Floussy Pay: no deployment goes through any more, the urgent fix is stuck in the CI pipeline

Floussy Pay is a fictional mobile payment wallet (www.floussypay.ma). The AWS organization separates accounts: the CI pipeline runs in the tools account (318047265590) with CodeBuild and the floussy-ci-codebuild role; at the deployment step, it assumes the floussy-deploy role in the production account (506729184413).

An urgent fix (transfer fees miscalculated for some merchants) must ship before noon. Since 08:00, every build fails at the deploy step. The security team states that the floussy-deploy policy has not changed in months. Last night, the platform team simply “cleanly renamed” a few Terraform resources in the tools account.

You are a cloud engineer, with the AWS CLI v2 and two profiles: --profile outils (tools) and --profile prod (region eu-west-3).