Phase 1: provision the EKS management cluster + core AWS (VPC, KMS for Vault auto-unseal later, Route53 public zonem Jump Hostm EKS cluster) using Terragrunt/Terraform with an S3 + DynamoDB backend.

Quickstart (dev)

1. Export AWS creds with admin permissions to your target account.
2. Create the remote state infra (S3 bucket + DynamoDB table) or reuse existing.
3. Edit terragrunt/terragrunt.hcl backend block
4. Apply stacks in order:

terragrunt run-all plan
terragrunt run-all apply