feat: Terraform Foundation - AWS Landing Zone

Enterprise-grade multi-tenant AWS cloud foundation.

Modules:
- GitHub OIDC for keyless CI/CD authentication
- IAM account settings and security baseline
- AWS Config Rules for compliance
- ABAC (Attribute-Based Access Control)
- SCPs (Service Control Policies)

Features:
- Multi-account architecture
- Cost optimization patterns
- Security best practices
- Comprehensive documentation

Tech: Terraform, AWS Organizations, IAM Identity Center
This commit is contained in:
2026-02-01 20:06:28 +00:00
commit 6136cde9bb
145 changed files with 30832 additions and 0 deletions

View File

@@ -0,0 +1,28 @@
################################################################################
# Identity Center - Outputs
################################################################################
output "instance_arn" {
value = local.instance_arn
description = "Identity Center instance ARN"
}
output "identity_store_id" {
value = local.identity_store_id
description = "Identity Store ID"
}
output "permission_set_arns" {
value = { for k, v in aws_ssoadmin_permission_set.this : k => v.arn }
description = "Map of permission set names to ARNs"
}
output "sso_start_url" {
value = "https://${local.identity_store_id}.awsapps.com/start"
description = "SSO portal start URL"
}
output "assignment_count" {
value = length(aws_ssoadmin_account_assignment.this)
description = "Number of account assignments created"
}