adam/sh-openswe-traces
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/sh-openswe-traces.git synced 2026-09-30 08:03:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
20 commits 2 branches 0 tags 346 KiB
Commit graph

2 commits

Author SHA1 Message Date
Adam Moussa
cdc36d39ef
feat(iam): import hcptf roles into app Terraform (PLAT-146) (#18) 
* feat(iam): import hcptf roles into app Terraform (PLAT-146)

Move the existing hcptf pair into this repo so app Terraform owns prod IAM after the substrate handoff.

* fix(iam): add apply-role IAM list permissions (PLAT-146)

IamReadOnly omitted ListRoleTags and ListInstanceProfilesForRole needed to refresh imported roles after detaching the substrate guardrail.
 2026-09-02 21:47:07 +00:00
Adam Moussa
5f430d9dfd
feat(infra): convert sh-openswe-traces to HCP Terraform (#8) 
Freeze SAM CD and add terraform/ for seahaven-prod with account-suffixed
buckets so HCP owns deploy before mgmt cutover. Suppress CKV_AWS_40 for
the LangSmith export IAM user with documented mitigations.
 2026-08-05 18:33:03 -04:00