From 1ec33d2937f037e88858fad9665c81a27a67ed0a Mon Sep 17 00:00:00 2001
From: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
Date: Fri, 10 Jul 2026 15:59:17 -0400
Subject: [PATCH] chore: tag the access-log bucket (#1)

* chore: tag the access-log bucket

Trivial resource change to exercise the CI deploy pipeline end-to-end
(OIDC deploy role + dedicated sh-openswe-traces-cfn-exec-role).

* chore: gitignore .env (CI conventions check)
---
 .gitignore    | 2 ++
 template.yaml | 5 +++++
 2 files changed, 7 insertions(+)

diff --git a/.gitignore b/.gitignore
index c8a5400..51d5e16 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,5 +1,7 @@
 .aws-sam/
 samconfig.toml
+.env
+.env.*
 *.pyc
 __pycache__/
 .DS_Store
diff --git a/template.yaml b/template.yaml
index ce01d0d..27cac69 100644
--- a/template.yaml
+++ b/template.yaml
@@ -135,6 +135,11 @@ Resources:
           - Id: expire-access-logs
             Status: Enabled
             ExpirationInDays: 365
+      Tags:
+        - Key: project
+          Value: sh-openswe-traces
+        - Key: role
+          Value: s3-access-logs
 
   TracesLogBucketPolicy:
     Type: AWS::S3::BucketPolicy