mirror of
https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git
synced 2026-09-30 16:13:18 +00:00
dc079edb93
Multi-region CloudTrail with log-file validation, a rotating KMS CMK, an Object-Lock'd S3 log bucket, and CloudWatch Logs delivery. First resident of the account-level security baseline; AWS Backup / 3-2-1 (C-7) lands alongside. IAM/KMS/S3 policies cross-reviewed; review caught a missing CloudTrail KMS grant, now added (SourceArn + encryption-context scoped).
26 lines
541 B
JSON
26 lines
541 B
JSON
{
|
|
"name": "seahaven-account-baseline",
|
|
"version": "1.0.0",
|
|
"bin": {
|
|
"app": "bin/app.js"
|
|
},
|
|
"scripts": {
|
|
"build": "tsc",
|
|
"cdk": "cdk",
|
|
"synth": "cdk synth",
|
|
"deploy": "cdk deploy",
|
|
"diff": "cdk diff"
|
|
},
|
|
"devDependencies": {
|
|
"@types/node": "^22.0.0",
|
|
"@types/source-map-support": "^0.5.10",
|
|
"aws-cdk": "^2.252.0",
|
|
"source-map-support": "^0.5.21",
|
|
"ts-node": "^10.9.2",
|
|
"typescript": "~5.7.0"
|
|
},
|
|
"dependencies": {
|
|
"aws-cdk-lib": "2.253.1",
|
|
"constructs": "^10.0.0"
|
|
}
|
|
}
|