mirror of
https://github.com/Sea-Haven-Industries/sh-openswe-traces.git
synced 2026-09-30 06:53:16 +00:00
Freeze SAM CD and add terraform/ for seahaven-prod with account-suffixed buckets so HCP owns deploy before mgmt cutover. Suppress CKV_AWS_40 for the LangSmith export IAM user with documented mitigations.
14 lines
549 B
HCL
14 lines
549 B
HCL
locals {
|
|
account_id = data.aws_caller_identity.current.account_id
|
|
|
|
# Account-suffixed names so seahaven-prod can apply in parallel with mgmt
|
|
# teardown (S3 bucket names are globally unique; PLAT-73 locked decision).
|
|
traces_bucket_name = "sh-openswe-traces-${local.account_id}"
|
|
logs_bucket_name = "sh-openswe-traces-logs-${local.account_id}"
|
|
|
|
export_user_name = "sh-openswe-langsmith-export"
|
|
secret_name = "sh-openswe/langsmith-export-s3"
|
|
kms_alias_name = "alias/sh-openswe-traces"
|
|
}
|
|
|
|
data "aws_caller_identity" "current" {}
|