Skip to content

Latest commit

 

History

History
10 lines (8 loc) · 656 Bytes

File metadata and controls

10 lines (8 loc) · 656 Bytes

.manage

Terraform spec for the GitHub account

Architecture & Workflow

  • State file and the lock file is on AWS S3. The IaC code for this is in separate repository (https://github.com/keskad/manage-aws)
  • Connection with AWS uses OpenID Connect (OIDC) instead of statically generated credentials.
  • The pipeline is running on push to master and applying the changes
  • On merge requests there is a static code analysis in order to review the changes easily
  • Sensitive data is stored only in GitHub's Secrets and referred to in a Pipeline securely