adam/seahaven-org-baseline
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git synced 2026-09-30 09:13:17 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Commit graph

  • 1e10c40e52
         chore(backup): drop the file-share rollback volume from phase 2 (PLAT-77) (#168) main Adam Moussa 2026-09-29 20:23:47 -04:00
  • 806b62f7b4
         docs(backup): state why the file-share volume leaves phase 2 (PLAT-77) Adam Moussa 2026-09-29 20:21:28 -04:00
  • fc5accac91
         chore(backup): drop the file-share rollback volume from phase 2 (PLAT-77) Adam Moussa 2026-09-29 20:19:19 -04:00
  • 78e4bcf128
         chore(backup): drop the missing file-share volume from phase 2 (PLAT-77) (#167) Adam Moussa 2026-09-29 23:51:26 +00:00
  • 08821caed5
         fix(backup): keep the file-share rollback volume in phase 2 (PLAT-77) Adam Moussa 2026-09-29 19:47:16 -04:00
  • b91da96690
         chore(backup): drop retired file-share volumes from phase 2 (PLAT-77) Adam Moussa 2026-09-29 19:28:26 -04:00
  • 7e706aef2f
         chore(backup): drop retired apm-wo grafana EBS volume (PLAT-75) (#166) Adam Moussa 2026-09-29 22:16:07 +00:00
  • 1d175202fa
         chore(backup): drop retired apm-wo grafana EBS volume (PLAT-75) Adam Moussa 2026-09-16 15:29:46 -04:00
  • f8c8d25050
         chore(terraform-substrate): drop prod and dev stacks from CD (PLAT-147) (#165) Adam Moussa 2026-09-28 20:05:42 +00:00
  • 101028d43d
         chore(terraform-substrate): drop prod and dev stacks from CD (PLAT-147) Adam Moussa 2026-09-28 16:01:25 -04:00
  • ca179bbdf6
         chore(terraform-substrate): forget imported prod hcptf pairs (PLAT-147) (#164) Adam Moussa 2026-09-28 15:56:04 -04:00
  • f6791c15f6
         chore(terraform-substrate): forget imported prod hcptf pairs (PLAT-147) Adam Moussa 2026-09-28 15:38:14 -04:00
  • cc068f3c8d
         chore(terraform-substrate): forget deleted openswe traces roles (PLAT-147) (#163) Adam Moussa 2026-09-28 19:30:14 +00:00
  • bf4ed03043
         chore(terraform-substrate): forget deleted openswe traces roles (PLAT-147) Adam Moussa 2026-09-28 15:19:05 -04:00
  • faa199771f
         ci(iam): fail when Access Analyzer credentials are missing (PLAT-234) (#162) Adam Moussa 2026-09-28 18:38:21 +00:00
  • c8cf533c66
         ci(iam): fail when Access Analyzer credentials are missing (PLAT-234) Cursor Agent 2026-09-28 18:30:43 +00:00
  • ac65a23d9f
         docs(agents): document Node 24 for cloud agents (#157) Adam Moussa 2026-09-28 18:12:07 +00:00
  • e178d168a7
         fix: address review comments Adam Moussa 2026-09-28 14:07:47 -04:00
  • 4b6425f568
         Merge branch 'main' into cursor/cloud-agent-node-docs-39f3 Adam Moussa 2026-09-28 13:58:47 -04:00
  • 055feca605
         fix(iam): shrink shared lambda boundary to the four-statement floor (PLAT-52) (#158) Adam Moussa 2026-09-28 13:46:18 -04:00
  • 131f952dbc
         docs(iam): record the shared floor size as 691 characters (PLAT-52) Cursor Agent 2026-09-28 17:43:42 +00:00
  • 47b4eb68d1
         docs(iam): limit scoping rule to remaining SAM workloads (PLAT-52) Cursor Agent 2026-09-28 17:36:39 +00:00
  • 2b814d1705
         Merge branch 'main' into cursor/shrink-shared-lambda-boundary-6e41 Adam Moussa 2026-09-28 13:21:23 -04:00
  • ff492de58d
         feat(iam): add platform permission set and org-admin assume alarm (SEC-37) (#161) Adam Moussa 2026-09-28 16:27:12 +00:00
  • 8cbc98d927
