From dbd0b7aee7f97fdb8afeb5b6474bf8cda3faf1d3 Mon Sep 17 00:00:00 2001
From: Adam Moussa <adam@seahavenind.com>
Date: Fri, 10 Jul 2026 15:56:21 -0400
Subject: [PATCH] chore: tag the access-log bucket

Trivial resource change to exercise the CI deploy pipeline end-to-end
(OIDC deploy role + dedicated sh-openswe-traces-cfn-exec-role).
---
 template.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/template.yaml b/template.yaml
index ce01d0d..27cac69 100644
--- a/template.yaml
+++ b/template.yaml
@@ -135,6 +135,11 @@ Resources:
           - Id: expire-access-logs
             Status: Enabled
             ExpirationInDays: 365
+      Tags:
+        - Key: project
+          Value: sh-openswe-traces
+        - Key: role
+          Value: s3-access-logs
 
   TracesLogBucketPolicy:
     Type: AWS::S3::BucketPolicy