Skip to content

Finalize new compositional policy refactoring#321

Merged
mehalter merged 20 commits into
mainfrom
318-get-apipy-working-with-new-resource-policies-architecture
Feb 2, 2026
Merged

Finalize new compositional policy refactoring#321
mehalter merged 20 commits into
mainfrom
318-get-apipy-working-with-new-resource-policies-architecture

Conversation

@mehalter
Copy link
Copy Markdown
Member

@mehalter mehalter commented Jan 29, 2026

This continues to refactor the infrastructure in order to utilize component policies to build more formally defined policies of other components.

Left todo

  • full deployment and testing

Future Work

  • Migrate the API statements which utilize the exposed environment variable model which we used to pass component information to lambda functions and EC2 instances (Revamp how we request access to resources for other resources #309)
  • Update the instance app statement generation, the last one remaining is s3 which could be improved once we refactor the exposing of components throughout the infrastructure. Then we can improve the configuration in the YAML file to specify read/write permissions for specific buckets and prefixes.

thecaffiend and others added 19 commits December 12, 2025 09:31
…rn (it will need to be accessible in the same way as meta
…sed on prefix/suffix values for the bucket id
… to a very specific one using the new get_inline_role2 pattern
…GW almbda authorizer, allowing us to move to the get_inline_role2 way of doing things
…stead of directly using the pulumi aws classes
@mehalter mehalter linked an issue Jan 29, 2026 that may be closed by this pull request
@mehalter mehalter force-pushed the 318-get-apipy-working-with-new-resource-policies-architecture branch from 2e9f763 to 80d0972 Compare January 29, 2026 17:26
Copy link
Copy Markdown
Member

@thecaffiend thecaffiend left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved contingent on the deploy going well.

@mehalter
Copy link
Copy Markdown
Member Author

mehalter commented Feb 2, 2026

Deployment went off without a hitch. Going to go ahead and merge this. Going to open an issue about moving the URN generation into a property of CapeCodComponent

@mehalter mehalter merged commit 3f1e929 into main Feb 2, 2026
6 checks passed
@mehalter mehalter deleted the 318-get-apipy-working-with-new-resource-policies-architecture branch February 2, 2026 19:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

get api.py working with new resource policies architecture

2 participants