IaC Deployments
This repository holds the central Terraform infrastructure code for the HCA IaC platform. It covers all AWS deployments, from foundational account level and organization level resources such as Control Tower, Transit Gateway, centralized DNS, Security Hub, GuardDuty, and AWS Config, to workload environment stacks.
All modifications require plan review and manual apply approval.
Getting started
Run the workspace bootstrap script before working on this repository.
.\scripts\workspace-bootstrap.ps1
Commit messages
Follow conventional commit standards using the helper script.
.\scripts\conv-commit.ps1
Format: type(scope): description
Types: feat, fix, chore, docs, refactor, revert
Branch naming
Prefix your branch with the primary type of change. Examples: feat/add-vpc-stack, fix/correct-subnet-cidr
Pull requests
- Open a PR from your feature branch into
main - Fill in the PR template completely
- Assign at least one reviewer
- Ensure all checks pass before requesting approval
- You are responsible for merging once approved
Sentinels
.lockedmeans the terraform unit is locked and not allowed to be modified.destroymeans the terraform unit is marked for deletion