fix: secrets.sh preflight uses GetParameter not GetParametersByPath

EC2 IAM role grants ssm:GetParameter but not ssm:GetParametersByPath. Preflight now checks DB_PASSWORD directly instead of listing the path.

sha256:726c84b653e2e9320d69e021fc39ff3942039d463d3e502b21cff9c1c65d588a sha

sha256:aa5b0fb2c2cb3ee3829d265c83326caad1a0d9a4c8218e833a0e5b6a02e14045 parent

sha256:98b4f618ddf05d627168d5be3d5febbf6d250686491e32835a67a3d6850bfc82 snapshot

Older fix: secrets.sh now owns all env-specific config, not just secrets sha256:aa5b0fb2c2cb3ee3829d265c83326caad1a0d9a4c8218e833a0e5b6a02e14045 All commits

Newer → Latest on task/staging-gates-phase5

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:726c84b653e2e9320d69e021fc39ff3942039d463d3e502b21cff9c1c65d588a --body "your comment"

Provenance signed

AI Agent

claude-sonnet-4-6

Bump BREAKING

Agent claude-code

Breaking

deploy/secrets.sh

Signature Cryptographically verified

Snapshot

ID sha256:98b4f618ddf05d627168d5be3d5febbf6d250686491e32835a67a3d6850bfc82

Files 0

Browse tree at this commit →

Commit

SHA sha256:726c84b653e2e9320d69e021fc39ff3942039d463d3e502b21cff9c1c65d588a

Parent

sha256:aa5b0fb2c2cb3ee3829d265c83326caad1a0d9a4c8218e833a0e5b6a02e14045

Branch task/staging-gates-phase5