Skip to content

fix: add missing DynamoDB env vars and IAM for sla-monitor#59

Merged
dwsmith1983 merged 1 commit intomainfrom
fix/sla-monitor-env-vars
Mar 8, 2026
Merged

fix: add missing DynamoDB env vars and IAM for sla-monitor#59
dwsmith1983 merged 1 commit intomainfrom
fix/sla-monitor-env-vars

Conversation

@dwsmith1983
Copy link
Copy Markdown
Owner

Summary

  • Add CONTROL_TABLE, JOBLOG_TABLE, RERUN_TABLE env vars to sla-monitor Lambda — required for alert suppression logic (GetTrigger, GetLatestJobEvent) but never configured in Terraform
  • Add read-only DynamoDB IAM policy for sla-monitor (control + joblog tables)
  • Remove STATE_MACHINE_ARN from orchestrator's ValidateEnv requirements — orchestrator never starts SFN executions

The sla-monitor Lambda reads CONTROL_TABLE, JOBLOG_TABLE, and RERUN_TABLE
to suppress alerts for completed/failed pipelines, but these env vars were
never configured in Terraform. The new ValidateEnv startup check surfaced
this pre-existing gap.

Also removes STATE_MACHINE_ARN from orchestrator's required env vars since
the orchestrator never starts SFN executions (only stream-router and
watchdog do).
@github-actions github-actions bot added lambda Lambda handlers deploy Deployment and ASL labels Mar 8, 2026
@dwsmith1983 dwsmith1983 self-assigned this Mar 8, 2026
@dwsmith1983 dwsmith1983 merged commit 53383e1 into main Mar 8, 2026
6 checks passed
@dwsmith1983 dwsmith1983 deleted the fix/sla-monitor-env-vars branch March 8, 2026 13:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

deploy Deployment and ASL lambda Lambda handlers

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant