wo-po-lookup, po-sync, and workorder-sync read WorkOrders, WorkOrderComments, purchase-orders and PaymentsDashboard, which are now SSE-encrypted with alias/seahaven-dynamodb. Tables are imported by name so grantReadData adds no KMS perms; grant kms:Decrypt explicitly via the CMK imported from SSM /seahaven/dynamodb/cmk-arn. Replaces the interim CLI inline policy (Sid Infra95DynamoDbCmkDecrypt) with IaC. INFRA-95 |
||
|---|---|---|
| .. | ||
| constructs | ||
| seahaven-slack-bot-stack.ts | ||