AWS WAFv2 Web ACL Terraform module — fintech-hardened edge WAF (managed rules, rate limiting, IP/geo, logging). Cloudposse-standard, native. Part of the Devotica catalog.

Production-grade AWS KMS Terraform module: symmetric/asymmetric keys, alias, feature-flagged key policy (admins/users/service principals), multi-region opt-in. Fintech-safe defaults (annual rotation, 30-day deletion window, kms:ViaService gating).

Production-grade AWS IAM Terraform module: service roles (Lambda/EC2/ECS/EKS), cross-account assume roles, account baseline (password policy, alias, Access Analyzer).

EKS managed node group Terraform module — fintech-hardened (encrypted disks, IMDSv2, SSM, Graviton). Cloudposse-standard, native. Part of the Devotica catalog.

Production-grade AWS Application Load Balancer Terraform module: multi-listener (HTTPS+redirect+fixed-response), multi-target-group, fintech-safe defaults (TLS 1.3 policy, drop_invalid_header_fields, desync defensive, deletion protection).

AWS Secrets Manager Terraform module — fintech-hardened (KMS, rotation, resource policies, replicas). Part of the Devotica catalog.

ElastiCache for Redis Terraform module — fintech-hardened, HA by default. Part of the Devotica catalog.

Amazon EKS control-plane Terraform module — fintech-hardened, derived from cloudposse/terraform-aws-eks-cluster. Part of the Devotica catalog.

Production-grade AWS ECS Fargate service Terraform module: single-container service in private subnets, optional ALB attach + autoscaling, KMS-encrypted logs, inline IAM roles, fintech-safe defaults (private networking, ECS Exec off, read-only root fs, ARM64).

terraform-aws-vpc

Production-grade AWS RDS Terraform module (single-instance Postgres/MySQL/MariaDB) with fintech-safe defaults: forced storage encryption via KMS, AWS-managed master password, IAM database auth, Multi-AZ, deletion protection, refuses publicly_accessible.