Finalize new compositional policy refactoring#321
Merged
mehalter merged 20 commits intoFeb 2, 2026
Merged
Conversation
…rn (it will need to be accessible in the same way as meta
…sed on prefix/suffix values for the bucket id
… as a constructor arg
… to a very specific one using the new get_inline_role2 pattern
…GW almbda authorizer, allowing us to move to the get_inline_role2 way of doing things
…db_table is now a DynamoTable instance
…stead of directly using the pulumi aws classes
2e9f763 to
80d0972
Compare
thecaffiend
approved these changes
Jan 30, 2026
Member
thecaffiend
left a comment
There was a problem hiding this comment.
Approved contingent on the deploy going well.
Member
Author
|
Deployment went off without a hitch. Going to go ahead and merge this. Going to open an issue about moving the URN generation into a property of |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This continues to refactor the infrastructure in order to utilize component policies to build more formally defined policies of other components.
Left todo
Future Work
s3which could be improved once we refactor the exposing of components throughout the infrastructure. Then we can improve the configuration in the YAML file to specify read/write permissions for specific buckets and prefixes.