seahaven-org-baseline/lib/deploy-substrate
Adam Moussa c63b5e9779
Some checks are pending
Deploy / deploy-management (push) Waiting to run
Deploy / deploy-external-dev (push) Waiting to run
Deploy / deploy-security (push) Waiting to run
Deploy / deploy-dev (push) Waiting to run
Deploy / deploy-prod (push) Waiting to run
fix(iam): enable meal-order-manager Lambda boundary in seahaven-dev (PLAT-210) (#149)
* fix(iam): enable meal-order-manager Lambda boundary in seahaven-dev (PLAT-210)

The per-workload boundary was floor-only outside prod, so meals-dev Lambdas
were denied DynamoDB. Keep Paychex SQS, SNS, and SES prod-only.

* fix(iam): keep meal-order-manager boundary Description unchanged (PLAT-210)

Named IAM managed-policy Description is immutable. Changing it replaces the
resource and 409s on ManagedPolicyName. PolicyDocument still widens in place.
2026-09-18 18:35:38 +00:00
..
deploy-substrate.template.yaml fix(iam): enable meal-order-manager Lambda boundary in seahaven-dev (PLAT-210) (#149) 2026-09-18 18:35:38 +00:00