amadan
Flagship infra: commit the relay-ie Terraform and reconcile untargeted drift open
Taking the relay live on Carloku on 2026-09-07 touched platform-infrastructure/flagship: region-ie.tf (relay = true on module "host_ie"), dns53.tf (aws_route53_record.relay_ie, A record for relay.eu-west-1.oncarlos.com), outputs.tf (ie_vpc_cidr). These were applied with -target on the security group and the record only, and are uncommitted in that repo; the session that made them could not commit there.
The untargeted plan also showed drift that was not applied and needs a look before the next untargeted apply: the IAM ssm-parameter-scope policy change (a prior handoff asked for a simulate-principal-policy check first) and SNS topic changes.
To do: commit the three flagship files, then reconcile the remaining drift deliberately.