ADR-001: Module Naming Convention
kebab-case for module dirs, snake_case for HCL identifiers
28 docs tagged with "terraform-aws"
View all tagsADR-002: Terraform Registry Structure
Monorepo source with thin-wrapper multi-repo Registry publishing pattern
ADR-003: Provider Version Constraints
AWS provider >= 6.28 < 7.0, Terraform >= 1.11.0 across all modules
ADR-004: Three-Tier Testing Strategy
Native .tftest.hcl for Tiers 1-3, Terratest Go for pre-release integration
ADR-005: Example Naming Convention
Three-tier prefix system: mvp-, poc-, production- with kebab-case descriptors
ADR-006: S3 Native State Locking
Use S3 use_lockfile=true for state locking, no DynamoDB required
ADR-007: Upstream Dependency Strategy
Fork aws-ia/terraform-aws-iam-identity-center, strip AWSCC, rebrand to oceansoft
ADR-008: Tag Governance Co-existence Strategy
Maintain Enterprise PascalCase and FOCUS 1.2+ snake_case tags in parallel
ADR-009: act .actrc Platform Mapping
Map ubuntu-latest to pinned devcontainer image in .actrc for local CI
ADR-010: ci:act Full Pipeline Expansion
Expand ci:act to all 6 CI jobs and inject PATH for act binary location
ADR-011: act Advisory Dry-Run
Use act --dry-run for non-CI workflows requiring secrets or write tokens
ADR-012: Local Dev Source Override Pattern
Comment-toggle pattern for switching projects/ between Registry and local source
ADR-013: build:validate Scope Expansion
Extend build:validate and lock file checks to cover projects/ directory
ADR-014: Priority Examples for Cross-Validation
P1/P2/P3 example priority order to maximize bug detection per CI minute
ADR-015: Root VERSION File Update (HITL)
HITL must update root VERSION file before git tag creation at publish time
ADR-016: CHANGELOG Entries for Version Gap
Document all intermediate versions in CHANGELOG before Registry publish
ADR-018: Registry Publish Pre-Flight Checklist
Mandatory pre-flight checklist and HITL execution sequence before git tag
ADR-019: MCP Cross-Validation Post-Publish
Validate Registry ingestion via API and browser after v1.0.4 tag publish
ADR-020: Break-Glass Emergency Access
Empty-group membership pattern for emergency admin access without Terraform apply
ADR-021: Documentation SSOT Strategy
DevOps-TechDocs is the single source of truth for terraform-aws documentation — no cross-repo CI sync needed
ADR-022: Release Management Automation (release-please + Per-Module Tags)
Adopt release-please for automated semver, CHANGELOG, and git tag creation; adopt module-prefixed tag format for per-module TFC publishing from a monorepo
INVEST Stories
terraform-aws user stories scored with INVEST criteria and prioritized by WSJF
US-1: IAM Identity Center (Auditor-Friendly YAML)
Deploy IAM Identity Center permission sets from YAML for auditor review
US-2: ECS Fargate Spot (70% Cost Savings)
Deploy ECS Fargate with Spot capacity for 70% container cost savings
US-3: React SPA to S3+CloudFront+WAF
Deploy React SPA to S3+CloudFront with WAF for secure CDN delivery
US-4: APRA CPS 234 Cross-Domain Validation
Cross-domain APRA CPS 234 compliance validation - split required
US-5: Pre-Deploy Cost Estimates (Zero Surprise Bills)
FinOps lead gets pre-deploy cost estimates via Infracost on every PR
US-6: Bootstrap Repo (Under 5 Min Onboarding)
Platform engineer bootstraps terraform-aws in under 5 minutes