mir-cloud-aws

Make It Right (AWS module). AWS identity and service mechanics, loaded after the provider is chosen. Covers: IAM evaluation order and where a permissions boundary does not bind; iam:PassRole escalation; Condition-operator traps (StringEquals, ForAllValues:); GitHub OIDC sub specificity and the immutable numeric-ID sub format; IMDSv2 and HttpPutResponseHopLimit; S3 Block Public Access defaulting only for…