Terraform Module Library
Our collection of reusable, opinionated Terraform modules for quickly provisioning production-ready AWS and GCP infrastructure.
Module Catalog
VPC + Networking
Multi-AZ VPC with public/private subnets, NAT gateways, VPC endpoints for S3/DynamoDB, and flow logs.
ECS Fargate Service
Containerized service with ALB, auto-scaling, CloudWatch logging, and optional service mesh integration.
RDS PostgreSQL
Multi-AZ RDS instance with automated backups, parameter groups, security groups, and monitoring alarms.
S3 + CloudFront
Static asset hosting with CloudFront CDN, OAI, custom domain, SSL certificate, and cache invalidation.
Lambda + API Gateway
Serverless function with API Gateway, custom domain, WAF rules, and structured logging.
GCP GKE Cluster
Production GKE cluster with node pools, workload identity, network policies, and Prometheus monitoring.
Module Standards
- Every module has a README with usage examples and variable documentation
- All resources are tagged with project, environment, and managed-by labels
- Modules use semantic versioning and are pinned in consuming projects
- Default values follow security best practices (encryption enabled, public access blocked)
- Outputs expose only what consumers need (IDs, ARNs, endpoints)
- State is stored in S3 with DynamoDB locking, never locally
Workspace Strategy
Minimal resources (single-AZ, small instances). Deployed on every PR merge to main. Auto-destroyed after 7 days of inactivity.
Production-mirror with reduced capacity. Used for integration testing, load testing, and client demos.
Full HA setup with multi-AZ, auto-scaling, and monitoring. Changes require approval via Terraform Cloud or Atlantis.
Want to use our Terraform modules or need custom infrastructure? Get in touch.