Security Deployment Report

Generated: 2026-06-14 05:01:09 UTC
Configuration File: /app/configs/globalbank-prod-c001-us-west-1-sec.yaml
Stack Name: globalbank-prod-c001-us-west-1-enterprise-sec-stack
Stack Status: CREATE_COMPLETE
Region: us-west-1
Tier: enterprise
Security Profile: enterprise-12
Creation Time: 2026-06-14 04:59:14 UTC
HTML Report: /app/reports/globalbank-prod-c001-us-west-1-enterprise-sec-post-deployment-20260614_050109.html
⚠️ CONFIDENTIAL - This document contains production AWS resource identifiers and should be stored securely.

Stack Outputs

Output Name Value Description
SagemakerLevel2DevInvokePolicyArn arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-sagemaker-level2-dev-invoke ARN of SagemakerLevel2DevInvokePolicy
DataEngineersGroupArn arn:aws:iam::123456789012:group/globalbank-prod-c001-group-data-engineers ARN of DataEngineersGroup
SecurityProfile enterprise-12 Deployed security profile
S3Level3ProjectBucketsFullPolicyArn arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-s3-level3-project-buckets-full ARN of S3Level3ProjectBucketsFullPolicy
EcrLevel1ReadOnlyPolicyArn arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-ecr-level1-read-only ARN of EcrLevel1ReadOnlyPolicy
CombinedBMlopsServicesBPolicyArn arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-mlops-services-b ARN of CombinedBMlopsServicesBPolicy
GlueEtlRoleArn arn:aws:iam::123456789012:role/globalbank-prod-c001-role-glue-etl ARN of GlueEtlRole
FinopsManagersGroupArn arn:aws:iam::123456789012:group/globalbank-prod-c001-group-finops-managers ARN of FinopsManagersGroup
EcrLevel3CiReadWritePolicyArn arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-ecr-level3-ci-read-write ARN of EcrLevel3CiReadWritePolicy
EcrLevel2DevReadWritePolicyArn arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-ecr-level2-dev-read-write ARN of EcrLevel2DevReadWritePolicy
PipelineLevel2ProjectDevPolicyArn arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-pipeline-level2-project-dev ARN of PipelineLevel2ProjectDevPolicy
CombinedAMlopsServicesAPolicyArn arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-mlops-services-a ARN of CombinedAMlopsServicesAPolicy
SagemakerLevel1ProdReadOnlyInvokePolicyArn arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-sagemaker-level1-prod-read-only-invoke ARN of SagemakerLevel1ProdReadOnlyInvokePolicy
KmsLevel1ReadOnlyPolicyArn arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-kms-level1-read-only ARN of KmsLevel1ReadOnlyPolicy
CiCdDeploymentRoleArn arn:aws:iam::123456789012:role/globalbank-prod-c001-role-ci-cd-deployment-role ARN of CiCdDeploymentRole
FinopsAdminRoleArn arn:aws:iam::123456789012:role/globalbank-prod-c001-role-finops-admin ARN of FinopsAdminRole
SagemakerLevel3ProdInvokePolicyArn arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-sagemaker-level3-prod-invoke ARN of SagemakerLevel3ProdInvokePolicy
PipelineLevel3ProjectCiPolicyArn arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-pipeline-level3-project-ci ARN of PipelineLevel3ProjectCiPolicy
S3Level1ReadOnlyPolicyArn arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-s3-level1-read-only ARN of S3Level1ReadOnlyPolicy
TrustedAdvisorLevel1ReadOnlyPolicyArn arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-trusted-advisor-level1-read-only ARN of TrustedAdvisorLevel1ReadOnlyPolicy
SagemakerExecutionRoleArn arn:aws:iam::123456789012:role/globalbank-prod-c001-role-sagemaker-execution ARN of SagemakerExecutionRole
LambdaMlPipelineRoleArn arn:aws:iam::123456789012:role/globalbank-prod-c001-role-lambda-ml-pipeline ARN of LambdaMlPipelineRole
OperationsSupportGroupArn arn:aws:iam::123456789012:group/globalbank-prod-c001-group-operations-support ARN of OperationsSupportGroup
SagemakerLevel1ReadOnlyPolicyArn arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-sagemaker-level1-read-only ARN of SagemakerLevel1ReadOnlyPolicy