         feat(scp): deny iam changes on the platform path (PLAT-233) (#159) Adam Moussa 2026-09-28 16:27:10 +00:00
  • 8ff8ba1a87
         ci(iam): check synthesized policies with Access Analyzer (PLAT-234) (#160) Adam Moussa 2026-09-28 16:27:08 +00:00
  • 00626f1fc7
         fix(iam): skip sanctioned org-admin assumes in the alarm (SEC-37) Cursor Agent 2026-09-28 16:07:57 +00:00
  • 740ba53d3d
         ci(iam): fail closed on widened policies (PLAT-234) Cursor Agent 2026-09-28 15:59:18 +00:00
  • 3478c9d539
         fix(scp): deny platform-path changes in bootstrap simulate (PLAT-233) Cursor Agent 2026-09-28 15:29:05 +00:00
  • f35512edaa
         fix(scp): use live bootstrap ARNs and close the platform path gaps (PLAT-233) Cursor Agent 2026-09-28 01:19:58 +00:00
  • df4188ab83
         docs(agents): keep cdk diff required and exempt docs titles Cursor Agent 2026-09-28 01:12:53 +00:00
  • 59645952ef
         docs(iam): correct shared boundary size and scoping notes (PLAT-52) Cursor Agent 2026-09-28 01:06:48 +00:00
  • 5907cd3467
         ci(iam): check synthesized policies with Access Analyzer (PLAT-234) Cursor Agent 2026-09-28 00:56:51 +00:00
  • f38ed7357b
         feat(iam): add platform permission set and org-admin assume alarm (SEC-37) Cursor Agent 2026-09-28 00:52:23 +00:00
  • e3adfc3cdc
         feat(scp): deny iam changes on role/platform unless the platform principal (PLAT-233) Cursor Agent 2026-09-28 00:49:48 +00:00
  • 06c0be8314
         fix(iam): shrink shared lambda boundary to the four-statement floor (PLAT-52) Cursor Agent 2026-09-28 00:47:16 +00:00
  • 900f2a6297
         docs(agents): document Node 24 for cloud agents Cursor Agent 2026-09-27 20:18:49 +00:00
  • d80295c005
         docs(agents): drop security review gates (#156) Adam Moussa 2026-09-26 17:18:04 -04:00
  • 220e54d0d9
         docs(agents): drop security review gates Adam Moussa 2026-09-26 17:00:06 -04:00
  • 617987c4a8
         fix(iam): allow payroll schedule invoke under the paychex boundary (PLAT-228) (#155) Adam Moussa 2026-09-25 21:35:19 +00:00
  • 640cde799c
         fix(iam): allow payroll schedule invoke under the paychex boundary (PLAT-228) Adam Moussa 2026-09-25 17:19:17 -04:00
  • 2f2858f885
         fix(iam): let the site plan role describe SSM parameters (PLAT-225) (#154) Adam Moussa 2026-09-25 16:40:34 +00:00
  • bd36e26369
         fix(iam): address review feedback Adam Moussa 2026-09-25 12:31:40 -04:00
  • ce6b59b552
         fix(iam): let the site plan role describe SSM parameters Adam Moussa 2026-09-25 12:18:31 -04:00
  • 38ed1bfe00
         feat(iam): move seahaven-site exec roles into their own stack (PLAT-225) (#153) Adam Moussa 2026-09-24 23:37:39 +00:00
  • b404de9466
         fix(iam): address review feedback Adam Moussa 2026-09-24 19:30:57 -04:00
  • 5b63c703bc
         feat(iam): move seahaven-site exec roles into their own stack (PLAT-225) Adam Moussa 2026-09-24 17:51:17 -04:00
  • 2b2f09a7f4
         chore(ci): remove unused Mergify stub (#152) Adam Moussa 2026-09-22 18:41:28 +00:00
  • 7be57487b7 chore(ci): remove unused Mergify stub Adam Moussa 2026-09-22 14:34:38 -04:00
  • 7e41625e4b
         feat(iam): allow PassRole to ECS tasks and EventBridge Scheduler (#151) Adam Moussa 2026-09-21 18:59:08 +00:00
  • 34cb3c833f
         feat(iam): allow PassRole to ECS tasks and EventBridge Scheduler Adam Moussa 2026-09-21 14:37:53 -04:00
  • 960e4619b4
