Identity, team provisioner, multi-env, and CI hardening#7

Merged

Alexanderamiri merged 8 commits into

mainfrom

fix/ci-role-audit

Mar 7, 2026

Commits on Mar 7, 2026

Fix app CI IAM: correct role for tf-apply, tighten app permissions
Alexanderamiri
committed
Implement team provisioner Lambda and add Cognito+Google setup docs
Alexanderamiri
committed
Add multi-environment support to app.yaml and app-stack module
Alexanderamiri
committed
Simplify team YAML schema and update provisioner
Alexanderamiri
committed
Add Identity Center (org/) and Cognito pools (platform/identity/)
Alexanderamiri
committed
Remove feature flags from Identity Center and Cognito
Alexanderamiri
committed
Strip group lookups and assignments from Identity Center
Alexanderamiri
committed
Add sso.amazonaws.com to org service access principals
Alexanderamiri
committed