feat(aws): WIF-only backplanes with a shared OIDC provider, enforced by the scorecard - #293

Merged

JohannesRudolph merged 7 commits into

mainfrom

claude/aws-wif-external-oidc-provider

Aug 25, 2026

Commits on Aug 25, 2026

feat(aws/oidc-provider): add the shared meshStack OIDC provider module

JohannesRudolph
and
claude
committed
ea7999e
docs(aws): require an external OIDC provider in Pattern A

JohannesRudolph
and
claude
committed
d319c5c
refactor(aws/route53-dns-record): WIF only, with an external OIDC provider

JohannesRudolph
and
claude
committed
7d89990
refactor(aws/route53-dns-alias-record): WIF only, with an external OIDC provider

JohannesRudolph
and
claude
committed
d98eb08
refactor(aws/s3_bucket): WIF only, with an external OIDC provider

JohannesRudolph
and
claude
committed
77a2f3d
feat(scorecard): enforce the AWS backplane identity conventions

JohannesRudolph
and
claude
committed
55bbac0
test(aws/s3_bucket): add the hub e2e test

JohannesRudolph
and
claude
committed
8ce4162