feat: Terraform Foundation - AWS Landing Zone

Enterprise-grade multi-tenant AWS cloud foundation.

Modules:
- GitHub OIDC for keyless CI/CD authentication
- IAM account settings and security baseline
- AWS Config Rules for compliance
- ABAC (Attribute-Based Access Control)
- SCPs (Service Control Policies)

Features:
- Multi-account architecture
- Cost optimization patterns
- Security best practices
- Comprehensive documentation

Tech: Terraform, AWS Organizations, IAM Identity Center
This commit is contained in:
2026-02-01 20:06:28 +00:00
commit 6136cde9bb
145 changed files with 30832 additions and 0 deletions

View File

@@ -0,0 +1,15 @@
# Example variables for 03-platform layer
# Copy to terraform.tfvars and update values
state_bucket = "myproject-terraform-state"
project_name = "myproject"
region = "us-east-1"
# Enable/disable CI/CD resources
enable_cicd = true
# ECR repositories to create
ecr_repos = ["base", "app", "worker"]
# Image retention (number of images to keep per repo)
ecr_image_retention_count = 30