devotica

Production-grade AWS IAM Terraform module: service roles (Lambda/EC2/ECS/EKS), cross-account assume roles, account baseline (password policy, alias, Access Analyzer).

AWS CloudWatch Terraform module — encrypted+retained log groups, metric alarms, and dashboards. Part of the Devotica catalog.

Production-grade AWS KMS Terraform module: symmetric/asymmetric keys, alias, feature-flagged key policy (admins/users/service principals), multi-region opt-in. Fintech-safe defaults (annual rotation, 30-day deletion window, kms:ViaService gating).

EKS managed node group Terraform module — fintech-hardened (encrypted disks, IMDSv2, SSM, Graviton). Cloudposse-standard, native. Part of the Devotica catalog.

AWS SNS Terraform module — KMS-encrypted topic, subscriptions, TLS-enforced policy, FIFO support. Part of the Devotica catalog.

AWS Lambda Terraform module — execution role, encrypted+retained log group, VPC and X-Ray tracing. Fintech-safe. Part of the Devotica catalog.

Amazon GuardDuty Terraform module — threat detection with all protections and encrypted finding export. Part of the Devotica catalog.

Amazon EKS control-plane Terraform module — fintech-hardened, derived from cloudposse/terraform-aws-eks-cluster. Part of the Devotica catalog.

ElastiCache for Redis Terraform module — fintech-hardened, HA by default. Part of the Devotica catalog.

AWS WAFv2 Web ACL Terraform module — fintech-hardened edge WAF (managed rules, rate limiting, IP/geo, logging). Cloudposse-standard, native. Part of the Devotica catalog.

Production-grade AWS Application Load Balancer Terraform module: multi-listener (HTTPS+redirect+fixed-response), multi-target-group, fintech-safe defaults (TLS 1.3 policy, drop_invalid_header_fields, desync defensive, deletion protection).

Production-grade AWS ECS Fargate service Terraform module: single-container service in private subnets, optional ALB attach + autoscaling, KMS-encrypted logs, inline IAM roles, fintech-safe defaults (private networking, ECS Exec off, read-only root fs, ARM64).

AWS SQS Terraform module — SSE encryption, dead-letter queue, TLS-enforced policy, FIFO support. Part of the Devotica catalog.

AWS Route 53 Terraform module — public/private hosted zones and records with alias support. Part of the Devotica catalog.

AWS DynamoDB Terraform module — encryption, PITR, deletion protection, GSIs/TTL/streams. Fintech-safe. Part of the Devotica catalog.

Production-grade AWS ECR Terraform module — private container registry with IMMUTABLE tags, scan-on-push, KMS encryption, lifecycle retention, and cross-account access. Fintech-safe. Part of the Devotica catalog.

AWS Secrets Manager Terraform module — fintech-hardened (KMS, rotation, resource policies, replicas). Part of the Devotica catalog.

AWS ACM certificate Terraform module — DNS-validated (Route 53) TLS certificates, fintech-safe. Part of the Devotica catalog.

AWS Backup Terraform module — KMS vault, plans, tag/resource selection, optional compliance vault lock. Part of the Devotica catalog.