate/deploy-substrate.template.yaml
View file

@ -217,7 +217,7 @@ Resources:
# intersection of the role's own policies and this boundary, so a misconfigured
# SAM role can never exceed what is listed here.
#
# SCOPING RULE (PLAT-52). New workloads get their own ManagedPolicy
# SCOPING RULE (PLAT-52). Remaining SAM workloads get their own ManagedPolicy
# seahaven-lambda-execution-boundary-<workload>: the four-statement floor
# (CloudWatchLogsWrite / CloudWatchLogsDescribe / XRay / Ec2Eni) plus that
# workload's data plane, derived from its own template. The shared