Introduction

This repository contains the necessary Terraform configurations to deploy an Amazon RDS for PostgreSQL and all the supporting infrastructure components like Amazon VPC, Subnets, KMS keys, security group and IAM roles. Please refer to Create Amazon RDS for PostgreSQL DB using Terraform and GitHub Actions for details.

The repository utilizes Bridgecrew Checkov to scan the Terraform code for security vulnerabilities. For those interested in adding code scanning capabilities to their GitHub Actions pipeline, a guide is available at Automate Terraform Configuration Scan with Checkov and GitHub Actions.

Infracost is employed to generate a cost estimate for building the architecture. To learn more about integrating Infracost estimates into a repository, refer to the note Estimate AWS Cloud Resource Cost with Infracost, Terraform, and GitHub Actions.

The provisioning process of the resources is automated using a GitHub Actions pipeline. Detailed information on this can be found in the note CI/CD with Terraform and GitHub Actions to Deploy to AWS.

Prerequisites

To ensure the code functions without errors, an OpenID Connect identity provider must be created in Amazon Identity and Access Management (IAM) with a trust relationship established with the GitHub repository. A detailed explanation with steps can be found here.

The ARN of the IAM Role is stored as a GitHub secret, which is referenced in the terraform.yml file.

Additionally, since Infracost is used in this repository, the INFRACOST_API_KEY is also stored as a repository secret and is referenced in the GitHub Actions workflow file. The cost estimate process is managed using a GitHub Actions variable, INFRACOST_SCAN_TYPE, where the value is either hcl_code or tf_plan, depending on the type of scan desired.
You can read about that at Integrate Infracost with GitHub Actions.

Usage

Ensure that the policy attached to the IAM role whose credentials are being used in this configuration has permission to create and manage all the AWS Cloud resources that are included in this repository.

If you want to check the pipeline logs, click on the Build Badges above the image in this ReadMe.

Contributing

If you find any issues or have suggestions for improvement, feel free to open an issue or submit a pull request. Contributions are always welcome!

License

This code is released under the Unlicense License. See LICENSE.