Jon Chery
51c3edf458
SSM path /acdl/{env}/{contractId}/{output} → /nova/... across
core/output_publisher + contract resolver + consumer docs. New
scripts/migrate_ssm_paths.py (copy/verify/delete, dry-run default).
AWS tag keys acdl:owner|environment|contract|cost-center|ref → nova:*
across terraform tagging + ABAC session policies (iam:ResourceTag/acdl:*
→ iam:ResourceTag/nova:*). nova_tagging.py hard mode (D-109 warn→hard).
tagging-standard.json tag-key values → nova:*. New
scripts/untag_acdl_keys.py (remove old acdl:* tags, dry-run default).
Test fixtures updated; pytest + run_ci.sh PASS.
---ci---
project: acdl
phase: 3
milestone: v1.15
status: execute
---/ci---
15 lines
348 B
JSON
15 lines
348 B
JSON
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Effect": "Allow",
|
|
"Action": "lambda:InvokeFunctionUrl",
|
|
"Resource": "arn:aws:lambda:${region}:${account_id}:function:acdl-contract-ingestor",
|
|
"Condition": {
|
|
"StringEquals": {
|
|
"aws:PrincipalTag/nova:owner": "${consumerRepo}"
|
|
}
|
|
}
|
|
}
|
|
]
|
|
} |