Reusable, production-grade Terraform modules for AWS infrastructure. Each module is independently validated, formatted, and linted via CI.
| Module | Description |
|---|---|
| vpc | Multi-AZ VPC with public/private subnets, NAT gateways |
| eks | EKS cluster with managed node groups and OIDC |
| rds | RDS MySQL/PostgreSQL with encryption, monitoring |
| s3-bucket | Secure S3 with versioning, encryption, lifecycle |
| security-group | Flexible SG with dynamic ingress rules |
| iam-role | IAM roles for EC2, Lambda, and EKS IRSA |
Each module has a working example under examples/. Run any example with:
cd examples/rds-mysql
terraform init && terraform plan- All storage encrypted by default
- Public access blocked on S3 by default
- Least-privilege IAM patterns
- Consistent tagging via
tagsvariable - CI validates every module on every PR