adam/seahaven-org-baseline
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git synced 2026-10-03 18:53:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

fix(iam): keep paychex boundary description unchanged (PLAT-195)

Browse source 
IAM managed-policy Description is immutable. Changing it on a named
policy forces replacement and 409s against the live ManagedPolicyName.
Widen PolicyDocument only.
This commit is contained in:
Adam Moussa 2026-09-14 14:26:28 -04:00
parent af47bf6455
commit d244845185
No known key found for this signature in database
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
lib/deploy-substrate/deploy-substrate.template.yaml
View file

@ -853,8 +853,8 @@ Resources:
Properties:
ManagedPolicyName: seahaven-lambda-execution-boundary-paychex-integrations
Description: >-
Per-workload permissions boundary for paychex-integrations (PLAT-120,
PLAT-195). Floor plus minted secret ARNs and processor data plane.
Per-workload permissions boundary for paychex-integrations (PLAT-120).
Floor only until first HCP apply mints secret suffixes.
PolicyDocument:
Version: "2012-10-17"
Statement: