Jon Chery
843cd17b97
---ci---
project: acdl
phase: 29
milestone: v1.8
status: execute
---/ci---
P1-3: SSM publisher now raises RuntimeError when ACDL_KMS_KEY_ID is
unset. ACDL_ALLOW_DEFAULT_KMS=1 escape hatch for local testing.
P1-6: consumer_invoke_policy.json now uses ${account_id} and ${region}
placeholders. Terraform renders them via data.aws_caller_identity +
data.aws_region + replace() at apply time. No more hardcoded 000000000000.
Tests: +7 (285 -> 292). All pass.
15 lines
348 B
JSON
15 lines
348 B
JSON
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Effect": "Allow",
|
|
"Action": "lambda:InvokeFunctionUrl",
|
|
"Resource": "arn:aws:lambda:${region}:${account_id}:function:acdl-contract-ingestor",
|
|
"Condition": {
|
|
"StringEquals": {
|
|
"aws:PrincipalTag/acdl:owner": "${consumerRepo}"
|
|
}
|
|
}
|
|
}
|
|
]
|
|
} |