Skip to content

Site: SES via Vercel OIDC only; Vercel Analytics and Speed Insights - #2

Merged
lucasdoell merged 1 commit into
mainfrom
polaris/site-oidc-analytics
Oct 3, 2026
Merged

lucasdoell merged 1 commit into
mainfrom
polaris/site-oidc-analytics

Conversation

@lucasdoell

Copy link
Copy Markdown
Member
  • The download email reaches SES only with an IAM role assumed via Vercel OIDC (@vercel/oidc-aws-credentials-provider); static access keys are never read (ADR 0018). Config: AWS_ROLE_ARN replaces AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY/AWS_SESSION_TOKEN/POLARIS_EMAIL_USE_ROLE; setup steps in apps/site/app/api/email/README.md.
  • Adds Vercel Web Analytics and Speed Insights to the site's root layout.

Site tests (173), typecheck, lint, licences (notices regenerated) and production build pass. Env setup: ENG-267.

…and Speed Insights

The email route now assumes an IAM role with the deployment's OIDC token and
never reads static access keys (ADR 0018).
@vercel

vercel Bot commented Oct 3, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
polaris Ready Ready Preview Oct 3, 2026 1:02am UTC

Request Review

@lucasdoell
lucasdoell merged commit 1e63c47 into main Oct 3, 2026
9 of 10 checks passed

This branch was successfully deployed

1 active deployment
Preview — e3e045ed Deployed Oct 3, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant