Align the MAS IAM rule and read num_uses from the raw writer response.

Adds the one-session Scaleway IAM grant script, merges the publisher
bucket probes into one statement to fit the 10-statement limit, keeps
the Playwright cache under the account home during attended login, and
records the publisher-gate runs through the num_uses rejection.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 49552@bnt-lap001
Assistant-Session: 575802ee-c0c0-42a9-b2a1-9204c9f5b3f4
This commit is contained in:
codex 2026-11-02 19:28:28 +01:00
parent 5b0a2a06c4
commit ca7c46b775
9 changed files with 1203 additions and 118 deletions

View file

@ -26,9 +26,15 @@
"Resource": "railiance-platform-pg-backup/platform-pg/*"
},
{
"Sid": "CoulombSocialBackupProbe",
"Sid": "PublisherBucketProbe",
"Effect": "Allow",
"Principal": {"SCW": "application_id:681d00bf-b965-4323-b657-97bfde423511"},
"Principal": {
"SCW": [
"application_id:681d00bf-b965-4323-b657-97bfde423511",
"application_id:0eb0f958-77a4-4c70-9aa7-14ba46411415",
"application_id:25a4cbca-220e-40c0-9af5-6c7713000174"
]
},
"Action": ["s3:GetBucketLocation", "s3:GetBucketVersioning", "s3:GetLifecycleConfiguration"],
"Resource": "railiance-platform-pg-backup",
"Condition": {"Bool": {"aws:SecureTransport": "true"}}
@ -48,14 +54,6 @@
"Action": ["s3:AbortMultipartUpload", "s3:GetObject", "s3:GetObjectVersion", "s3:ListMultipartUploadParts", "s3:PutObject"],
"Resource": "railiance-platform-pg-backup/platform-pg/application-archives/coulomb-social/*"
},
{
"Sid": "EmailConnectBackupProbe",
"Effect": "Allow",
"Principal": {"SCW": "application_id:0eb0f958-77a4-4c70-9aa7-14ba46411415"},
"Action": ["s3:GetBucketLocation", "s3:GetBucketVersioning", "s3:GetLifecycleConfiguration"],
"Resource": "railiance-platform-pg-backup",
"Condition": {"Bool": {"aws:SecureTransport": "true"}}
},
{
"Sid": "EmailConnectBackupList",
"Effect": "Allow",
@ -71,14 +69,6 @@
"Action": ["s3:AbortMultipartUpload", "s3:GetObject", "s3:GetObjectVersion", "s3:ListMultipartUploadParts", "s3:PutObject"],
"Resource": "railiance-platform-pg-backup/platform-pg/application-archives/email-connect/*"
},
{
"Sid": "MasEvidenceBackupProbe",
"Effect": "Allow",
"Principal": {"SCW": "application_id:25a4cbca-220e-40c0-9af5-6c7713000174"},
"Action": ["s3:GetBucketLocation", "s3:GetBucketVersioning", "s3:GetLifecycleConfiguration"],
"Resource": "railiance-platform-pg-backup",
"Condition": {"Bool": {"aws:SecureTransport": "true"}}
},
{
"Sid": "MasEvidenceBackupList",
"Effect": "Allow",