PipelineLevel1ReadOnlyPolicyArn arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-pipeline-level1-read-only ARN of PipelineLevel1ReadOnlyPolicy
AqaTestingRoleArn arn:aws:iam::123456789012:role/globalbank-prod-c001-role-aqa-testing ARN of AqaTestingRole
AiGovernanceGroupArn arn:aws:iam::123456789012:group/globalbank-prod-c001-group-ai-governance ARN of AiGovernanceGroup
MonitoringRoleArn arn:aws:iam::123456789012:role/globalbank-prod-c001-xacct-monitoring-role ARN of MonitoringRole
MlopsEngineersGroupArn arn:aws:iam::123456789012:group/globalbank-prod-c001-group-mlops-engineers ARN of MlopsEngineersGroup
SecurityAdminRoleArn arn:aws:iam::123456789012:role/globalbank-prod-c001-role-security-admin ARN of SecurityAdminRole
CodebuildServiceRoleArn arn:aws:iam::123456789012:role/globalbank-prod-c001-role-codebuild-service ARN of CodebuildServiceRole
ExternalContractorsGroupArn arn:aws:iam::123456789012:group/globalbank-prod-c001-group-external-contractors ARN of ExternalContractorsGroup
CombinedCMlopsServicesCPolicyArn arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-mlops-services-c ARN of CombinedCMlopsServicesCPolicy
DataScientistsGroupArn arn:aws:iam::123456789012:group/globalbank-prod-c001-group-data-scientists ARN of DataScientistsGroup
AdataEngineerRoleArn arn:aws:iam::123456789012:role/globalbank-prod-c001-role-adata-engineer ARN of AdataEngineerRole
AdataScientistRoleArn arn:aws:iam::123456789012:role/globalbank-prod-c001-role-adata-scientist ARN of AdataScientistRole
CombinedOpsServicesReadOnlyPolicyArn arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-ops-services-read-only ARN of CombinedOpsServicesReadOnlyPolicy
ModelApproverRoleArn arn:aws:iam::123456789012:role/globalbank-prod-c001-role-model-approver ARN of ModelApproverRole
AmlEngineerRoleArn arn:aws:iam::123456789012:role/globalbank-prod-c001-role-aml-engineer ARN of AmlEngineerRole
SagemakerLevel4CiDeployOnlyPolicyArn arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-sagemaker-level4-ci-deploy-only ARN of SagemakerLevel4CiDeployOnlyPolicy
BusinessConsumersGroupArn arn:aws:iam::123456789012:group/globalbank-prod-c001-group-business-consumers ARN of BusinessConsumersGroup
LambdaLevel2DeployManagePolicyArn arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-lambda-level2-deploy-manage ARN of LambdaLevel2DeployManagePolicy
QaTestingGroupArn arn:aws:iam::123456789012:group/globalbank-prod-c001-group-qa-testing ARN of QaTestingGroup
LambdaLevel1InvokeOnlyPolicyArn arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-lambda-level1-invoke-only ARN of LambdaLevel1InvokeOnlyPolicy
DeploymentRoleArn arn:aws:iam::123456789012:role/globalbank-prod-c001-xacct-deployment-role ARN of DeploymentRole
SecurityTeamGroupArn arn:aws:iam::123456789012:group/globalbank-prod-c001-group-security-team ARN of SecurityTeamGroup
BedrockLevel1InvokeOnlyPolicyArn arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-bedrock-level1-invoke-only ARN of BedrockLevel1InvokeOnlyPolicy
MlEngineersGroupArn arn:aws:iam::123456789012:group/globalbank-prod-c001-group-ml-engineers ARN of MlEngineersGroup
PlatformAdministratorsGroupArn arn:aws:iam::123456789012:group/globalbank-prod-c001-group-platform-administrators ARN of PlatformAdministratorsGroup
StackName globalbank-prod-c001-us-west-1-enterprise-sec-stack CloudFormation stack name
S3Level2ProjectBucketsOnlyPolicyArn arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-s3-level2-project-buckets-only ARN of S3Level2ProjectBucketsOnlyPolicy

Deployed Resources (49)

TYPE
AWS::IAM::Role
LOGICAL ID
AdataEngineerRole
PHYSICAL ID
globalbank-prod-c001-role-adata-engineer
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Role
LOGICAL ID
AdataScientistRole
PHYSICAL ID
globalbank-prod-c001-role-adata-scientist
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Group
LOGICAL ID
AiGovernanceGroup
PHYSICAL ID
globalbank-prod-c001-group-ai-governance
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Role
LOGICAL ID
AmlEngineerRole
PHYSICAL ID
