Identity, team provisioner, multi-env, and CI hardening - #7

Merged

Alexanderamiri merged 8 commits into

mainfrom

fix/ci-role-audit

Mar 7, 2026

Commits on Mar 7, 2026

Fix app CI IAM: correct role for tf-apply, tighten app permissions
Alexanderamiri
committed
eb4c7be
Implement team provisioner Lambda and add Cognito+Google setup docs
Alexanderamiri
committed
cdc6980
Add multi-environment support to app.yaml and app-stack module
Alexanderamiri
committed
94ebac1
Simplify team YAML schema and update provisioner
Alexanderamiri
committed
e18ee34
Add Identity Center (org/) and Cognito pools (platform/identity/)
Alexanderamiri
committed
3edaa07
Remove feature flags from Identity Center and Cognito
Alexanderamiri
committed
84709da
Strip group lookups and assignments from Identity Center
Alexanderamiri
committed
76490d6
Add sso.amazonaws.com to org service access principals
Alexanderamiri
committed
96b5039