adam/seahaven-org-baseline

Fork 0

mirror of https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git synced 2026-09-30 06:53:17 +00:00

Commit graph

Author	SHA1	Message	Date
Adam Moussa	b02f52b805	feat(iam): lock app-owned HCP IAM and add bootstrap SCP (PLAT-143) (#137 ) * feat(iam): lock app-owned HCP IAM and add bootstrap SCP (PLAT-143) * fix(iam): pin HCP boundary ARNs and bootstrap trust window (PLAT-143) Null on iam:PermissionsBoundary accepted any ceiling, including AdministratorAccess. Import apply cannot self-mutate hcptf-* while bootstrap trust is iam-bootstrap only; add a time-boxed exact StringEquals workspace grant instead of StringLike.	2026-09-02 15:22:48 +00:00

Author

SHA1

Message

Date

Adam Moussa

b02f52b805

feat(iam): lock app-owned HCP IAM and add bootstrap SCP (PLAT-143) (#137 )

* feat(iam): lock app-owned HCP IAM and add bootstrap SCP (PLAT-143)

* fix(iam): pin HCP boundary ARNs and bootstrap trust window (PLAT-143)

Null on iam:PermissionsBoundary accepted any ceiling, including AdministratorAccess. Import apply cannot self-mutate hcptf-* while bootstrap trust is iam-bootstrap only; add a time-boxed exact StringEquals workspace grant instead of StringLike.

2026-09-02 15:22:48 +00:00

1 commit