globalbank-prod-c001-role-aml-engineer
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Role
LOGICAL ID
AqaTestingRole
PHYSICAL ID
globalbank-prod-c001-role-aqa-testing
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::ManagedPolicy
LOGICAL ID
BedrockLevel1InvokeOnlyPolicy
PHYSICAL ID
arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-bedrock-level1-invoke-only
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Group
LOGICAL ID
BusinessConsumersGroup
PHYSICAL ID
globalbank-prod-c001-group-business-consumers
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Role
LOGICAL ID
CiCdDeploymentRole
PHYSICAL ID
globalbank-prod-c001-role-ci-cd-deployment-role
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Role
LOGICAL ID
CodebuildServiceRole
PHYSICAL ID
globalbank-prod-c001-role-codebuild-service
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::ManagedPolicy
LOGICAL ID
CombinedAMlopsServicesAPolicy
PHYSICAL ID
arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-mlops-services-a
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::ManagedPolicy
LOGICAL ID
CombinedBMlopsServicesBPolicy
PHYSICAL ID
arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-mlops-services-b
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::ManagedPolicy
LOGICAL ID
CombinedCMlopsServicesCPolicy
PHYSICAL ID
arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-mlops-services-c
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::ManagedPolicy
LOGICAL ID
CombinedOpsServicesReadOnlyPolicy
PHYSICAL ID
arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-ops-services-read-only
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Group
LOGICAL ID
DataEngineersGroup
PHYSICAL ID
globalbank-prod-c001-group-data-engineers
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Group
LOGICAL ID
DataScientistsGroup
PHYSICAL ID
globalbank-prod-c001-group-data-scientists
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Role
LOGICAL ID
DeploymentRole
PHYSICAL ID
globalbank-prod-c001-xacct-deployment-role
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::ManagedPolicy
LOGICAL ID
EcrLevel1ReadOnlyPolicy
PHYSICAL ID
arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-ecr-level1-read-only
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::ManagedPolicy
LOGICAL ID
EcrLevel2DevReadWritePolicy
PHYSICAL ID
arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-ecr-level2-dev-read-write
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::ManagedPolicy
LOGICAL ID
EcrLevel3CiReadWritePolicy
PHYSICAL ID
arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-ecr-level3-ci-read-write
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Group
LOGICAL ID
ExternalContractorsGroup
PHYSICAL ID
globalbank-prod-c001-group-external-contractors
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Role
LOGICAL ID
FinopsAdminRole
PHYSICAL ID
globalbank-prod-c001-role-finops-admin
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Group
LOGICAL ID
FinopsManagersGroup
PHYSICAL ID
globalbank-prod-c001-group-finops-managers
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Role
LOGICAL ID
GlueEtlRole
PHYSICAL ID
globalbank-prod-c001-role-glue-etl
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::ManagedPolicy
LOGICAL ID
KmsLevel1ReadOnlyPolicy
PHYSICAL ID
arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-kms-level1-read-only
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::ManagedPolicy
LOGICAL ID
LambdaLevel1InvokeOnlyPolicy
PHYSICAL ID
arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-lambda-level1-invoke-only
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::ManagedPolicy
LOGICAL ID
LambdaLevel2DeployManagePolicy
PHYSICAL ID
arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-lambda-level2-deploy-manage
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Role
LOGICAL ID
LambdaMlPipelineRole
PHYSICAL ID
globalbank-prod-c001-role-lambda-ml-pipeline