         fix(iam): allow frontend HCP apply to write deploy SSM and githubdeploy trust (PLAT-212) (#150) Adam Moussa 2026-09-18 21:37:05 +00:00
  • 8ec8fc4dc3 fix(iam): let staging HCP apply read Elastic Beanstalk service templates (PLAT-213) Adam Moussa 2026-09-18 16:55:44 -04:00
  • f605cc035c
         fix(iam): allow staging HCP apply to write CloudFormation template buckets (PLAT-213) Adam Moussa 2026-09-18 16:06:06 -04:00
  • 247a7cd31b
         fix(iam): give staging HCP apply the proven Elastic Beanstalk bucket grants (PLAT-213) Adam Moussa 2026-09-18 15:59:19 -04:00
  • 88c7011bfc
         fix(iam): allow staging HCP apply versioned ACLs on EB env objects (PLAT-213) Adam Moussa 2026-09-18 15:49:36 -04:00
  • e1e360d100
         fix(iam): allow staging HCP apply to copy the current release zip (PLAT-213) Adam Moussa 2026-09-18 15:42:23 -04:00
  • 4b1f066040
         fix(iam): allow staging HCP apply to use the Elastic Beanstalk bucket (PLAT-213) Adam Moussa 2026-09-18 15:36:24 -04:00
  • 50b8fd2d41
         fix(iam): allow staging HCP apply to update the SHOC backend EB stack (PLAT-213) Adam Moussa 2026-09-18 15:21:40 -04:00
  • ae46270912
         fix(iam): allow frontend githubdeploy to read deploy SSM (PLAT-212) Adam Moussa 2026-09-18 15:00:19 -04:00
  • 0857174b6d
         fix(iam): grant frontend HCP plan named SSM describe and tag reads (PLAT-212) Adam Moussa 2026-09-18 14:53:43 -04:00
  • 707d795b47
         fix(iam): allow frontend HCP apply to write deploy SSM and githubdeploy trust (PLAT-212) Adam Moussa 2026-09-18 14:45:19 -04:00
  • c63b5e9779
         fix(iam): enable meal-order-manager Lambda boundary in seahaven-dev (PLAT-210) (#149) Adam Moussa 2026-09-18 18:35:38 +00:00
  • c1db5ae089
         fix(iam): keep meal-order-manager boundary Description unchanged (PLAT-210) Adam Moussa 2026-09-18 14:30:33 -04:00
  • db9465deda
         fix(iam): allow shoc-backend HCP apply to write deploy SSM and matching githubdeploy trust (PLAT-148) (#148) Adam Moussa 2026-09-18 18:13:01 +00:00
  • 6ad171e5da
         fix(iam): scope staging githubdeploy S3 objects to SHOC and staging EB prefixes (PLAT-148) Adam Moussa 2026-09-18 14:06:42 -04:00
  • 496a702339
         fix(iam): enable meal-order-manager Lambda boundary in seahaven-dev (PLAT-210) Adam Moussa 2026-09-18 14:05:16 -04:00
  • ac035d6675
         fix(iam): allow staging githubdeploy GetBucketPolicy on the EB bucket (PLAT-148) Adam Moussa 2026-09-18 14:00:13 -04:00
  • 07d4069bad
         fix(iam): allow staging githubdeploy PutObjectVersionAcl on EB artifacts (PLAT-148) Adam Moussa 2026-09-18 13:42:25 -04:00
  • d54d7f0aa2
         fix(iam): scope staging githubdeploy S3 object access to the EB bucket (PLAT-148) Adam Moussa 2026-09-18 13:37:18 -04:00
  • cf0d640dca
         fix(iam): allow staging githubdeploy to delete EB version cache objects (PLAT-148) Adam Moussa 2026-09-18 13:31:31 -04:00
  • af4de13335
         fix(iam): grant staging githubdeploy named S3 reads on EB resources prefix (PLAT-148) Adam Moussa 2026-09-18 13:22:08 -04:00
  • ea273cddf1
         fix(iam): allow staging githubdeploy GetObjectAcl on release zips (PLAT-148) Adam Moussa 2026-09-18 13:16:07 -04:00
  • a5de37e568
         fix(iam): allow staging githubdeploy to write EB processed extensions (PLAT-148) Adam Moussa 2026-09-18 13:10:52 -04:00
  • af0ab71eb5
         fix(iam): allow staging githubdeploy to GetObject release zips (PLAT-148) Adam Moussa 2026-09-18 13:04:55 -04:00
  • 1c87a61cfc
