docs: Add new AWS SES and CloudFront Redirect modules, and update existing modules.

.github/workflows/codeql.yaml

@@ -0,0 +1,39 @@
+name: CodeQL
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+  schedule:
+    - cron: '45 13 * * *'
+
+jobs:
+  analyze:
+    name: Analyze (${{ matrix.language }})
+    runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
+    permissions:
+      security-events: write
+      packages: read
+      actions: read
+      contents: read
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - language: actions
+            build_mode: none
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v4
+        with:
+          languages: ${{ matrix.language }}
+          build-mode: ${{ matrix.build-mode }}
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v4
+        with:
+          category: "/language:${{matrix.language}}"

.github/workflows/docs.yaml

@@ -21,22 +21,22 @@ jobs:
     environment: ${{ inputs.environment || 'docs-dev' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           submodules: true
       - name: Copy assets from submodules
         run: rsync -av --progress */**/docs/assets/ docs/assets --exclude .git --exclude .idea --exclude docs
       - name: Set up AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4
+        uses: aws-actions/configure-aws-credentials@v6
         with:
           aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
           aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
           aws-region: ${{ env.AWS_REGION || 'us-east-1' }}
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: 3.x
       - run: echo "cache_id=$(date --utc '+%V')" >> $GITHUB_ENV
-      - uses: actions/cache@v4
+      - uses: actions/cache@v5
         with:
           key: mkdocs-material-${{ env.cache_id }}
           path: .cache

.gitmodules

@@ -37,3 +37,9 @@
 [submodule "aws/ssm_outputs"]
 	path = aws/ssm_outputs
 	url = git@github.com:codeforamerica/tofu-modules-aws-ssm-outputs.git
+[submodule "aws/ses"]
+	path = aws/ses
+	url = git@github.com:codeforamerica/tofu-modules-aws-ses.git
+[submodule "aws/cloudfront_redirect"]
+	path = aws/cloudfront_redirect
+	url = git@github.com:codeforamerica/tofu-modules-aws-cloudfront-redirect.git

Dockerfile

@@ -1,4 +1,4 @@
-FROM squidfunk/mkdocs-material:9.5
+FROM squidfunk/mkdocs-material:9.7
 
 # Install PlantUML so we can render UML diagrams.
 RUN pip install markdown-callouts mdx_truly_sane_lists mkdocs-nav-weight plantuml_markdown

README.md

@@ -10,18 +10,20 @@ terraform.
 ## Modules
 
 | Provider | Module                                         | Description                                                              | Latest Version                                                                        |
-|----------|------------------------------------------------|--------------------------------------------------------------------------|---------------------------------------------------------------------------------------|
+| -------- | ---------------------------------------------- | ------------------------------------------------------------------------ | ------------------------------------------------------------------------------------- |
 | Aptible  | [managed_endpoint][aptible-managed-endpoint]   | Managed HTTPS endpoint for Aptible.                                      | [![GitHub Release][aptible-managed-endpoint-badge]][aptible-managed-endpoint-release] |
 | AWS      | [backend][aws-backend]                         | S3 storage backend for tfstate.                                          | [![GitHub Release][aws-backend-badge]][aws-backend-release]                           |
+| AWS      | [cloudfront_redirect][aws-cloudfront-redirect] | CloudFront distribution redirects traffic to a different URL.            | [![GitHub Release][aws-cloudfront-redirect-badge]][aws-cloudfront-redirect-release]   |
 | AWS      | [cloudfront_waf][aws-cloudfront-waf]           | CloudFront distribution that passes traffic through WAF without caching. | [![GitHub Release][aws-cloudfront-waf-badge]][aws-cloudfront-waf-release]             |
 | AWS      | [doppler][aws-doppler]                         | Doppler sync for AWS Secrets Manager.                                    | [![GitHub Release][aws-doppler-badge]][aws-doppler-release]                           |
 | AWS      | [fargate_service][aws-fargate-service]         | ECS Fargate container hosting service.                                   | [![GitHub Release][aws-fargate-service-badge]][aws-fargate-service-release]           |
 | AWS      | [logging][aws-logging]                         | Basic logging configurations for AWS.                                    | [![GitHub Release][aws-logging-badge]][aws-logging-release]                           |
 | AWS      | [secrets][aws-secrets]                         | Manage secrets using AWS Secrets Manager.                                | [![GitHub Release][aws-secrets-badge]][aws-secrets-release]                           |
 | AWS      | [serverless_database][aws-serverless-database] | Aurora Serverless database cluster.                                      | [![GitHub Release][aws-serverless-database-badge]][aws-serverless-database-release]   |
+| AWS      | [ses][aws-ses]                                 | Configure and Amazon Simple Email Service (SES) for sending email.       | [![GitHub Release][aws-ses-badge]][aws-ses-release]                                   |
 | AWS      | [ssm_bastion][aws-ssm-bastion]                 | Use Systems Manager (SSM) and EC2 as a bastion.                          | [![GitHub Release][aws-ssm-bastion-badge]][aws-ssm-bastion-release]                   |
 | AWS      | [ssm_inputs][aws-ssm-inputs]                   | Use SSM parameter store to read inputs for your infrastructure.          | [![GitHub Release][aws-ssm-inputs-badge]][aws-ssm-inputs-release]                     |
-| AWS      | [ssm_outputs][aws-ssm-outputs]                 | Use SSM parameter store to store outputs to be used by other confgs.     | [![GitHub Release][aws-ssm-outputs-badge]][aws-ssm-outputs-release]                   |
+| AWS      | [ssm_outputs][aws-ssm-outputs]                 | Use SSM parameter store to store outputs to be used by other configs.    | [![GitHub Release][aws-ssm-outputs-badge]][aws-ssm-outputs-release]                   |
 | AWS      | [vpc][aws-vpc]                                 | AWS VPC configuration with networking.                                   | [![GitHub Release][aws-vpc-badge]][aws-vpc-release]                                   |
 | Datadog  | [waf][datadog-waf]                             | Datadog dashboard for monitoring AWS WAF.                                | [![GitHub Release][datadog-waf-badge]][datadog-waf-release]                           |
 
