seahaven-org-baseline/lib/deploy-substrate
Adam Moussa 44b672ae9a
feat(iam): add hcptf roles and boundary widen for meal-order-manager (PLAT-70) (#97)
* feat(iam): add hcptf roles and boundary widen for meal-order-manager

Append plan/apply OIDC roles for meal-order-manager-prod and widen the lambda execution boundary with exact prod secret ARN and data-plane statements.

* fix(iam): make meal-order plan role Lambda refresh read-only

Replace plan-role lambda:* with Get*/List* so plan-phase credentials cannot mutate functions or layers.
2026-08-07 19:36:20 -04:00
..
deploy-substrate.template.yaml feat(iam): add hcptf roles and boundary widen for meal-order-manager (PLAT-70) (#97) 2026-08-07 19:36:20 -04:00