IaC Deployments

This repository holds the central Terraform infrastructure code for the HCA IaC platform. It covers all AWS deployments, from foundational account level and organization level resources such as Control Tower, Transit Gateway, centralized DNS, Security Hub, GuardDuty, and AWS Config, to workload environment stacks.

All modifications require plan review and manual apply approval.

Getting started

Run the workspace bootstrap script before working on this repository.

.\scripts\workspace-bootstrap.ps1

Commit messages

Follow conventional commit standards using the helper script.

.\scripts\conv-commit.ps1

Format: type(scope): description Types: feat, fix, chore, docs, refactor, revert

Branch naming

Prefix your branch with the primary type of change. Examples: feat/add-vpc-stack, fix/correct-subnet-cidr

Pull requests

• Open a PR from your feature branch into main
• Fill in the PR template completely
• Assign at least one reviewer
• Ensure all checks pass before requesting approval
• You are responsible for merging once approved

Sentinels

• .locked means the terraform unit is locked and not allowed to be modified
• .destroy means the terraform unit is marked for deletion