adam/seahaven-org-baseline
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git synced 2026-10-06 19:11:58 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

feat(iam): allow meal-order-manager to send to paychex-checkcomponents (PLAT-135) (#140)
Some checks are pending
Deploy / deploy-management (push) Waiting to run
Details
Deploy / deploy-external-dev (push) Waiting to run
Details
Deploy / deploy-security (push) Waiting to run
Details
Deploy / deploy-dev (push) Waiting to run
Details
Deploy / deploy-prod (push) Waiting to run
Details

Browse source
This commit is contained in:
Adam Moussa 2026-09-09 23:58:42 +00:00 • committed by GitHub
parent 6bc4f6e095
commit fa940e69c6
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 13 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
lib/deploy-substrate/deploy-substrate.template.yaml
View file

@ -143,7 +143,7 @@ Description: >-
# seahaven-lambda-execution-boundary-afi-backup-monitor: 952 / 5 statements # seahaven-lambda-execution-boundary-afi-backup-monitor: 952 / 5 statements
# seahaven-lambda-execution-boundary-front-integrations: 1532 / 6 statements # seahaven-lambda-execution-boundary-front-integrations: 1532 / 6 statements
# seahaven-lambda-execution-boundary-procurement-ingest: 3977 / 11 statements # seahaven-lambda-execution-boundary-procurement-ingest: 3977 / 11 statements
# seahaven-lambda-execution-boundary-meal-order-manager: 2380 / 10 statements # seahaven-lambda-execution-boundary-meal-order-manager: 2530 / 11 statements (PLAT-135)
# seahaven-lambda-execution-boundary-seahaven-site: 1159 / 6 statements # seahaven-lambda-execution-boundary-seahaven-site: 1159 / 6 statements
# seahaven-lambda-execution-boundary-seahaven-door-unlock-api: measure after deploy (PLAT-76) # seahaven-lambda-execution-boundary-seahaven-door-unlock-api: measure after deploy (PLAT-76)
# seahaven-lambda-execution-boundary-paychex-integrations: GetSecretValue on six minted ARNs (PLAT-122) # seahaven-lambda-execution-boundary-paychex-integrations: GetSecretValue on six minted ARNs (PLAT-122)
@ -1089,6 +1089,18 @@ Resources:
Resource: Resource:
- !Sub "arn:aws:sns:us-east-1:${AWS::AccountId}:site-alerts" - !Sub "arn:aws:sns:us-east-1:${AWS::AccountId}:site-alerts"
- !Ref AWS::NoValue - !Ref AWS::NoValue
# aggregate-orders enqueues the weekly meal-deduction payload onto
# paychex-integrations' checkcomponents queue (PLAT-135). Send only;
# the paychex processor owns receive/delete.
- !If
- IsProdAccount
- Sid: MealOrderManagerSqs
Effect: Allow
Action:
- sqs:SendMessage
Resource:
- !Sub "arn:aws:sqs:us-east-1:${AWS::AccountId}:paychex-checkcomponents"
- !Ref AWS::NoValue
- !If - !If
- IsProdAccount - IsProdAccount
- Sid: MealOrderManager - Sid: MealOrderManager