Right now, modules like adb-exfiltration-protection, aws-exfiltration-protection, and others contain everything - both hub and spoke environments + workspaces definition. It's not very modular, so you can't deploy additional spokes, or additional workspaces into the existing spokes.
It would be really useful to create separate modules, to implement something like shown on the picture below:
Hub module - VNet/VPC, Firewall, ...
Spoke module - VNet/VPC, shared resources, like, subnets for private links, etc.
Workspace module for deployment into a specified spoke
Right now, modules like
adb-exfiltration-protection,aws-exfiltration-protection, and others contain everything - both hub and spoke environments + workspaces definition. It's not very modular, so you can't deploy additional spokes, or additional workspaces into the existing spokes.It would be really useful to create separate modules, to implement something like shown on the picture below: