Design infrastructure with Terraform

Design, audit, and secure Terraform infrastructure-as-code modules

Terraform code review where security hardening (encryption, IAM least-privilege, secret rotation) is non-negotiable.

• · Terraform .tf files
• · Terraform module scope definition
• · Security audit targets

• · Module scaffold with structure
• · Security audit report
• · Best-practice recommendations

• · Terraform
• · python3 tf_module_analyzer.py
• · python3 tf_security_scanner.py

Terraform project exists; HCL syntax valid; provider config accessible

• · Remote backend not configured → state drift on team projects
• · Secrets hardcoded in .tf → exposed in state and git history
• · Module composition with child→child calls → circular dependency

• · Concrete security checklist: no 0.0.0.0/0 on port 22, secrets marked sensitive
• · Module structure boilerplate (main.tf, variables.tf, outputs.tf, versions.tf)
• · State management strategy explicit (S3 + DynamoDB, encryption at rest)