feat: Terraform Foundation - AWS Landing Zone

Enterprise-grade multi-tenant AWS cloud foundation.

Modules:
- GitHub OIDC for keyless CI/CD authentication
- IAM account settings and security baseline
- AWS Config Rules for compliance
- ABAC (Attribute-Based Access Control)
- SCPs (Service Control Policies)

Features:
- Multi-account architecture
- Cost optimization patterns
- Security best practices
- Comprehensive documentation

Tech: Terraform, AWS Organizations, IAM Identity Center
This commit is contained in:
2026-02-01 20:06:28 +00:00
commit 6136cde9bb
145 changed files with 30832 additions and 0 deletions

17
live/prod/env.hcl Normal file
View File

@@ -0,0 +1,17 @@
# Production environment configuration
locals {
environment = "prod"
aws_region = "us-east-1"
project_name = "myproject" # Update this
# Environment-specific settings
settings = {
multi_az = true
deletion_protection = true
backup_retention = 35
instance_class = "db.r6g.large"
node_type = "cache.r6g.large"
min_capacity = 2
max_capacity = 20
}
}