grendel-consulting / cloud-factory-requests

Requesting AWS Accounts through the Account Factory for Terraform

Cloud Factory Requests

Boilerplate configuration for creating requests for new AWS Accounts through the Account Factory for Terraform module. It's pipeline requires the specific structure used and the included submodule to define a DynamoDB table item with the account specifications.

Deployment

Deployment occurs on merge to main, triggering an AWS CodePipeline in the factory management OU; it is not speculatively planned through GitHub Actions as the buildspec hydrates the providers and backends through the Jinga templates.

Further Reading

See: AFT Account Request

cloud-factory-requests's Issues

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update actions/checkout action to v4.1.7
• chore(deps): update github/codeql-action action to v3.25.10

Detected dependencies

github-actions

.github/workflows/dependency-review.yml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• actions/dependency-review-action v4.3.3@72eb03d02c7872a771aacd928f3123ac62ad6d3a

.github/workflows/pr-review.yaml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• hashicorp/setup-terraform v3.1.1@651471c36a6092792c552e8b1bef71e592b462d8
• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• actions/cache v4.0.2@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9
• terraform-linters/setup-tflint v4.0.0@19a52fbac37dacb22a09518e4ef6ee234f2d4987
• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• aquasecurity/trivy-action 0.22.0@595be6a0f6560a0a8fc419ddf630567fc623531d
• github/codeql-action v3.25.8@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff

.github/workflows/scorecard.yml

• step-security/harden-runner v2.8.1@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• ossf/scorecard-action v2.3.3@dc50aa9510b46c811795eb24b2f1ba02a914e534
• actions/upload-artifact v4.3.3@65462800fd760344b1a7b4382951275a0abb4808
• github/codeql-action v3.25.8@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff

pre-commit

.pre-commit-config.yaml

• antonbabenko/pre-commit-terraform v1.91.0
• koalaman/shellcheck-precommit v0.10.0
• Yelp/detect-secrets v1.5.0
• gitleaks/gitleaks v8.18.3
• pre-commit/pre-commit-hooks v4.6.0

terraform

terraform/infra-control-plane.tf

terraform/modules/aft-account-request/versions.tf

• aws < 6.0.0
• hashicorp/terraform 1.8.5

terraform/work-caretaker-saas-prod.tf

terraform/work-caretaker-saas-stage.tf

terraform/work-corporate-site-prod.tf

terraform/work-corporate-site-stage.tf

terraform/work-eco-central-stage.tf

terraform/work-eco-consumer-stage.tf

terraform/work-eco-producer-stage.tf

terraform/work-onibi-site-prod.tf

terraform/work-onibi-site-stage.tf

tflint-plugin

terraform/.tflint.hcl

• terraform-linters/tflint-ruleset-aws 0.32.0

---

• Check this box to trigger a request for Renovate to run again on this repository