feat: Terraform Foundation - AWS Landing Zone

Enterprise-grade multi-tenant AWS cloud foundation.

Modules:
- GitHub OIDC for keyless CI/CD authentication
- IAM account settings and security baseline
- AWS Config Rules for compliance
- ABAC (Attribute-Based Access Control)
- SCPs (Service Control Policies)

Features:
- Multi-account architecture
- Cost optimization patterns
- Security best practices
- Comprehensive documentation

Tech: Terraform, AWS Organizations, IAM Identity Center

.trivy.yaml

@@ -0,0 +1,37 @@
+# Trivy Configuration
+# Security and misconfiguration scanning
+# https://aquasecurity.github.io/trivy/
+
+# Scan severity levels
+severity:
+  - CRITICAL
+  - HIGH
+  - MEDIUM
+
+# Exit code (0 = warn only, 1 = fail on findings)
+exit-code: 0
+
+# Output format
+format: table
+
+# Ignore unfixed vulnerabilities
+ignore-unfixed: true
+
+# Skip directories
+skip-dirs:
+  - .terraform
+  - .git
+  - node_modules
+
+# Custom policy paths
+# policy:
+#   - ./policies
+
+# Misconfiguration scanning
+misconfiguration:
+  # Terraform-specific checks
+  terraform:
+    exclude-downloaded-modules: true
+
+# Ignore specific checks
+ignorefile: .trivyignore