Getting Started with Secure Infrastructure-as-Code

Accessing code respositories (see our Resources page section for more links)

a) Onboard SHIP-HATS – more information here.

b) Access different repositories

• Module repository: Terraform modules targeted at individual Cloud resources and services.
• Sample application repositories: Simple and fully functional application code that demonstrate various architecture patterns, and utilise modules found in the module repository.

c) For a start, refer to sample application deployments for a step-by-step guide on setting up an AWS S3 backend to store Terraform state files. Basic knowledge of Terraform is required.

Using modules in the module registry

Determine the module required and add the module link to the module repository as the module’s source parameter.

a) Information on the modules, their input and output parameters, can be found in the module repository.

b) An example of using the Virtual Private Cloud (VPC) module to create a VPC:

module "vpc" {
 source         = "git::ssh://git@bitbucket-ssh.ship.gov.sg:7999/cloudfuqzk/siac-modules.git//modules/vpc?ref=v0.1.0-alpha"
  project_name   = local.project_name
  vpc_cidr_block = local.vpc_cidr_block
  # 90 days as indicated on IM8 Infra Security
  retention_in_days = 90
  kms_key_id        = module.log_group_kms.arn
}

Contributing to repositories

Contributions are welcome, and users may raise a PR (Pull Request) to start the review process. More details on the required steps can be found in the respective repositories.

Last updated 12 August 2022