aws-terraform-devopsCore Platform
aws-terraform-devops provisions a complete AWS environment using seven modular Terraform configurations: VPC with multi-AZ subnets and NAT gateways, EKS 1.31 with managed node groups, RDS PostgreSQL 15 with automated backups and encryption at rest, ECR with scan-on-push policies, IAM roles following least-privilege principles, CloudWatch log groups and alarms, and S3 with versioning and server-side encryption. A Flask application is deployed via Helm and managed by ArgoCD with auto-sync and self-healing enabled.
Infrastructure
7 Terraform modules
module.vpc
Multi-AZ VPC, public/private subnets, NAT, IGW
10.0.0.0/16 · eu-west-1a/b/c
module.eks
EKS 1.31 cluster with managed node groups
Auto-scaling · t3.medium
module.rds
RDS PostgreSQL 15, Multi-AZ, encrypted
Automated backups · failover
module.ecr
ECR registry with lifecycle policies
Image scanning enabled
module.iam
Roles and policies with least-privilege
OIDC · service accounts
module.cloudwatch
Metrics, logs, alarms and dashboards
Container Insights enabled
module.s3_bucket
Terraform state backend, versioning
DynamoDB lock table
Ecosystem
Role in the platform
aws-terraform-devops is the infrastructure layer — it provisions the AWS environment that all other projects run on.
SecurityAgent scans this repo on every push via lra scan — Trivy + Checkov.
The AI agent reads EC2, EKS and RDS resources provisioned by these Terraform modules.
Managed EKS vs bare-metal kubeadm — same GitOps patterns at different layers.
DocumentationAgent keeps architecture docs in sync with the Terraform codebase.
