0e6ecae26d
Rename all acdl-* AWS resources → nova-* across terraform (DynamoDB, Secrets Manager, Lambda, SNS, SG, KMS alias, ECS, ECR, IAM user/policy, state bucket, ALB, VPC/subnet names). Lambda default table names → nova-* (D-111). State bucket backend → nova-tfstate (-migrate-state documented). New docs/NOVA_AWS_MIGRATION.md runbook (staged migration + rollback). New scripts/migrate_dynamodb_data.py (scan+copy, dry-run default). acdl-deploy- → nova-deploy- role ARN in deploy workflows. Test fixtures updated; terraform validate + pytest + run_ci.sh PASS. ---ci--- project: acdl phase: 4 milestone: v1.15 status: execute ---/ci---
15 lines
348 B
JSON
15 lines
348 B
JSON
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Effect": "Allow",
|
|
"Action": "lambda:InvokeFunctionUrl",
|
|
"Resource": "arn:aws:lambda:${region}:${account_id}:function:nova-contract-ingestor",
|
|
"Condition": {
|
|
"StringEquals": {
|
|
"aws:PrincipalTag/nova:owner": "${consumerRepo}"
|
|
}
|
|
}
|
|
}
|
|
]
|
|
} |