adam/seahaven-org-baseline

Fork 0

mirror of https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git synced 2026-10-05 19:51:59 +00:00

Commit graph

Author	SHA1	Message	Date
Adam Moussa	42781f743e	fix(baseline): drop departed mgmt resources and retain drifted web acl (#171 ) Nightly backup jobs fail on resources that have left the management account. The CloudFront WebACL is already gone while CloudFormation still owns it, so the deletion policy has to be Retain before a later change can remove it.	2026-10-01 23:57:42 +00:00
Adam Moussa	60e8b0e9ed	Add shared CloudFront WAF WebACL (audit Day 3: M-17) (#7 ) seahaven-app-waf (CLOUDFRONT scope, us-east-1): AWS managed Common + Known Bad Inputs rule groups + per-IP rate limit (2000/5min). ARN published to SSM /seahaven/waf/app-web-acl-arn for app stacks (meal-order/orders) to consume. seahaven.com already has its own WAF; ledgerflow is being decommissioned (INFRA-26); proposal-system-web skipped (not live).	2026-06-02 16:42:24 -04:00

Author

SHA1

Message

Date

Adam Moussa

42781f743e

fix(baseline): drop departed mgmt resources and retain drifted web acl (#171 )

Nightly backup jobs fail on resources that have left the management account.
The CloudFront WebACL is already gone while CloudFormation still owns it, so
the deletion policy has to be Retain before a later change can remove it.

2026-10-01 23:57:42 +00:00

Adam Moussa

60e8b0e9ed

Add shared CloudFront WAF WebACL (audit Day 3: M-17) (#7 )

seahaven-app-waf (CLOUDFRONT scope, us-east-1): AWS managed Common + Known Bad
Inputs rule groups + per-IP rate limit (2000/5min). ARN published to SSM
/seahaven/waf/app-web-acl-arn for app stacks (meal-order/orders) to consume.
seahaven.com already has its own WAF; ledgerflow is being decommissioned
(INFRA-26); proposal-system-web skipped (not live).

2026-06-02 16:42:24 -04:00

2 commits