Adam Moussa 960e4619b4 fix(iam): allow frontend HCP apply to write deploy SSM and githubdeploy trust (PLAT-212) (#150) ... * fix(iam): allow frontend HCP apply to write deploy SSM and githubdeploy trust (PLAT-212) * fix(iam): grant frontend HCP plan named SSM describe and tag reads (PLAT-212) * fix(iam): allow frontend githubdeploy to read deploy SSM (PLAT-212) HCP apply already writes /shoc-frontend-new/<env>/deploy/*, but the githubdeploy ceiling omitted GetParameter so Deploy Web cannot resolve bucket and distribution after origin moves to the bucket root. * fix(iam): allow staging HCP apply to update the SHOC backend EB stack (PLAT-213) * fix(iam): allow staging HCP apply to use the Elastic Beanstalk bucket (PLAT-213) * fix(iam): allow staging HCP apply to copy the current release zip (PLAT-213) * fix(iam): allow staging HCP apply versioned ACLs on EB env objects (PLAT-213) * fix(iam): give staging HCP apply the proven Elastic Beanstalk bucket grants (PLAT-213) * fix(iam): allow staging HCP apply to write CloudFormation template buckets (PLAT-213) * fix(iam): let staging HCP apply read Elastic Beanstalk service templates (PLAT-213)		2026-09-18 21:37:05 +00:00
..
external-dev-iam-guardrails.json	fix(iam): allow shoc-backend HCP apply to write deploy SSM and matching githubdeploy trust (PLAT-148) (#148)	2026-09-18 18:13:01 +00:00
external-dev-protect-security.json	Adopt external-dev OU and its 3 SCPs via resource import (#45)	2026-07-14 14:10:10 -04:00
external-dev-region-lock.json	Adopt external-dev OU and its 3 SCPs via resource import (#45)	2026-07-14 14:10:10 -04:00
external-dev-shoc-backend-deploy-trust.json	fix(iam): allow frontend HCP apply to write deploy SSM and githubdeploy trust (PLAT-212) (#150)	2026-09-18 21:37:05 +00:00
protect-privileged-roles.json	feat(iam): lock app-owned HCP IAM and add bootstrap SCP (PLAT-143) (#137)	2026-09-02 15:22:48 +00:00