ADR-023: Derived Module Pattern (Clone + Value-Add)
All modules are cloned from upstream terraform-aws-modules/* and extended with oceansoft value-adds rather than thin-wrapper or custom implementations
All modules are cloned from upstream terraform-aws-modules/* and extended with oceansoft value-adds rather than thin-wrapper or custom implementations
The web module wires alb + cloudfront + waf + dns into an opinionated secure-by-default composition layer rather than a derived upstream clone