mirror of https://github.com/ghndrx/terraform-foundation.git synced 2026-02-10 06:45:06 +00:00

Files

Greg Hendrickson 6136cde9bb feat: Terraform Foundation - AWS Landing Zone

Enterprise-grade multi-tenant AWS cloud foundation.

Modules:
- GitHub OIDC for keyless CI/CD authentication
- IAM account settings and security baseline
- AWS Config Rules for compliance
- ABAC (Attribute-Based Access Control)
- SCPs (Service Control Policies)

Features:
- Multi-account architecture
- Cost optimization patterns
- Security best practices
- Comprehensive documentation

Tech: Terraform, AWS Organizations, IAM Identity Center

2026-02-02 02:57:23 +00:00

1.7 KiB

Raw Blame History

tenant-onboard

Tenant Onboarding Module Creates: Tenant OUs, App Accounts, IAM Groups, Budgets }

Usage

module "tenant_onboard" {
  source = "../modules/tenant-onboard"
  
  # Required variables
  tenant = ""
  email_domain = ""
  production_ou_id = ""
  nonproduction_ou_id = ""
  apps = ""
  alert_emails = ""
  permission_set_admin_arn = ""
  permission_set_developer_arn = ""
  permission_set_readonly_arn = ""

  # Optional: see variables.tf for all options
}

Requirements

Name	Version
terraform	>= 1.5.0
aws	>= 5.0

Inputs

Name	Description	Type	Required
tenant	Tenant identifier (lowercase, no spaces)	`string`	yes
email_domain	Domain for AWS account emails	`string`	yes
email_prefix	Email prefix before + sign	`string`	no
production_ou_id	ID of the Production OU	`string`	yes
nonproduction_ou_id	ID of the Non-Production OU	`string`	yes
environments	Environments to create for each app	`list(string)`	no
apps	Map of applications for this tenant	`map(object({`	yes
monthly_budget	Total monthly budget for tenant	`number`	no
alert_emails	Emails to receive budget alerts	`list(string)`	yes
permission_set_admin_arn	ARN of the TenantAdmin permission set	`string`	yes
permission_set_developer_arn	ARN of the TenantDeveloper permission set	`string`	yes
permission_set_readonly_arn	ARN of the TenantReadOnly permission set	`string`	yes

Outputs

Name	Description
tenant_ou_ids
account_ids
group_ids

License

Apache 2.0 - See LICENSE for details.

1.7 KiB Raw Blame History