AWS TF repo

• pipeline is triggered by gh webhook

• only tracks changes to /main

• only closed PR will initiate pipeline

• build stage in pipeline uses gh repo as source

  • uses container image = hashicorp,tf:latest image
  • uses buildspec.yml from repo (runs tf innit>plan>apply)