seahaven-org-baseline/lib/deploy-substrate
Adam Moussa 7a1623e8d4
Some checks failed
Deploy / deploy-management (push) Has been cancelled
Deploy / deploy-external-dev (push) Has been cancelled
Deploy / deploy-security (push) Has been cancelled
Deploy / deploy-dev (push) Has been cancelled
Deploy / deploy-prod (push) Has been cancelled
fix(iam): allow paychex period table and optional secrets (PLAT-195) (#147)
* fix(iam): allow paychex period table and optional secrets (PLAT-195)

The processor role already allows these ARNs. The live boundary denied
them, so GetSecretValue and period PutItem returned HTTP 400. Sync the
template to the live ceiling and add the missing period table plus
slack-admin and afterhours secret suffixes.

* fix(iam): keep paychex boundary description unchanged (PLAT-195)

IAM managed-policy Description is immutable. Changing it on a named
policy forces replacement and 409s against the live ManagedPolicyName.
Widen PolicyDocument only.
2026-09-14 18:31:08 +00:00
..
deploy-substrate.template.yaml fix(iam): allow paychex period table and optional secrets (PLAT-195) (#147) 2026-09-14 18:31:08 +00:00