seahaven-org-baseline/lib/terraform-substrate
Adam Moussa 0c6f307b61
Some checks are pending
Deploy / deploy-management (push) Waiting to run
Deploy / deploy-external-dev (push) Waiting to run
Deploy / deploy-security (push) Waiting to run
Deploy / deploy-dev (push) Waiting to run
Deploy / deploy-prod (push) Waiting to run
feat(iam): allow frontend HCP apply to update exact CloudFront resources (PLAT-187) (#142)
* feat(iam): allow frontend HCP apply to update exact CloudFront resources (PLAT-187)

Phase 2 ownership tags cannot apply while UpdateDistribution and UpdateFunction are denied on *. Allow those two actions only on the pinned distribution and function ARNs.

* fix(iam): allow PublishFunction on exact frontend CloudFront functions (PLAT-187)

The AWS provider publishes after UpdateFunction, including tag-only applies, so denying PublishFunction on * still blocked Phase 2 function updates.
2026-09-11 15:08:21 +00:00
..
shoc-frontend-resources.ts feat(iam): allow frontend HCP apply to update exact CloudFront resources (PLAT-187) (#142) 2026-09-11 15:08:21 +00:00
terraform-substrate.template.yaml chore(iam): remove backend tf-poc boundaries (#139) 2026-09-03 15:04:58 +00:00