feat(deploy/AWS): env-gated PROD=lza deployment path for the LZA FLIPProduction account (#749 WP1-WP3) - #979

Open

atriaybagur wants to merge 44 commits into

749-lza-terraform-env

Commits on Aug 17, 2026

feat(deploy/AWS): add the PROD=lza environment plumbing for the LZA account (#749)
atriaybagur
committed
bfb6a2a
feat(deploy/AWS): conditional network layer for the LZA platform-managed VPC (#749)
atriaybagur
committed
e317c47
feat(deploy/AWS): gate the SG-drift stack and public FL NLB off on LZA (#749)
atriaybagur
committed
65f052b
feat(deploy/AWS): support a DNS-less first bring-up on the default CloudFront domain (#749)
atriaybagur
committed
84a3b48
docs(deploy/AWS): document the PROD=lza deployment path (#749)
atriaybagur
committed
c2d2a97
feat(deploy/AWS): route the Flower register-keys one-shot through the LZA-aware subnet locals (#749)
atriaybagur
committed
8dcdf5a
docs(deploy/AWS): refresh the LZA state notes — multi-AZ landed, FL ingress proven (#749)
atriaybagur
committed
71e13ab
refactor(deploy/AWS): short 'lza-prod' profile alias for the LZA guard, matching prod/stag (#749)
atriaybagur
committed
db86cfe
docs(deploy/AWS): correct the multi-AZ state — data-b and tgw-b subnets still missing (#749)
atriaybagur
committed
5a9343f
fix(deploy/AWS): gate the endpoint-SG trust-egress rule off on LZA (#749)
atriaybagur
committed
512e19e
feat(deploy/AWS): overridable log-bucket names for cross-account name collisions (#749)
atriaybagur
committed
a492b9b

Commits on Aug 19, 2026

feat(deploy/AWS): port the LZA FL/web ingress from the e2e harness (#749 WP3)
atriaybagur
committed
fbf6c27

Commits on Aug 20, 2026

Commits on Aug 21, 2026

Commits on Aug 24, 2026

Commits on Aug 26, 2026

feat(deploy/AWS): PROD=lza-stag — staging on a platform-managed estate
atriaybagur
committed
ef6456e

Commits on Aug 28, 2026

Commits on Sep 1, 2026