T

terraform-module

Reusable OpenTofu/Terraform module — AWS KMS asymmetric signing key + GitLab-OIDC signer role for release-binary signing chains. · https://aws-signing-kms.iac.phpboyscout.uk

Opinionated AWS security baseline for OpenTofu / Terraform — account hardening, audit logging, AWS Config, threat detection, alerts, MFA-required operator role. · https://aws-security-baseline.iac.phpboyscout.uk

Minimal, opinionated AWS account bootstrap for OpenTofu / Terraform — state backend, OIDC + automation role, aws-nuke config. · https://aws-bootstrap.iac.phpboyscout.uk

Terraform module to provision Google Cloud's Privileged Access Manager using GitLab breakglass policies and defaults.

Reusable OpenTofu/Terraform module — AWS KMS OpenPGP encryption identity (certification primary + ECDH subkey) plus split-privilege reader/certifier roles, for receiving encrypted security reports. · https://aws-encryption-kms.iac.phpboyscout.uk

Terraform module to configure multiple OIDC roles from GitLab CI to an AWS OpenID Connect Identity Provider.

Manage your selfhosted or SaaS Gitlab with terraform / tofu with YAML support