Draft

infra-iac — Novamera Infrastructure IaC

Internalactive

OpenTofu + Terragrunt infrastructure-as-code repository for all Novamera cloud resources. The source of truth for every deployed stack — networking, ECS services, CloudFront distributions, Aurora, S3, and service blueprints.

flowchart TD
    IAC[novamera.infra-iac
OpenTofu + Terragrunt]
    IAC --> MODS[_modules/
reusable modules]
    IAC --> BP[_blueprints/
per-service configs]
    IAC --> STACKS[stacks/
env + zone deployments]
    STACKS --> D1[dev1-na1]
    STACKS --> S1[stg1-na1]
    STACKS --> P1[prd1-na1]
    BP --> SVCS["svc-gpr · svc-qc · svc-qaqc-data
svc-borehole-labelling · svc-datahub
svc-ncu · svc-sim + all frontends"]
    style IAC fill:#EDEDFF,stroke:#3B54F7

Naming convention: {env}-{zone} — e.g. dev1-na1, stg1-na1, prd1-na1.

Key blueprints:

  • core-ecs-cluster · foundation-networking · foundation-storage — shared platform

  • fe-routing — central CloudFront + API Gateway + domain (all frontends route through this)

  • One blueprint per service: svc-gpr, svc-qc, svc-qaqc-data, svc-borehole-labelling, svc-datahub, svc-ncu, svc-sim, svc-nbit-sim

  • POC scaffolding via scripts/new-poc.sh <app>

  • CI: GitHub Actions — plan on PR, apply on merge to main; poc-deploy.yml for POC infra.

  • Patterns implemented: ecs-service · cloudfront-s3-website.

  • Auth: OpenID Connect (OIDC) — no long-lived AWS keys in CI.