seahaven-org-baseline/lib/terraform-substrate
Adam Moussa 69f31842cb
Some checks are pending
Deploy / deploy-management (push) Waiting to run
Deploy / deploy-external-dev (push) Waiting to run
Deploy / deploy-security (push) Waiting to run
Deploy / deploy-dev (push) Waiting to run
Deploy / deploy-prod (push) Waiting to run
feat(iam): add hcptf roles for sh-openswe-traces-prod (PLAT-73) (#80)
* feat(iam): add hcptf roles for sh-openswe-traces-prod

Storage/IAM-user apply and plan roles for the HCP workspace. No Lambda
boundary widen; explicit IAM user CRUD because hcptf-iam-management is
role-path-only.

* fix(iam): pin CreateSecret to exact export secret name

Remove CreateSecret and UpdateSecret from the ARN-prefix shell grant so
apply cannot create longer-named secrets or overwrite SecretString.
2026-08-05 22:46:32 +00:00
..
terraform-substrate.template.yaml feat(iam): add hcptf roles for sh-openswe-traces-prod (PLAT-73) (#80) 2026-08-05 22:46:32 +00:00