s3-static-site
Private S3 origin, CloudFront origin access control, and optional access logs.
Tests passed 6
TerraShelf
Reusable, versioned AWS Terraform modules with offline tests and generated docs. This is a module library reference implementation. It was not deployed to any AWS account, and it is not published to the Terraform Registry.
Checks recorded at build time
- Terraform Terraform v1.9.8
- tflint TFLint version 0.55.1
- terraform-docs terraform-docs version v0.19.0 af31cc6 windows/amd64
- checkov 3.2.449
- Recorded at 2026-10-04T08:58:38+00:00
- terraform test passed 48
- checkov failed 0
- pytest passed 11
- AWS access key empty true
- Credentials used false
- Graph mode python-hcl2-resource-list
SkyForge and TerraShelf
SkyForge is one product reference architecture. TerraShelf is the module library. SkyForge could later call these modules. This task does not change SkyForge, and it does not copy SkyForge's network, ecr, ecs_service, alb, ec2_docker_host, or state_backend modules.
github-oidc-role
GitHub Actions role whose trust policy allows one branch or one environment.
Tests passed 6
rds-postgres
Encrypted Postgres with security-group ingress and a Secrets Manager master password.
Tests passed 6
sqs-queue
Queue, dead-letter queue, redrive policy, and server-side encryption.
Tests passed 6
lambda-function
Zip-packaged function, retained log group, and a least-privilege execution role.
Tests passed 7
cloudwatch-alarms
Map-driven alarms that publish to an encrypted SNS topic.
Tests passed 6
budget-guard
Monthly cost budget that notifies at 50, 80, and 100 percent.
Tests passed 5
account-baseline
Password policy, public access block, EBS encryption, Access Analyzer, and multi-region CloudTrail.
Tests passed 6