@@ -36,6 +38,9 @@ repository, or any of the OpenTofu module repositories.
 [aws-backend]: https://github.com/codeforamerica/tofu-modules-aws-backend
 [aws-backend-badge]: https://img.shields.io/github/v/release/codeforamerica/tofu-modules-aws-backend?logo=github&label=Latest%20Release
 [aws-backend-release]: https://github.com/codeforamerica/tofu-modules-aws-backend/releases/latest
+[aws-cloudfront-redirect]: https://github.com/codeforamerica/tofu-modules-aws-cloudfront-redirect
+[aws-cloudfront-redirect-badge]: https://img.shields.io/github/v/release/codeforamerica/tofu-modules-aws-cloudfront-redirect?logo=github&label=Latest%20Release
+[aws-cloudfront-redirect-release]: https://github.com/codeforamerica/tofu-modules-aws-cloudfront-redirect/releases/latest
 [aws-cloudfront-waf]: https://github.com/codeforamerica/tofu-modules-aws-cloudfront-waf
 [aws-cloudfront-waf-badge]: https://img.shields.io/github/v/release/codeforamerica/tofu-modules-aws-cloudfront-waf?logo=github&label=Latest%20Release
 [aws-cloudfront-waf-release]: https://github.com/codeforamerica/tofu-modules-aws-cloudfront-waf/releases/latest
@@ -54,6 +59,9 @@ repository, or any of the OpenTofu module repositories.
 [aws-serverless-database]: https://github.com/codeforamerica/tofu-modules-aws-serverless-database
 [aws-serverless-database-badge]: https://img.shields.io/github/v/release/codeforamerica/tofu-modules-aws-serverless-database?logo=github&label=Latest%20Release
 [aws-serverless-database-release]: https://github.com/codeforamerica/tofu-modules-aws-serverless-database/releases/latest
+[aws-ses]: https://github.com/codeforamerica/tofu-modules-aws-ses
+[aws-ses-badge]: https://img.shields.io/github/v/release/codeforamerica/tofu-modules-aws-ses?logo=github&label=Latest%20Release
+[aws-ses-release]: https://github.com/codeforamerica/tofu-modules-aws-ses/releases/latest
 [aws-ssm-bastion]: https://github.com/codeforamerica/tofu-modules-aws-ssm-bastion
 [aws-ssm-bastion-badge]: https://img.shields.io/github/v/release/codeforamerica/tofu-modules-aws-ssm-bastion?logo=github&label=Latest%20Release
 [aws-ssm-bastion-release]: https://github.com/codeforamerica/tofu-modules-aws-ssm-bastion/releases/latest

docs/index.md

@@ -5,12 +5,14 @@ title: Home
 
 [aptible-managed-endpoint]: modules/aptible/managed-endpoint.md
 [aws-backend]: modules/aws/backend.md
+[aws-cloudfront-redirect]: modules/aws/cloudfront-redirect.md
 [aws-cloudfront-waf]: modules/aws/cloudfront-waf.md
 [aws-doppler]: modules/aws/doppler/index.md
 [aws-fargate-service]: modules/aws/fargate-service.md
 [aws-logging]: modules/aws/logging.md
 [aws-secrets]: modules/aws/secrets.md
 [aws-serverless-database]: modules/aws/serverless-database.md
+[aws-ses]: modules/aws/ses.md
 [aws-ssm-bastion]: modules/aws/ssm-bastion.md
 [aws-ssm-inputs]: modules/aws/ssm-inputs.md
 [aws-ssm-outputs]: modules/aws/ssm-outputs.md

docs/modules/aws/cloudfront-redirect.md

@@ -0,0 +1,4 @@
+---
+title: CloudFront Redirect
+---
+--8<-- "aws/cloudfront_redirect/README.md"

docs/modules/aws/ses.md

@@ -0,0 +1,6 @@
+---
+title: SES
+---
+--8<-- "aws/ses/README.md"
+
+[aws_fargate_service]: fargate-service.md