adam/seahaven-org-baseline
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git synced 2026-09-30 10:23:16 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
seahaven-org-baseline/.github
History
Adam Moussa ff492de58d
Some checks are pending
Deploy / deploy-management (push) Waiting to run
Details
Deploy / deploy-external-dev (push) Waiting to run
Details
Deploy / deploy-security (push) Waiting to run
Details
Deploy / deploy-dev (push) Waiting to run
Details
Deploy / deploy-prod (push) Waiting to run
Details
feat(iam): add platform permission set and org-admin assume alarm (SEC-37) (#161) 
* feat(iam): add platform permission set and org-admin assume alarm (SEC-37)

Adds an Identity Center platform group and Platform permission set
assigned to the management account, and a CloudTrail alarm on
AssumeRole of OrganizationAccountAccessRole. Scripts still assume
that role. This change is not deployed.

Co-authored-by: Adam Moussa <amoussa1229@users.noreply.github.com>

* fix(iam): skip sanctioned org-admin assumes in the alarm (SEC-37)

Count failed assumes for every principal. Do not page on a successful
assume by the Platform permission set or the two repo script sessions.

Co-authored-by: Adam Moussa <amoussa1229@users.noreply.github.com>

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Adam Moussa <amoussa1229@users.noreply.github.com>
2026-09-28 16:27:12 +00:00
..
workflows feat(iam): add platform permission set and org-admin assume alarm (SEC-37) (#161) 2026-09-28 16:27:12 +00:00
CODEOWNERS chore: add CODEOWNERS 2026-07-29 12:59:09 -04:00