3 commits

Author	SHA1	Message	Date
Adam Moussa	ce8dad22ea	chore(infra): prevent destroy of the office VPC path (PLAT-77) ... file-share will place its subnet in this VPC. A replace of the VPC, IGW, or office VPN would take that share down with the collector.	2026-09-28 16:32:45 -04:00
Adam Moussa	2b12aba50e	feat(infra): archive UniFi All Traffic to S3 via Vector (PLAT-206) (#41) ... Replace the public rsyslog-to-CloudWatch collector with Vector over a prod 10.40 IPsec VGW, Firehose, 90-day S3, Glue, and Athena.	2026-09-17 18:48:25 +00:00
Adam Moussa	e17b284370	feat(infra): migrate syslog-server to HCP Terraform (PLAT-78) (#38) ... * feat(infra): migrate syslog-server to HCP Terraform Replace the mgmt CDK stack with a seahaven-prod HCP workspace so the collector is owned by Terraform before UniFi cutover. * fix(infra): keep no-logs alarm quiet until UniFi cutover The new prod unifi-syslog group is empty until devices are re-pointed, so treat_missing_data=breaching would page site-alerts on first apply. * fix(infra): allow scoped apply to modify SG rules in place Authorize/Revoke plus description updates are not enough for aws_vpc_security_group_*_rule in-place changes after the bootstrap window.	2026-09-16 21:29:43 +00:00