mirror of
https://github.com/ghndrx/terraform-foundation.git
synced 2026-02-10 06:45:06 +00:00
Greg Hendrickson
6136cde9bb
Enterprise-grade multi-tenant AWS cloud foundation. Modules: - GitHub OIDC for keyless CI/CD authentication - IAM account settings and security baseline - AWS Config Rules for compliance - ABAC (Attribute-Based Access Control) - SCPs (Service Control Policies) Features: - Multi-account architecture - Cost optimization patterns - Security best practices - Comprehensive documentation Tech: Terraform, AWS Organizations, IAM Identity Center
13 lines
319 B
Plaintext
13 lines
319 B
Plaintext
# Copy to terraform.tfvars and customize
|
|
|
|
# Email domain for AWS account emails
|
|
# Accounts will be: aws+audit@domain.com, aws+logs@domain.com, etc.
|
|
email_domain = "example.com"
|
|
email_prefix = "aws"
|
|
|
|
# Allowed AWS regions (enforced by SCP)
|
|
allowed_regions = ["us-east-1", "us-west-2"]
|
|
|
|
# AWS Region
|
|
region = "us-east-1"
|