Jon Chery
51c3edf458
SSM path /acdl/{env}/{contractId}/{output} → /nova/... across
core/output_publisher + contract resolver + consumer docs. New
scripts/migrate_ssm_paths.py (copy/verify/delete, dry-run default).
AWS tag keys acdl:owner|environment|contract|cost-center|ref → nova:*
across terraform tagging + ABAC session policies (iam:ResourceTag/acdl:*
→ iam:ResourceTag/nova:*). nova_tagging.py hard mode (D-109 warn→hard).
tagging-standard.json tag-key values → nova:*. New
scripts/untag_acdl_keys.py (remove old acdl:* tags, dry-run default).
Test fixtures updated; pytest + run_ci.sh PASS.
---ci---
project: acdl
phase: 3
milestone: v1.15
status: execute
---/ci---
14 lines
413 B
Terraform
14 lines
413 B
Terraform
locals {
|
|
# SSE algorithm: KMS when a CMK ARN is supplied, else AES256 (SSE-S3).
|
|
# This is the default the adapter previously hardcoded (adapter.py:225-228, 289-297).
|
|
sse_algorithm = var.kms_key_arn != null ? "aws:kms" : "AES256"
|
|
|
|
# Tags: merge caller-supplied tags with the module defaults.
|
|
tags = merge(
|
|
{
|
|
"nova:owner" = "acdl"
|
|
"nova:environment" = "dev"
|
|
},
|
|
var.tags
|
|
)
|
|
} |