3 commits

Author	SHA1	Message	Date
dependabot[bot]	476578f0c3	Bump aws-cdk-lib from 2.257.0 to 2.258.0 in the minor-and-patch group (#16) ... Bumps the minor-and-patch group with 1 update: [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib). Updates `aws-cdk-lib` from 2.257.0 to 2.258.0 - [Release notes](https://github.com/aws/aws-cdk/releases) - [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md) - [Commits](https://github.com/aws/aws-cdk/commits/v2.258.0/packages/aws-cdk-lib) --- updated-dependencies: - dependency-name: aws-cdk-lib dependency-version: 2.258.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-06-05 14:57:24 -04:00
Adam Moussa	a9d9f12a40	fix(deps): bump aws-cdk-lib pin to 2.257.0 (#15)	2026-06-05 13:01:36 -04:00
Adam Moussa	dc079edb93	Initial account-baseline stack with CloudTrail (audit C-1) ... Multi-region CloudTrail with log-file validation, a rotating KMS CMK, an Object-Lock'd S3 log bucket, and CloudWatch Logs delivery. First resident of the account-level security baseline; AWS Backup / 3-2-1 (C-7) lands alongside. IAM/KMS/S3 policies cross-reviewed; review caught a missing CloudTrail KMS grant, now added (SourceArn + encryption-context scoped).	2026-05-29 17:44:55 -04:00