         fix(iam): grant shoc-backend staging plan named inventory reads (PLAT-148) Adam Moussa 2026-09-18 12:51:04 -04:00
  • 73608fc13d
         fix(iam): allow shoc-backend HCP apply to write deploy SSM and matching githubdeploy trust (PLAT-148) Adam Moussa 2026-09-18 12:35:52 -04:00
  • 7a1623e8d4
         fix(iam): allow paychex period table and optional secrets (PLAT-195) (#147) Adam Moussa 2026-09-14 18:31:08 +00:00
  • d244845185
         fix(iam): keep paychex boundary description unchanged (PLAT-195) Adam Moussa 2026-09-14 14:26:28 -04:00
  • af47bf6455
         fix(iam): allow paychex period table and optional secrets (PLAT-195) Adam Moussa 2026-09-14 14:10:47 -04:00
  • a492a45e07
         chore(iam): remove frontend tf-poc substrate after teardown (PLAT-194) (#146) Adam Moussa 2026-09-11 22:17:00 +00:00
  • 105d0a75c0
         chore(iam): remove frontend tf-poc substrate after teardown (PLAT-194) Adam Moussa 2026-09-11 18:09:59 -04:00
  • 5d613c73bc
         feat(iam): allow frontend tf-poc HCP apply destroy (PLAT-193) (#145) Adam Moussa 2026-09-11 21:46:59 +00:00
  • d4232ba045
         feat(iam): allow frontend tf-poc HCP apply destroy (PLAT-193) Adam Moussa 2026-09-11 17:37:51 -04:00
  • 3c54df6341
         fix(iam): allow GitHub frontend deploy roles to GetDistribution (PLAT-192) (#144) Adam Moussa 2026-09-11 19:37:24 +00:00
  • a84c45e2d2
         fix(iam): allow GitHub frontend deploy roles to GetDistribution (PLAT-192) Adam Moussa 2026-09-11 15:31:28 -04:00
  • 60b978aa2a
         feat(iam): allow frontend HCP apply to own release pointer and invalidation (PLAT-188) (#143) Adam Moussa 2026-09-11 17:37:42 +00:00
  • 696e67875e
         fix(iam): allow frontend HCP roles to tag the release pointer (PLAT-188) Adam Moussa 2026-09-11 13:34:15 -04:00
  • 97b00ad0f4
         feat(iam): allow frontend HCP apply to own release pointer and invalidation (PLAT-188) Adam Moussa 2026-09-11 12:54:07 -04:00
  • 0c6f307b61
         feat(iam): allow frontend HCP apply to update exact CloudFront resources (PLAT-187) (#142) Adam Moussa 2026-09-11 15:08:21 +00:00
  • 25c90e7480
         fix(iam): allow PublishFunction on exact frontend CloudFront functions (PLAT-187) Adam Moussa 2026-09-11 11:03:03 -04:00
  • cb49670711
         feat(iam): allow frontend HCP apply to update exact CloudFront resources (PLAT-187) Adam Moussa 2026-09-11 10:42:53 -04:00
  • a829854cd0
         feat(hcp): flag workspaces that skip source-path file triggers (PLAT-183) (#141) Adam Moussa 2026-09-10 21:00:33 +00:00
  • 10f7c60991
         feat(hcp): flag workspaces that skip source-path file triggers (PLAT-183) Adam Moussa 2026-09-10 16:49:51 -04:00
  • fa940e69c6
         feat(iam): allow meal-order-manager to send to paychex-checkcomponents (PLAT-135) (#140) Adam Moussa 2026-09-09 23:58:42 +00:00
  • 6c6fe0f664
         feat(iam): allow meal-order-manager to send to paychex-checkcomponents (PLAT-135) Adam Moussa 2026-09-09 19:43:56 -04:00
  • 6bc4f6e095
         chore(iam): remove backend tf-poc boundaries (#139) Adam Moussa 2026-09-03 15:04:58 +00:00
  • c702e61623
         chore(iam): remove backend tf-poc boundaries Adam Moussa 2026-09-03 10:47:12 -04:00
  • 4f0d84cddb
         fix(iam): use unique HCP bootstrap workspace names (PLAT-143) (#138) Adam Moussa 2026-09-02 15:51:39 +00:00
  • eba53ba5d4
         fix(iam): use unique HCP bootstrap workspace names (PLAT-143) Adam Moussa 2026-09-02 11:33:17 -04:00