Reference architecture
Multi-cloud infrastructure as code
Reusable Terraform modules composed per environment with Terragrunt; every change is a reviewed plan applied only from the pipeline.
Multi-cloud infrastructure as code
01
Modules
- Terraform
- Versioned
02
Environments
- Terragrunt
- dev · stage · prod
03
Plan
- On every PR
- Posted for review
04
Apply
- Pipeline only
- Short-lived creds
05
Clouds
- AWS · GCP
- DigitalOcean
State plane
Remote state · Encrypted · Locked
Design decisions
DECISION 1
Reviewers approve the plan, not the intent.
DECISION 2
Modules are versioned so environments upgrade deliberately, not accidentally.
DECISION 3
No applies from laptops; credentials are short-lived and pipeline-scoped.
Components
- Modules
- Terraform · Versioned
- Environments
- Terragrunt · dev · stage · prod
- Plan
- On every PR · Posted for review
- Apply
- Pipeline only · Short-lived creds
- Clouds
- AWS · GCP · DigitalOcean