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Group
LOGICAL ID
MlEngineersGroup
PHYSICAL ID
globalbank-prod-c001-group-ml-engineers
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Group
LOGICAL ID
MlopsEngineersGroup
PHYSICAL ID
globalbank-prod-c001-group-mlops-engineers
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Role
LOGICAL ID
ModelApproverRole
PHYSICAL ID
globalbank-prod-c001-role-model-approver
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Role
LOGICAL ID
MonitoringRole
PHYSICAL ID
globalbank-prod-c001-xacct-monitoring-role
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Group
LOGICAL ID
OperationsSupportGroup
PHYSICAL ID
globalbank-prod-c001-group-operations-support
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::ManagedPolicy
LOGICAL ID
PipelineLevel1ReadOnlyPolicy
PHYSICAL ID
arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-pipeline-level1-read-only
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::ManagedPolicy
LOGICAL ID
PipelineLevel2ProjectDevPolicy
PHYSICAL ID
arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-pipeline-level2-project-dev
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::ManagedPolicy
LOGICAL ID
PipelineLevel3ProjectCiPolicy
PHYSICAL ID
arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-pipeline-level3-project-ci
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Group
LOGICAL ID
PlatformAdministratorsGroup
PHYSICAL ID
globalbank-prod-c001-group-platform-administrators
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Group
LOGICAL ID
QaTestingGroup
PHYSICAL ID
globalbank-prod-c001-group-qa-testing
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::ManagedPolicy
LOGICAL ID
S3Level1ReadOnlyPolicy
PHYSICAL ID
arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-s3-level1-read-only
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::ManagedPolicy
LOGICAL ID
S3Level2ProjectBucketsOnlyPolicy
PHYSICAL ID
arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-s3-level2-project-buckets-only
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::ManagedPolicy
LOGICAL ID
S3Level3ProjectBucketsFullPolicy
PHYSICAL ID
arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-s3-level3-project-buckets-full
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Role
LOGICAL ID
SagemakerExecutionRole
PHYSICAL ID
globalbank-prod-c001-role-sagemaker-execution
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::ManagedPolicy
LOGICAL ID
SagemakerLevel1ProdReadOnlyInvokePolicy
PHYSICAL ID
arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-sagemaker-level1-prod-read-only-invoke
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::ManagedPolicy
LOGICAL ID
SagemakerLevel1ReadOnlyPolicy
PHYSICAL ID
arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-sagemaker-level1-read-only
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::ManagedPolicy
LOGICAL ID
SagemakerLevel2DevInvokePolicy
PHYSICAL ID
arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-sagemaker-level2-dev-invoke
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::ManagedPolicy
LOGICAL ID
SagemakerLevel3ProdInvokePolicy
PHYSICAL ID
arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-sagemaker-level3-prod-invoke
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::ManagedPolicy
LOGICAL ID
SagemakerLevel4CiDeployOnlyPolicy
PHYSICAL ID
arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-sagemaker-level4-ci-deploy-only
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Role
LOGICAL ID
SecurityAdminRole
PHYSICAL ID
globalbank-prod-c001-role-security-admin
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::Group
LOGICAL ID
SecurityTeamGroup
PHYSICAL ID
globalbank-prod-c001-group-security-team
STATUS
CREATE_COMPLETE
TYPE
AWS::IAM::ManagedPolicy
LOGICAL ID
TrustedAdvisorLevel1ReadOnlyPolicy
PHYSICAL ID
arn:aws:iam::123456789012:policy/globalbank-prod-c001-policy-trusted-advisor-level1-read-only
STATUS
CREATE_COMPLETE
Generated by Security Provisioner Tool