mirror of https://github.com/ghndrx/terraform-foundation.git synced 2026-02-10 06:45:06 +00:00

Files

Greg Hendrickson 6136cde9bb feat: Terraform Foundation - AWS Landing Zone

Enterprise-grade multi-tenant AWS cloud foundation.

Modules:
- GitHub OIDC for keyless CI/CD authentication
- IAM account settings and security baseline
- AWS Config Rules for compliance
- ABAC (Attribute-Based Access Control)
- SCPs (Service Control Policies)

Features:
- Multi-account architecture
- Cost optimization patterns
- Security best practices
- Comprehensive documentation

Tech: Terraform, AWS Organizations, IAM Identity Center

2026-02-02 02:57:23 +00:00

main.tf

feat: Terraform Foundation - AWS Landing Zone

2026-02-02 02:57:23 +00:00

outputs.tf

feat: Terraform Foundation - AWS Landing Zone

2026-02-02 02:57:23 +00:00

README.md

feat: Terraform Foundation - AWS Landing Zone

2026-02-02 02:57:23 +00:00

variables.tf

feat: Terraform Foundation - AWS Landing Zone

2026-02-02 02:57:23 +00:00

README.md

security-groups

Terraform module for AWS landing zone pattern.

Create common security group patterns for multi-tier architectures.

Planned Features

Web tier (HTTP/HTTPS from ALB)
App tier (from web tier only)
Database tier (from app tier only)
Bastion host (SSH from allowed CIDRs)
VPC endpoints (HTTPS from VPC)
EKS patterns (cluster, nodes, pods)

Planned Usage

module "security_groups" {
  source = "../modules/security-groups"
  
  vpc_id      = module.vpc.vpc_id
  name_prefix = "myapp"
  
  create_web_tier = true
  create_app_tier = true
  create_db_tier  = true
  create_bastion  = true
  
  allowed_ssh_cidrs = ["10.0.0.0/8"]
  
  tags = local.tags
}