[feat] Add CloudWatch Alarms (#257)

Author: jplock

Cargo.lock

@@ -520,6 +520,7 @@ Resources:
               - "cloudformation:SignalResource"
               - "cloudwatch:DeleteAlarms"
               - "cloudwatch:DescribeAlarms"
+              - "cloudwatch:PutCompositeAlarm"
               - "cloudwatch:PutMetricAlarm"
               - "cloudwatch:PutMetricData"
               - "cloudwatch:TagResource"
@@ -832,6 +833,7 @@ Resources:
                       "pHostedZoneId": "${pHostedZoneId}",
                       "pDomainName": "${pDomainName}",
                       "pInstanceRoleName": "${rInstanceRole}",
+                      "pPermissionsBoundaryArn": "${rPermissionsBoundary}",
                       "pArtifactBucketName": {
                         "Fn::GetArtifactAtt": [
                           "VaultBuildOutput",
@@ -968,6 +970,15 @@ Resources:
               RunOrder: 2
           OnFailure:
             Result: ROLLBACK
+      Tags:
+        - Key: "aws-cloudformation:stack-name"
+          Value: !Ref "AWS::StackName"
+        - Key: "aws-cloudformation:stack-id"
+          Value: !Ref "AWS::StackId"
+        - Key: "aws-cloudformation:logical-id"
+          Value: rCodePipeline
+        - Key: AppManagerCFNStackKey
+          Value: !Ref "AWS::StackName"
 
   rCodeBuildRole:
     Type: "AWS::IAM::Role"

ci_template.yml

@@ -36,4 +36,4 @@ zeroize = { version = "=1.8.2", default-features = false, features = ["zeroize_d
 mimalloc = { version = "=0.1.48", default-features = false, features = ["secure"] }
 
 [dev-dependencies]
-proptest = { version = "1.4", default-features = false, features = ["std"] }
+proptest = { version = "=1.9.0", default-features = false, features = ["std"] }

enclave/Cargo.toml

@@ -36,9 +36,7 @@ zeroize = { version = "=1.8.2", default-features = false, features = ["zeroize_d
 [dev-dependencies]
 tokio-test = { version = "=0.4.4", default-features = false }
 axum-test = { version = "=18.4.1", default-features = false }
-wiremock = { version = "=0.6.5", default-features = false }
-claim = { version = "=0.5.0", default-features = false }
-proptest = { version = "=1.6.0", default-features = false, features = ["std"] }
+proptest = { version = "=1.9.0", default-features = false, features = ["std"] }
 
 # Clippy lints for no-panic Rust hardening
 # These help catch panic-prone patterns at compile time

parent/Cargo.toml

@@ -0,0 +1,7 @@
+# Seeds for failure cases proptest has generated in the past. It is
+# automatically read and these particular cases re-run before any
+# novel cases are generated.
+#
+# It is recommended to check this file in to source control so that
+# everyone who runs the test benefits from these saved cases.
+cc 51f4bcbec5039f1d26dbaec5897a4abee6274f8c877b1424f4beb866d5cf07e1 # shrinks to error = ConfigError("")