feat: Terraform Foundation - AWS Landing Zone

Enterprise-grade multi-tenant AWS cloud foundation.

Modules:
- GitHub OIDC for keyless CI/CD authentication
- IAM account settings and security baseline
- AWS Config Rules for compliance
- ABAC (Attribute-Based Access Control)
- SCPs (Service Control Policies)

Features:
- Multi-account architecture
- Cost optimization patterns
- Security best practices
- Comprehensive documentation

Tech: Terraform, AWS Organizations, IAM Identity Center

terraform/modules/identity-center/variables.tf

@@ -0,0 +1,36 @@
+################################################################################
+# Identity Center - Input Variables
+################################################################################
+
+variable "create_default_permission_sets" {
+  type        = bool
+  default     = true
+  description = "Create default permission sets (Admin, PowerUser, ReadOnly, Billing)"
+}
+
+variable "permission_sets" {
+  type = map(object({
+    description      = string
+    session_duration = optional(string, "PT4H")
+    managed_policies = optional(list(string), [])
+    inline_policy    = optional(string, "")
+  }))
+  default     = {}
+  description = "Custom permission sets to create"
+}
+
+variable "account_assignments" {
+  type = list(object({
+    group_name     = string
+    permission_set = string
+    account_id     = string
+  }))
+  default     = []
+  description = "Group to account/permission assignments"
+}
+
+variable "tags" {
+  type        = map(string)
+  default     = {}
+  description = "Tags to apply to resources"
+}