sh-openswe-traces/.github/workflows/deploy.yaml

# FROZEN for PLAT-73: HCP Terraform is the sole deploy path.
# Previous SAM CD preserved as deploy.yaml.frozen until mgmt cutover.
# Do not re-enable until the migration is rolled back intentionally.
name: Deploy
on:
  workflow_dispatch:
    inputs:
      confirm_unfreeze:
        description: "Type UNFREEZE to acknowledge this bypasses PLAT-73 freeze"
        required: true
        type: string

permissions:
  id-token: write
  contents: read

concurrency:
  group: deploy
  cancel-in-progress: false

jobs:
  deploy:
    if: ${{ inputs.confirm_unfreeze == 'UNFREEZE' }}
    uses: Sea-Haven-Industries/.github/.github/workflows/cd-sam.yaml@7ac3528750b346f181347bb09f6af927a1c0aa14 # v1.0.6
    with:
      stack-name: sh-openswe-traces
      cfn-role-arn: arn:aws:iam::328440206208:role/sh-openswe-traces-cfn-exec-role
    secrets:
      deploy-role-arn: ${{ secrets.AWS_DEPLOY_ROLE_ARN }}
      parameter-overrides: ${{ secrets.SAM_PARAMETER_OVERRIDES }}