From 5f19dfb05485a4d98f0d3840edcc8a6760335463 Mon Sep 17 00:00:00 2001
From: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
Date: Mon, 6 Jul 2026 17:44:28 -0400
Subject: [PATCH] docs: link Confluence AWS Architecture Map (INFRA-53) (#5)

---
 README.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/README.md b/README.md
index ff1e75d..5016b3b 100644
--- a/README.md
+++ b/README.md
@@ -33,6 +33,12 @@ office UniFi devices ──syslog/514──▶ EIP 184.72.154.32 ──▶ EC2 (
 | Log group | `unifi-syslog` (90-day retention) — created/retained by the CW agent, **not** a CFN resource (holds history; see stack comment) |
 | Alarm | `Syslog-NoIncomingLogs` — `IncomingLogEvents` Sum < 1 over 2×1-day, ALARM-only → `site-alerts` |
 
+## Documentation
+
+The canonical map of Sea Haven's AWS infrastructure lives in Confluence. This project's `syslog-server` stack is represented there as a Mermaid subgraph.
+
+- **[AWS Architecture Map](https://seahaven.atlassian.net/wiki/spaces/IT/pages/1540098)** (Confluence, IT space, page 1540098)
+
 ## Access
 
 SSM Session Manager (no key pair). SSH 22 is open from office/VPC for