mirror of
https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git
synced 2026-10-06 23:51:59 +00:00
227a5d91a2
* feat(hcptf): import hcptf-paychex-integrations apply and plan roles into seahaven-hcptf (PLAT-251) PaychexIntegrationsRoles is nested in the prod seahaven-hcptf stack for the paychex-integrations-prod workspace. The two roles already exist and are imported with -c hcptfPaychexImport=true, which names the live inline policies and omits role tags and outputs. The default template replaces the inline policies with managed policies at /tf-managed/: - paychex-integrations-hcptf-iam: the ported scoped IAM document plus CreateRole and the write set on tf-managed/githubdeploy-paychex-integrations (no permissions boundary) and iam:GetOpenIDConnectProvider. TagHcptfRoles is dropped; the roles are no longer Terraform-managed. - paychex-integrations-hcptf-services: the ported services document plus SSM writes on /paychex-integrations/deploy/* and DescribeParameters. - paychex-integrations-hcptf-plan: the ported refresh document plus the deploy role, the GitHub OIDC provider, and the deploy parameters. Trust is unchanged. Every resource is Retain. * docs(hcptf): describe the paychex-integrations import as a sequence * chore(ci): retrigger checks after the GitHub Actions incident |
||
|---|---|---|
| .. | ||
| deploy-substrate | ||
| hcptf-bootstrap | ||
| scp | ||
| terraform-substrate | ||
| account-baseline-stack.ts | ||
| alarm-topic-stack.ts | ||
| app-web-acl-stack.ts | ||
| backup-offsite-stack.ts | ||
| backup-stack.ts | ||
| bedrock-logging-regional.ts | ||
| bedrock-logging.ts | ||
| cis-monitoring.ts | ||
| deploy-substrate-stack.ts | ||
| detective-controls.ts | ||
| dynamodb-cmk-stack.ts | ||
| engineering-access-stack.ts | ||
| flow-logs.ts | ||
| governance-toggles.ts | ||
| hcptf-policy-aspect.ts | ||
| logs-key.ts | ||
| member-baseline-stack.ts | ||
| mta-sts-hcptf-stack.ts | ||
| org-governance-stack.ts | ||
| paychex-integrations-hcptf-stack.ts | ||
| platform-access-stack.ts | ||
| regional-baseline-stack.ts | ||
| seahaven-hcptf-stack.ts | ||
| seahaven-site-hcptf-stack.ts | ||
| ses-monitoring.ts | ||
| terraform-substrate-stack.ts | ||
| view-access-stack.ts | ||
| web-acl.ts | ||