ZonedAccuracy Terraform Cloud Infrastructure

Production-style Infrastructure-as-Code project for provisioning secure, modular Google Cloud infrastructure using Terraform.

Overview

This repository demonstrates the design and deployment of cloud infrastructure for ZonedAccuracy using Terraform and Google Cloud Platform.

The infrastructure is organized into reusable modules for networking, IAM, compute, and storage with separate development and production environment configurations.

Architecture

                       Google Cloud Platform
                                |
                         ZonedAccuracy
                                |
          +---------------------+---------------------+
          |                                           |
     Custom VPC                                Cloud Storage
zonedaccuracy-dev-vpc                         Private Bucket
          |                                     Versioning
          |                                  Lifecycle Rules
     10.10.0.0/24
        Subnet
          |
          v
    Compute Engine
zonedaccuracy-dev-app
          |
     Internal IP
          |
    Shielded VM
    Secure Boot
    vTPM
    Integrity Monitoring
    OS Login

                         IAM
                          |
              Terraform Service Account
                          |
                 Network Administration
                 Security Administration

Infrastructure Components

Networking

• Custom Google Cloud VPC
• Custom subnet architecture
• Private Google API access
• Internal firewall rules
• Regional routing

Compute

• Google Compute Engine
• Private internal networking
• Shielded VM
• Secure Boot
• Virtual Trusted Platform Module (vTPM)
• Integrity monitoring
• OS Login
• Dedicated service account

IAM

• Terraform-managed service account
• Explicit IAM role assignments
• Network administration permissions
• Security administration permissions

Storage

• Google Cloud Storage
• Uniform bucket-level access
• Public access prevention
• Object versioning
• Automated storage lifecycle policies

Terraform Modules

modules/
├── compute/
│   ├── main.tf
│   ├── outputs.tf
│   └── variables.tf
├── iam/
│   ├── main.tf
│   ├── outputs.tf
│   └── variables.tf
├── network/
│   ├── main.tf
│   ├── outputs.tf
│   └── variables.tf
└── storage/
    ├── main.tf
    ├── outputs.tf
    └── variables.tf

Environments

Environment configuration examples are provided for:

• Development
• Production

environments/
├── dev/
│   └── terraform.tfvars.example
└── prod/
    └── terraform.tfvars.example

Sensitive .tfvars files and Terraform state are excluded from source control.

Terraform Workflow

Initialize:

terraform init

Format:

terraform fmt -recursive

Validate:

terraform validate

Review infrastructure changes:

terraform plan

Deploy:

terraform apply

Security Controls

The infrastructure implements:

• Private compute networking
• Public storage access prevention
• Uniform bucket-level permissions
• Dedicated service accounts
• IAM role-based access control
• Shielded VM protections
• Secure Boot
• vTPM
• Integrity monitoring
• OS Login
• Terraform state exclusion from Git
• Secret and credential exclusion from Git

Technologies

• Terraform
• Google Cloud Platform
• Google Compute Engine
• Google Cloud VPC
• Google Cloud IAM
• Google Cloud Storage
• Git
• GitHub

Portfolio

This repository is part of the ZonedAccuracy Cloud Portfolio, demonstrating practical Cloud Engineering, Infrastructure-as-Code, DevOps, security, and automation skills.

ZonedAccuracy.com